Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa
File:                     34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa (raw, json)
Hash identifier:          pmKnELDCeIcwFqm2hi+zVwcojacSTKFeGWh2eh31koY=
Subject key identifier:   ED:4B:AF:04:FA:DC:09:7E:8F:64:C4:EB:B8:BE:95:3D:68:3A:1A:71
Certificate issuer:       /CN=1BE8995FC9C395145A97456B64442AC68C0DF4EB
Certificate serial:       76BD5F413045C0A95251A78A2F121B963ABD94E6
Authority key identifier: 1B:E8:99:5F:C9:C3:95:14:5A:97:45:6B:64:44:2A:C6:8C:0D:F4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa
Signing time:             Sun 03 Nov 2024 18:59:57 +0000
ROA not before:           Sun 03 Nov 2024 18:54:57 +0000
ROA not after:            Sun 02 Nov 2025 18:59:57 +0000
asID:                     268235
IP address blocks:        45.236.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl
                          rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 05:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bd:5f:41:30:45:c0:a9:52:51:a7:8a:2f:12:1b:96:3a:bd:94:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE8995FC9C395145A97456B64442AC68C0DF4EB
        Validity
            Not Before: Nov  3 18:54:57 2024 GMT
            Not After : Nov  2 18:59:57 2025 GMT
        Subject: CN=ED4BAF04FADC097E8F64C4EBB8BE953D683A1A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:0f:84:d0:0a:31:0e:41:41:09:3e:8a:62:
                    ab:1a:5f:93:23:d3:18:7f:62:14:60:b3:90:e9:c5:
                    53:29:8c:4f:56:67:a9:ae:00:1b:a4:2c:bd:9c:44:
                    cc:2d:e3:93:5c:06:ff:10:be:58:4d:8c:f9:3c:d1:
                    34:dc:07:bb:2e:9f:d0:e9:c3:e8:25:90:56:29:26:
                    e7:ea:fd:ec:82:41:64:a2:db:89:2c:af:7b:03:f6:
                    b0:d8:91:b5:b3:0b:e2:06:be:14:10:4e:7a:ed:f9:
                    3a:66:fc:46:e0:84:07:b9:42:9b:44:01:32:7b:ae:
                    df:7d:1c:fe:93:b3:95:f1:a3:38:dc:62:b8:f8:2c:
                    3d:2f:55:68:a7:16:81:10:b7:f5:a8:27:03:dc:3e:
                    67:7d:73:8f:db:5f:4a:5e:d6:dd:fb:22:15:4a:fa:
                    54:27:60:2b:19:21:16:d1:dc:08:20:ae:3c:9a:21:
                    97:8c:b8:0f:76:54:72:96:49:5f:73:7f:67:18:ed:
                    db:ea:cb:15:6a:67:e4:77:72:8a:9b:8a:04:c0:7f:
                    a5:a2:a0:54:f5:97:65:61:b7:d4:2d:7c:50:30:08:
                    8b:d3:95:ae:52:2e:b8:71:02:33:82:db:b8:9c:01:
                    9c:79:55:c2:38:ce:d4:35:78:3e:d0:e0:b8:27:23:
                    60:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4B:AF:04:FA:DC:09:7E:8F:64:C4:EB:B8:BE:95:3D:68:3A:1A:71
            X509v3 Authority Key Identifier:
                keyid:1B:E8:99:5F:C9:C3:95:14:5A:97:45:6B:64:44:2A:C6:8C:0D:F4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:9c:de:ce:c1:98:0f:97:e1:5f:f6:76:46:76:39:ff:75:84:
         3b:14:55:e4:e9:23:82:dc:4c:67:1a:18:03:30:b2:8e:27:16:
         95:d8:74:4a:93:1f:3d:a5:13:52:06:b9:6b:e9:e7:b2:89:1e:
         ef:fb:e9:5c:d1:42:b6:c5:fb:88:db:f5:30:58:56:55:77:f3:
         68:1a:a0:08:03:3d:76:b1:4e:48:76:ad:15:1b:5a:a1:5a:3b:
         25:b4:d8:6c:db:79:79:61:35:89:f6:b9:53:b2:0b:fd:bf:84:
         91:0b:44:d6:a0:50:e0:15:74:84:bd:54:bc:af:b2:f9:f8:ca:
         ac:f2:05:c8:0a:23:3b:5d:52:0e:92:68:2a:0b:ed:56:10:22:
         f2:6f:17:ff:01:fd:6a:93:79:5e:88:8b:2d:6f:a6:93:58:3f:
         54:8a:dd:2a:f8:9e:8f:51:34:a3:58:4c:67:05:15:91:ac:11:
         0d:58:c9:0f:1d:e1:28:61:ac:e6:27:3d:f4:41:66:e7:40:ed:
         62:1d:8b:1d:cc:c7:03:c2:91:27:3c:c3:cb:24:71:b5:4b:28:
         ec:d0:96:a5:0a:28:3c:5c:e3:ac:1b:fa:ee:2b:48:60:78:df:
         94:ed:3f:29:74:f7:33:7b:9c:01:1c:6a:a0:2e:32:b1:93:76:
         bb:cb:76:24
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdr1fQTBFwKlSUaeKLxIbljq9lOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJFODk5NUZDOUMzOTUxNDVBOTc0NTZCNjQ0NDJBQzY4
QzBERjRFQjAeFw0yNDExMDMxODU0NTdaFw0yNTExMDIxODU5NTdaMDMxMTAvBgNV
BAMTKEVENEJBRjA0RkFEQzA5N0U4RjY0QzRFQkI4QkU5NTNENjgzQTFBNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxg+E0AoxDkFBCT6KYqsaX5Mj
0xh/YhRgs5DpxVMpjE9WZ6muABukLL2cRMwt45NcBv8QvlhNjPk80TTcB7sun9Dp
w+glkFYpJufq/eyCQWSi24ksr3sD9rDYkbWzC+IGvhQQTnrt+Tpm/EbghAe5QptE
ATJ7rt99HP6Ts5XxozjcYrj4LD0vVWinFoEQt/WoJwPcPmd9c4/bX0pe1t37IhVK
+lQnYCsZIRbR3AggrjyaIZeMuA92VHKWSV9zf2cY7dvqyxVqZ+R3coqbigTAf6Wi
oFT1l2Vht9QtfFAwCIvTla5SLrhxAjOC27icAZx5VcI4ztQ1eD7Q4LgnI2CxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7UuvBPrcCX6PZMTruL6VPWg6GnEwHwYDVR0j
BBgwFoAUG+iZX8nDlRRal0VrZEQqxowN9OswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzNua0pMZzZzQ29rcVlxRlZLNjNhMTl4c0VpaHJHMUxNb05YOEc1S002
S3IvMC8xQkU4OTk1RkM5QzM5NTE0NUE5NzQ1NkI2NDQ0MkFDNjhDMERGNEVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCRTg5OTVGQzlDMzk1MTQ1
QTk3NDU2QjY0NDQyQUM2OEMwREY0RUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0czbmtKTGc2c0Nva3FZcUZWSzYzYTE5eHNFaWhyRzFMTW9OWDhHNUtNNktyLzAv
MzQzNTJlMzIzMzM2MmUzMTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7HQwDQYJKoZIhvcNAQELBQADggEBAI+c3s7B
mA+X4V/2dkZ2Of91hDsUVeTpI4LcTGcaGAMwso4nFpXYdEqTHz2lE1IGuWvp57KJ
Hu/76VzRQrbF+4jb9TBYVlV382gaoAgDPXaxTkh2rRUbWqFaOyW02GzbeXlhNYn2
uVOyC/2/hJELRNagUOAVdIS9VLyvsvn4yqzyBcgKIztdUg6SaCoL7VYQIvJvF/8B
/WqTeV6Iiy1vppNYP1SK3Sr4no9RNKNYTGcFFZGsEQ1YyQ8d4ShhrOYnPfRBZudA
7WIdix3MxwPCkSc8w8skcbVLKOzQlqUKKDxc46wb+u4rSGB435TtPyl09zN7nAEc
aqAuMrGTdrvLdiQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:42 2025 by rpki-client