Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32322d3234203d3e20323638343532.roa
File:                     34352e3136302e3234342e302f32322d3234203d3e20323638343532.roa (raw, json)
Hash identifier:          yOxVyRQFSeY8Lygut+cfOKJwCIWKInVXVXTp+GbXE7Q=
Subject key identifier:   32:7C:CF:DC:9F:BE:C1:E2:8D:07:B4:AE:FA:B8:D1:7E:8C:42:01:13
Certificate issuer:       /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial:       3D5B07FEF9E26C56EDF11C89F9AC18E09C54FD53
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32322d3234203d3e20323638343532.roa
Signing time:             Thu 04 Apr 2024 08:39:49 +0000
ROA not before:           Thu 04 Apr 2024 08:34:49 +0000
ROA not after:            Thu 03 Apr 2025 08:39:49 +0000
asID:                     268452
IP address blocks:        45.160.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
                          rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5b:07:fe:f9:e2:6c:56:ed:f1:1c:89:f9:ac:18:e0:9c:54:fd:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
        Validity
            Not Before: Apr  4 08:34:49 2024 GMT
            Not After : Apr  3 08:39:49 2025 GMT
        Subject: CN=327CCFDC9FBEC1E28D07B4AEFAB8D17E8C420113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:07:f1:70:ae:21:36:ad:ec:27:ef:da:6a:
                    5f:11:ac:7a:64:2e:06:f4:39:35:57:b4:28:1f:bb:
                    cb:7e:f1:1e:81:2a:e2:ea:e0:f6:c2:98:2a:8b:3c:
                    09:2e:9f:30:4a:28:db:ab:64:4a:d7:61:82:3d:fe:
                    a9:36:b0:33:98:4e:9c:95:90:79:57:7e:fc:82:ae:
                    c3:2f:2d:16:8e:37:6b:1f:7c:33:58:20:25:6e:0d:
                    28:7d:b5:40:10:e3:93:02:1b:00:d7:2f:a2:5f:9b:
                    97:39:ce:53:9d:0c:52:05:f4:c0:f8:e1:70:f6:83:
                    79:e7:65:86:43:88:87:52:2e:25:2e:b8:bc:7a:34:
                    8e:b7:0a:69:3f:25:74:62:73:69:e6:b7:10:e8:b5:
                    4e:28:f1:7f:48:03:be:11:8a:47:41:16:03:e1:34:
                    be:70:64:bf:99:e3:9f:4f:22:24:ba:8f:79:4e:8c:
                    d3:b9:a1:68:20:26:b0:0f:8f:6d:4a:b7:2e:89:4c:
                    24:38:ab:1f:9e:55:44:67:0e:b4:a2:1c:b8:53:ce:
                    d5:2c:00:7a:4a:23:3a:91:c0:5b:b5:ce:ca:ec:ec:
                    ad:61:6c:71:b9:3f:bc:59:a4:82:32:fd:3f:20:6d:
                    1a:c8:59:13:de:4d:79:05:28:46:77:c0:63:b2:cf:
                    38:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7C:CF:DC:9F:BE:C1:E2:8D:07:B4:AE:FA:B8:D1:7E:8C:42:01:13
            X509v3 Authority Key Identifier:
                keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32322d3234203d3e20323638343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:06:1a:7e:32:9c:f9:a0:55:0f:16:cf:6a:0f:9b:71:91:0b:
         3d:6e:b3:ef:f1:af:29:55:9d:68:e9:cb:4c:ad:f7:20:24:56:
         64:fc:07:97:a6:b4:f0:c7:74:83:1c:cd:26:09:46:d5:b8:cc:
         95:15:cf:d4:1b:10:6d:ee:3c:7a:bc:5e:ac:be:56:e1:06:b9:
         9a:bb:3f:7b:c0:fd:15:87:12:a0:8b:96:17:1b:28:10:70:07:
         64:d0:81:18:a5:74:57:56:2a:0b:37:38:17:a1:8f:22:54:f1:
         e3:35:81:9b:7a:cd:2f:44:01:64:d9:7b:ac:5b:a3:31:44:7c:
         a6:b9:82:ed:8a:be:7a:6b:b1:4e:59:97:6c:ee:ba:a1:b8:f5:
         16:f7:74:76:e2:03:a3:14:8e:d9:54:f0:27:76:52:63:52:20:
         2e:f3:f8:65:a3:28:d5:c9:be:c9:65:f1:69:d7:57:41:5d:64:
         6b:21:bc:5a:09:35:bb:3c:a4:df:4d:e3:1a:77:43:f1:af:1e:
         3f:fb:73:48:e3:25:45:77:a4:81:0e:fa:89:dc:43:d4:ae:a4:
         7a:66:5f:72:c7:0e:2f:de:19:c5:ce:a9:c2:28:74:03:b7:f5:
         07:80:92:b8:eb:05:4f:a2:d1:73:35:08:6c:85:f8:a2:b5:1d:
         ed:b1:3d:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPVsH/vnibFbt8RyJ+awY4JxU/VMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQzOTg5NzYzMjI2OTE5ODhDQUJBNjQwQkJCMjg1NEFF
Q0RGNkI4NzAeFw0yNDA0MDQwODM0NDlaFw0yNTA0MDMwODM5NDlaMDMxMTAvBgNV
BAMTKDMyN0NDRkRDOUZCRUMxRTI4RDA3QjRBRUZBQjhEMTdFOEM0MjAxMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCytwfxcK4hNq3sJ+/aal8RrHpk
Lgb0OTVXtCgfu8t+8R6BKuLq4PbCmCqLPAkunzBKKNurZErXYYI9/qk2sDOYTpyV
kHlXfvyCrsMvLRaON2sffDNYICVuDSh9tUAQ45MCGwDXL6Jfm5c5zlOdDFIF9MD4
4XD2g3nnZYZDiIdSLiUuuLx6NI63Cmk/JXRic2nmtxDotU4o8X9IA74RikdBFgPh
NL5wZL+Z459PIiS6j3lOjNO5oWggJrAPj21Kty6JTCQ4qx+eVURnDrSiHLhTztUs
AHpKIzqRwFu1zsrs7K1hbHG5P7xZpIIy/T8gbRrIWRPeTXkFKEZ3wGOyzzg1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMnzP3J++weKNB7Su+rjRfoxCARMwHwYDVR0j
BBgwFoAUhDmJdjImkZiMq6ZAu7KFSuzfa4cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhIOXNpQWdDOTZIRjJYTlBZNjJZdFZQTVpISEwzMTIyMUNEbjhjWEpm
MzUvMS84NDM5ODk3NjMyMjY5MTk4OENBQkE2NDBCQkIyODU0QUVDREY2Qjg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0Mzk4OTc2MzIyNjkxOTg4
Q0FCQTY0MEJCQjI4NTRBRUNERjZCODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZISDlzaUFnQzk2SEYyWE5QWTYyWXRWUE1aSEhMMzEyMjFDRG44Y1hKZjM1LzEv
MzQzNTJlMzEzNjMwMmUzMjM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzNDM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItoPQwDQYJKoZIhvcNAQELBQADggEBAHoGGn4y
nPmgVQ8Wz2oPm3GRCz1us+/xrylVnWjpy0yt9yAkVmT8B5emtPDHdIMczSYJRtW4
zJUVz9QbEG3uPHq8Xqy+VuEGuZq7P3vA/RWHEqCLlhcbKBBwB2TQgRildFdWKgs3
OBehjyJU8eM1gZt6zS9EAWTZe6xbozFEfKa5gu2KvnprsU5Zl2zuuqG49Rb3dHbi
A6MUjtlU8Cd2UmNSIC7z+GWjKNXJvsll8WnXV0FdZGshvFoJNbs8pN9N4xp3Q/Gv
Hj/7c0jjJUV3pIEO+oncQ9SupHpmX3LHDi/eGcXOqcIodAO39QeAkrjrBU+i0XM1
CGyF+KK1He2xPQA=
-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:26 2024 by rpki-client on console-ams.rpki-client.org