Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/34352e3136312e39362e302f32322d3232203d3e20323638343633.roa
File:                     34352e3136312e39362e302f32322d3232203d3e20323638343633.roa (raw, json)
Hash identifier:          3bBYDg2fSEVsngNaiBDA9qUt7JCVV84TWrGNzjTbSHE=
Subject key identifier:   EA:1B:0B:D6:98:FC:DD:49:0B:36:2F:88:E9:3B:66:51:A3:CC:D5:F6
Certificate issuer:       /CN=B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF
Certificate serial:       3913BD2C944CFAE272CA2FF84AE206FCBA37C047
Authority key identifier: B0:58:4F:55:CE:CD:C5:88:EB:5A:4A:6C:25:B8:E8:86:20:BF:8A:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/34352e3136312e39362e302f32322d3232203d3e20323638343633.roa
Signing time:             Thu 04 Apr 2024 10:14:52 +0000
ROA not before:           Thu 04 Apr 2024 10:09:52 +0000
ROA not after:            Thu 03 Apr 2025 10:14:52 +0000
asID:                     268463
IP address blocks:        45.161.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.crl
                          rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:13:bd:2c:94:4c:fa:e2:72:ca:2f:f8:4a:e2:06:fc:ba:37:c0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF
        Validity
            Not Before: Apr  4 10:09:52 2024 GMT
            Not After : Apr  3 10:14:52 2025 GMT
        Subject: CN=EA1B0BD698FCDD490B362F88E93B6651A3CCD5F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:a0:f0:24:c7:a2:e1:74:f1:33:b4:82:04:
                    1e:06:a9:cd:6e:d6:a0:8b:03:91:4a:1b:78:68:88:
                    17:3c:53:12:c0:78:98:dd:74:4e:13:5c:62:38:47:
                    5c:47:d3:f2:84:82:fc:2e:80:e2:c5:1a:61:23:70:
                    08:8e:23:6e:8f:01:dd:b6:52:1a:d4:de:e0:88:4d:
                    8c:40:ed:6f:b2:0e:de:f0:e4:d3:b7:81:a5:ee:c5:
                    39:69:b6:47:e8:ab:77:20:02:73:1d:ac:01:31:fd:
                    23:12:a3:aa:6c:c0:7b:04:2c:da:dc:aa:c5:53:13:
                    f1:ff:5f:5d:79:d4:6c:6a:67:77:e9:5a:9e:db:5e:
                    63:0a:70:bf:0f:7f:80:c8:bd:49:a2:91:bd:ba:b3:
                    d2:1e:50:b6:ce:0a:9a:70:0a:cb:b2:04:fe:30:a5:
                    43:9d:5d:18:bd:4b:c4:ab:d8:c5:bb:f1:35:f8:e2:
                    42:9d:74:1d:8e:c2:da:8a:e3:aa:9c:0c:cc:7a:93:
                    24:d3:01:3c:8c:ee:96:6f:a6:01:a1:51:50:89:44:
                    2e:bc:fe:89:41:0d:ea:af:4e:42:f5:74:58:fd:7a:
                    8f:c1:86:f1:20:e2:62:d0:5e:fc:5f:7c:af:fc:c3:
                    34:9e:0b:59:d2:91:e0:b1:6f:ec:21:9a:e0:6f:43:
                    0e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1B:0B:D6:98:FC:DD:49:0B:36:2F:88:E9:3B:66:51:A3:CC:D5:F6
            X509v3 Authority Key Identifier:
                keyid:B0:58:4F:55:CE:CD:C5:88:EB:5A:4A:6C:25:B8:E8:86:20:BF:8A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/34352e3136312e39362e302f32322d3232203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:7a:6f:3b:e3:ec:d1:02:72:15:3e:06:cc:0b:87:e8:56:c4:
         18:69:0c:a1:7b:d8:eb:26:62:9a:b6:8a:0e:b5:c9:c2:7f:fa:
         0c:c4:bb:7f:c3:29:b0:50:0a:cc:b9:a5:06:a8:ab:56:3c:44:
         91:d9:15:56:cc:4d:3c:cf:db:ee:e5:5d:bf:b0:8f:ed:be:d7:
         0b:50:6e:5b:cb:13:ff:54:13:b2:96:7e:62:25:1e:2f:b0:39:
         aa:3b:bd:44:e7:42:b1:08:3d:df:4d:56:9e:71:43:10:8e:51:
         34:8e:6b:67:ea:59:1a:21:7d:83:51:84:4e:ea:74:90:51:1d:
         fd:35:69:fd:96:04:96:db:ef:31:d9:b9:7f:c5:6d:44:94:0e:
         a3:7f:bd:07:b4:22:fe:10:ce:75:b9:ec:bf:c2:b8:1d:28:05:
         c1:25:ff:b6:c2:ea:57:fc:b4:5f:96:64:7b:1e:f8:28:2b:17:
         d6:5f:58:bf:15:8e:b9:21:f6:1c:ca:5a:b6:8c:a3:0e:61:0c:
         18:bd:06:b6:09:64:e2:d2:d7:29:59:88:13:7c:03:62:be:f7:
         fd:17:88:30:2d:41:a3:f7:22:82:87:8e:73:d6:ad:c6:14:1b:
         db:c4:51:49:4a:45:b1:fc:de:4f:c6:70:72:df:cc:f7:7a:d9:
         eb:aa:76:89
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUORO9LJRM+uJyyi/4SuIG/Lo3wEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA1ODRGNTVDRUNEQzU4OEVCNUE0QTZDMjVCOEU4ODYy
MEJGOEFFRjAeFw0yNDA0MDQxMDA5NTJaFw0yNTA0MDMxMDE0NTJaMDMxMTAvBgNV
BAMTKEVBMUIwQkQ2OThGQ0RENDkwQjM2MkY4OEU5M0I2NjUxQTNDQ0Q1RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3f6DwJMei4XTxM7SCBB4Gqc1u
1qCLA5FKG3hoiBc8UxLAeJjddE4TXGI4R1xH0/KEgvwugOLFGmEjcAiOI26PAd22
UhrU3uCITYxA7W+yDt7w5NO3gaXuxTlptkfoq3cgAnMdrAEx/SMSo6pswHsELNrc
qsVTE/H/X1151GxqZ3fpWp7bXmMKcL8Pf4DIvUmikb26s9IeULbOCppwCsuyBP4w
pUOdXRi9S8Sr2MW78TX44kKddB2OwtqK46qcDMx6kyTTATyM7pZvpgGhUVCJRC68
/olBDeqvTkL1dFj9eo/BhvEg4mLQXvxffK/8wzSeC1nSkeCxb+whmuBvQw5FAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6hsL1pj83UkLNi+I6TtmUaPM1fYwHwYDVR0j
BBgwFoAUsFhPVc7NxYjrWkpsJbjohiC/iu8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnNNd3BvV1FERTlRMlE0YVRGR0hxdjZqZGcybTdZRmNENjlOcUs2ZTJm
S3MvMS9CMDU4NEY1NUNFQ0RDNTg4RUI1QTRBNkMyNUI4RTg4NjIwQkY4QUVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwNTg0RjU1Q0VDREM1ODhF
QjVBNEE2QzI1QjhFODg2MjBCRjhBRUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZzTXdwb1dRREU5UTJRNGFURkdIcXY2amRnMm03WUZjRDY5TnFLNmUyZktzLzEv
MzQzNTJlMzEzNjMxMmUzOTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzQzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaFgMA0GCSqGSIb3DQEBCwUAA4IBAQAzem874+zR
AnIVPgbMC4foVsQYaQyhe9jrJmKatooOtcnCf/oMxLt/wymwUArMuaUGqKtWPESR
2RVWzE08z9vu5V2/sI/tvtcLUG5byxP/VBOyln5iJR4vsDmqO71E50KxCD3fTVae
cUMQjlE0jmtn6lkaIX2DUYRO6nSQUR39NWn9lgSW2+8x2bl/xW1ElA6jf70HtCL+
EM51uey/wrgdKAXBJf+2wupX/LRflmR7HvgoKxfWX1i/FY65IfYcylq2jKMOYQwY
vQa2CWTi0tcpWYgTfANivvf9F4gwLUGj9yKCh45z1q3GFBvbxFFJSkWx/N5PxnBy
38z3etnrqnaJ
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:14 2024 by rpki-client on console-ams.rpki-client.org