Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/34352e3137372e38342e302f32322d3332203d3e20323639303333.roa
File:                     34352e3137372e38342e302f32322d3332203d3e20323639303333.roa (raw, json)
Hash identifier:          Iy0XcjhPPvIeIkGJAv0as6xAnsEWQN04YsKRwQ1nABQ=
Subject key identifier:   CB:EF:91:09:EB:A1:49:A8:7A:F5:5F:BB:3A:60:0B:DC:B0:22:9B:FA
Certificate issuer:       /CN=996BFE16B00A8EF9DDE555A91330A0BC74A38162
Certificate serial:       55851766E91C98BFB38069E8A0D599897B082D13
Authority key identifier: 99:6B:FE:16:B0:0A:8E:F9:DD:E5:55:A9:13:30:A0:BC:74:A3:81:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/34352e3137372e38342e302f32322d3332203d3e20323639303333.roa
Signing time:             Thu 04 Apr 2024 02:25:10 +0000
ROA not before:           Thu 04 Apr 2024 02:20:10 +0000
ROA not after:            Thu 03 Apr 2025 02:25:10 +0000
asID:                     269033
IP address blocks:        45.177.84.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.crl
                          rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:85:17:66:e9:1c:98:bf:b3:80:69:e8:a0:d5:99:89:7b:08:2d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996BFE16B00A8EF9DDE555A91330A0BC74A38162
        Validity
            Not Before: Apr  4 02:20:10 2024 GMT
            Not After : Apr  3 02:25:10 2025 GMT
        Subject: CN=CBEF9109EBA149A87AF55FBB3A600BDCB0229BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ec:4d:d4:60:67:b1:e4:65:55:f4:b5:af:6d:
                    ee:26:50:74:6e:c5:ae:be:aa:3a:b6:d4:c0:c9:df:
                    f4:7d:1c:e7:80:2f:c4:13:ee:a7:92:13:3a:aa:8c:
                    91:6e:43:a1:bb:91:9e:4d:53:0a:d6:38:ec:d8:ea:
                    3d:53:51:37:63:dc:3e:24:97:4b:20:44:b2:96:82:
                    4d:42:26:66:cf:da:d9:e6:fa:77:45:c7:41:04:8b:
                    da:9f:06:41:b2:3b:82:bb:e0:94:ee:31:ab:41:12:
                    00:0a:d3:f7:ec:e7:e3:e1:10:dd:71:1f:8f:9d:dc:
                    94:19:f4:4a:38:47:7e:c9:ba:cc:f0:d4:0e:6d:d5:
                    b5:60:e1:2a:90:6f:0f:93:e6:9d:99:e6:50:dd:fb:
                    3d:df:2d:15:ac:3f:05:38:3d:d1:14:4f:4e:af:60:
                    b4:51:dc:7c:e8:a3:f4:11:8e:ed:8e:1f:d2:c3:03:
                    ec:99:a6:fb:5c:db:54:b1:ee:f0:1b:1a:cb:aa:45:
                    77:c2:3e:d8:a0:90:47:7f:bb:cf:5c:d8:27:d2:b5:
                    d7:c1:6a:c8:bc:fc:f7:3b:2b:a7:94:92:9b:5e:9b:
                    14:11:84:21:2c:2a:98:f8:47:65:95:1c:26:d2:2b:
                    d1:be:39:40:85:ce:cd:60:71:59:d4:2b:b8:40:2c:
                    35:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EF:91:09:EB:A1:49:A8:7A:F5:5F:BB:3A:60:0B:DC:B0:22:9B:FA
            X509v3 Authority Key Identifier:
                keyid:99:6B:FE:16:B0:0A:8E:F9:DD:E5:55:A9:13:30:A0:BC:74:A3:81:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/34352e3137372e38342e302f32322d3332203d3e20323639303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:5f:8f:d7:f5:b0:68:25:cf:7f:f1:42:f4:ae:da:c4:74:e4:
         c0:50:8f:c4:fa:f1:c8:1f:2c:5b:2d:e6:d7:04:0b:24:f6:c0:
         80:48:9e:0a:44:8f:74:1f:2f:52:69:ae:60:f7:2c:17:56:51:
         e2:e1:d0:a0:88:fc:cc:0e:e6:45:b3:ec:a3:81:23:79:8b:d2:
         ad:a9:32:96:dd:ab:c4:02:ea:cf:ee:30:d5:3d:0e:35:a3:83:
         e6:5a:a8:d7:1b:41:93:c8:88:8f:35:b9:fb:a4:69:03:e8:b6:
         8b:50:b6:e5:24:67:ec:0f:6b:f5:7f:7d:1c:d2:d0:33:e5:67:
         fa:5e:99:ef:9c:9f:c1:19:aa:6b:cc:c3:9a:ea:c8:5c:90:fe:
         2f:1a:89:35:d7:d2:71:a4:f3:de:3d:56:df:34:8a:2d:00:bb:
         3d:02:fa:6b:2e:c8:e3:bb:04:56:d7:da:06:77:fc:3a:e7:72:
         6d:f7:47:a5:a5:91:85:79:26:c9:bc:ee:3d:7a:0e:88:07:8b:
         7f:03:53:98:1e:a2:29:4d:bd:ba:86:15:38:fc:7a:48:68:35:
         3f:38:67:c3:3a:13:81:ee:78:57:5c:3e:f7:8f:80:55:50:13:
         10:de:ff:8a:57:b8:8c:eb:34:d8:1c:f9:99:9e:36:30:53:6a:
         71:b3:c4:93
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVYUXZukcmL+zgGnooNWZiXsILRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk2QkZFMTZCMDBBOEVGOURERTU1NUE5MTMzMEEwQkM3
NEEzODE2MjAeFw0yNDA0MDQwMjIwMTBaFw0yNTA0MDMwMjI1MTBaMDMxMTAvBgNV
BAMTKENCRUY5MTA5RUJBMTQ5QTg3QUY1NUZCQjNBNjAwQkRDQjAyMjlCRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB7E3UYGex5GVV9LWvbe4mUHRu
xa6+qjq21MDJ3/R9HOeAL8QT7qeSEzqqjJFuQ6G7kZ5NUwrWOOzY6j1TUTdj3D4k
l0sgRLKWgk1CJmbP2tnm+ndFx0EEi9qfBkGyO4K74JTuMatBEgAK0/fs5+PhEN1x
H4+d3JQZ9Eo4R37Juszw1A5t1bVg4SqQbw+T5p2Z5lDd+z3fLRWsPwU4PdEUT06v
YLRR3Hzoo/QRju2OH9LDA+yZpvtc21Sx7vAbGsuqRXfCPtigkEd/u89c2CfStdfB
asi8/Pc7K6eUkptemxQRhCEsKpj4R2WVHCbSK9G+OUCFzs1gcVnUK7hALDVRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUy++RCeuhSah69V+7OmAL3LAim/owHwYDVR0j
BBgwFoAUmWv+FrAKjvnd5VWpEzCgvHSjgWIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0J2TExkZFRaYXBkekZMRXl0YkY5UWNEVDZqUkNRZnFNMzVvcGE5aGRR
clUvMS85OTZCRkUxNkIwMEE4RUY5RERFNTU1QTkxMzMwQTBCQzc0QTM4MTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NkJGRTE2QjAwQThFRjlE
REU1NTVBOTEzMzBBMEJDNzRBMzgxNjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dCdkxMZGRUWmFwZHpGTEV5dGJGOVFjRFQ2alJDUWZxTTM1b3BhOWhkUXJVLzEv
MzQzNTJlMzEzNzM3MmUzODM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzAzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbFUMA0GCSqGSIb3DQEBCwUAA4IBAQAUX4/X9bBo
Jc9/8UL0rtrEdOTAUI/E+vHIHyxbLebXBAsk9sCASJ4KRI90Hy9Saa5g9ywXVlHi
4dCgiPzMDuZFs+yjgSN5i9KtqTKW3avEAurP7jDVPQ41o4PmWqjXG0GTyIiPNbn7
pGkD6LaLULblJGfsD2v1f30c0tAz5Wf6XpnvnJ/BGaprzMOa6shckP4vGok119Jx
pPPePVbfNIotALs9AvprLsjjuwRW19oGd/w653Jt90elpZGFeSbJvO49eg6IB4t/
A1OYHqIpTb26hhU4/HpIaDU/OGfDOhOB7nhXXD73j4BVUBMQ3v+KV7iM6zTYHPmZ
njYwU2pxs8ST
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:47 2024 by rpki-client on console-fra.rpki-client.org