Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/34352e3136302e3139332e302f32342d3234203d3e20323838343731.roa
File:                     34352e3136302e3139332e302f32342d3234203d3e20323838343731.roa (raw, json)
Hash identifier:          raqf1BL47LAexDfe2EnGh9uzIUNEVIJWoQZ8kXe3opc=
Subject key identifier:   53:02:F6:E1:EF:6C:B9:9C:C1:45:48:3A:0C:97:CC:59:F0:45:06:32
Certificate issuer:       /CN=04935EE7605C3D6FD1FEF381759D0F015EC30C14
Certificate serial:       4D2D62FB82417BC60501B64AAA8385B1A8B5F675
Authority key identifier: 04:93:5E:E7:60:5C:3D:6F:D1:FE:F3:81:75:9D:0F:01:5E:C3:0C:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/34352e3136302e3139332e302f32342d3234203d3e20323838343731.roa
Signing time:             Wed 20 Nov 2024 19:18:27 +0000
ROA not before:           Wed 20 Nov 2024 19:13:27 +0000
ROA not after:            Wed 19 Nov 2025 19:18:27 +0000
asID:                     288471
IP address blocks:        45.160.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.crl
                          rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2d:62:fb:82:41:7b:c6:05:01:b6:4a:aa:83:85:b1:a8:b5:f6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04935EE7605C3D6FD1FEF381759D0F015EC30C14
        Validity
            Not Before: Nov 20 19:13:27 2024 GMT
            Not After : Nov 19 19:18:27 2025 GMT
        Subject: CN=5302F6E1EF6CB99CC145483A0C97CC59F0450632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:e0:e9:1a:87:d7:ae:68:1f:4d:fd:c8:12:
                    25:43:ee:77:c5:db:1a:70:ea:7a:f1:af:89:6e:aa:
                    aa:b1:a7:38:51:df:ee:04:56:29:25:cd:cc:4b:11:
                    d0:66:b0:95:49:2f:a0:ff:43:7e:97:4a:12:34:74:
                    6b:24:06:c9:18:88:e6:60:dc:ac:7e:02:c7:89:71:
                    e2:4a:e4:55:59:50:02:fe:33:99:4c:09:e0:28:0f:
                    f8:d5:c0:94:36:98:37:8d:97:ff:2f:a8:8d:7e:03:
                    a6:e3:03:1a:a1:d7:6a:90:88:2e:04:46:ba:14:72:
                    82:83:9f:85:f2:7e:91:b8:55:f8:d2:20:e0:cf:ae:
                    3b:40:7b:9a:96:cd:d8:dc:f7:af:6a:40:4f:16:e0:
                    59:7b:d4:62:8c:74:a2:8b:8e:57:96:78:a7:3d:d9:
                    4b:72:c9:a9:da:54:8d:b1:29:d9:b3:5d:85:58:bc:
                    e6:24:63:e5:4f:0f:84:3a:77:b1:05:a1:49:6b:c0:
                    90:98:18:53:81:74:d8:5d:36:2a:ce:ca:61:9e:20:
                    b1:78:59:ad:ff:ac:ab:7f:31:77:28:e6:3b:22:67:
                    96:3f:df:1c:36:cd:93:20:9b:d7:68:f9:87:78:4e:
                    b9:73:7a:9a:a6:e0:13:a7:a8:4e:7a:07:be:ea:b4:
                    71:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:02:F6:E1:EF:6C:B9:9C:C1:45:48:3A:0C:97:CC:59:F0:45:06:32
            X509v3 Authority Key Identifier:
                keyid:04:93:5E:E7:60:5C:3D:6F:D1:FE:F3:81:75:9D:0F:01:5E:C3:0C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/34352e3136302e3139332e302f32342d3234203d3e20323838343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:c0:73:27:84:bc:31:19:c5:a0:59:3b:23:df:8d:f7:b3:95:
         e6:d9:cf:89:e5:e5:e7:b7:83:6c:99:56:18:53:d2:fe:fd:6b:
         63:d6:5e:46:2e:1a:d4:73:e6:90:8c:a8:c8:8d:52:1c:b9:bf:
         25:e7:05:0d:01:3a:aa:25:1a:28:77:d8:07:da:78:3d:a9:cd:
         f7:81:73:01:8b:70:27:26:90:f7:95:cc:54:7f:25:f9:f4:a2:
         5d:bf:82:11:f6:cc:bd:9b:0b:64:a9:3c:32:1e:6c:0a:c6:d0:
         fe:79:ff:52:7f:f5:25:fe:85:d9:67:d6:f8:e9:e0:2c:5b:dd:
         f7:93:22:8a:4f:8e:06:1c:56:bf:90:7a:69:db:46:05:70:54:
         5d:e3:ab:d2:fd:b7:f6:b4:43:71:ac:04:cd:42:77:2d:2c:64:
         1c:41:5a:75:32:85:cd:bf:8d:04:79:2f:bd:41:be:33:9d:7f:
         49:54:73:2c:f9:4a:1d:f8:93:e3:d5:c9:ac:8d:bd:d8:8e:27:
         12:6c:83:94:b2:e9:99:fd:32:5e:57:03:e6:eb:0d:e9:62:42:
         53:61:da:da:c9:f8:02:2d:21:ca:ac:0d:29:9e:84:3f:0b:79:
         12:bf:97:19:9d:f4:b3:4c:5e:1f:19:e7:9b:4b:6e:7a:2c:3b:
         80:f7:b0:5d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTS1i+4JBe8YFAbZKqoOFsai19nUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ5MzVFRTc2MDVDM0Q2RkQxRkVGMzgxNzU5RDBGMDE1
RUMzMEMxNDAeFw0yNDExMjAxOTEzMjdaFw0yNTExMTkxOTE4MjdaMDMxMTAvBgNV
BAMTKDUzMDJGNkUxRUY2Q0I5OUNDMTQ1NDgzQTBDOTdDQzU5RjA0NTA2MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtuDpGofXrmgfTf3IEiVD7nfF
2xpw6nrxr4luqqqxpzhR3+4EViklzcxLEdBmsJVJL6D/Q36XShI0dGskBskYiOZg
3Kx+AseJceJK5FVZUAL+M5lMCeAoD/jVwJQ2mDeNl/8vqI1+A6bjAxqh12qQiC4E
RroUcoKDn4XyfpG4VfjSIODPrjtAe5qWzdjc969qQE8W4Fl71GKMdKKLjleWeKc9
2UtyyanaVI2xKdmzXYVYvOYkY+VPD4Q6d7EFoUlrwJCYGFOBdNhdNirOymGeILF4
Wa3/rKt/MXco5jsiZ5Y/3xw2zZMgm9do+Yd4Trlzepqm4BOnqE56B77qtHGNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUwL24e9suZzBRUg6DJfMWfBFBjIwHwYDVR0j
BBgwFoAUBJNe52BcPW/R/vOBdZ0PAV7DDBQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnFhV1p1M3BvRmZYVUZYS2Q4Tk5pZU1zQVh0SGkyaHFFdFN5SzRyUlBZ
Y3QvMC8wNDkzNUVFNzYwNUMzRDZGRDFGRUYzODE3NTlEMEYwMTVFQzMwQzE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0OTM1RUU3NjA1QzNENkZE
MUZFRjM4MTc1OUQwRjAxNUVDMzBDMTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZxYVdadTNwb0ZmWFVGWEtkOE5OaWVNc0FYdEhpMmhxRXRTeUs0clJQWWN0LzAv
MzQzNTJlMzEzNjMwMmUzMTM5MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzgzNDM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtoMEwDQYJKoZIhvcNAQELBQADggEBAB3AcyeE
vDEZxaBZOyPfjfezlebZz4nl5ee3g2yZVhhT0v79a2PWXkYuGtRz5pCMqMiNUhy5
vyXnBQ0BOqolGih32AfaeD2pzfeBcwGLcCcmkPeVzFR/Jfn0ol2/ghH2zL2bC2Sp
PDIebArG0P55/1J/9SX+hdln1vjp4Cxb3feTIopPjgYcVr+QemnbRgVwVF3jq9L9
t/a0Q3GsBM1Cdy0sZBxBWnUyhc2/jQR5L71BvjOdf0lUcyz5Sh34k+PVyayNvdiO
JxJsg5Sy6Zn9Ml5XA+brDeliQlNh2trJ+AItIcqsDSmehD8LeRK/lxmd9LNMXh8Z
55tLbnosO4D3sF0=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org