Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136312e302f32342d3234203d3e20323636313936.roa
File:                     34352e362e3136312e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          W5vEgrFttpJuf6rJOSQMUusHbMxerFvTiP5F/5ltk1M=
Subject key identifier:   7A:B8:9D:C8:28:82:DD:8F:73:C6:55:8C:08:D5:75:22:13:71:ED:FC
Certificate issuer:       /CN=4BFC875BB620AF91362E3BE00B276B5E37F4DD35
Certificate serial:       644EAEBAA80633D2C56DB4F5652997BD0B5A2E90
Authority key identifier: 4B:FC:87:5B:B6:20:AF:91:36:2E:3B:E0:0B:27:6B:5E:37:F4:DD:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136312e302f32342d3234203d3e20323636313936.roa
Signing time:             Sun 07 Apr 2024 22:13:26 +0000
ROA not before:           Sun 07 Apr 2024 22:08:26 +0000
ROA not after:            Sun 06 Apr 2025 22:13:26 +0000
asID:                     266196
IP address blocks:        45.6.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4e:ae:ba:a8:06:33:d2:c5:6d:b4:f5:65:29:97:bd:0b:5a:2e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BFC875BB620AF91362E3BE00B276B5E37F4DD35
        Validity
            Not Before: Apr  7 22:08:26 2024 GMT
            Not After : Apr  6 22:13:26 2025 GMT
        Subject: CN=7AB89DC82882DD8F73C6558C08D575221371EDFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:67:56:53:c1:21:62:bc:bc:b8:87:44:d0:
                    9a:1b:2c:cd:6e:0a:c5:f8:9d:12:d6:74:43:79:4c:
                    50:c6:73:ef:bb:95:8b:c9:39:b0:43:4b:22:2c:ef:
                    f8:b6:9c:45:c8:d4:3a:4e:18:d6:51:2d:3d:7c:26:
                    74:c5:5a:f0:30:99:68:94:0b:ab:a8:fb:92:44:f1:
                    fb:9d:78:c7:2c:24:f0:35:37:1e:cd:62:28:d0:71:
                    51:bc:43:7b:de:aa:cc:12:52:b4:bc:2d:1b:00:cf:
                    00:5f:a4:d1:1e:63:10:bb:ee:56:83:8e:79:67:87:
                    4e:71:be:0b:07:ab:cf:50:84:5b:86:f3:09:92:f2:
                    32:5c:82:48:4a:95:6a:e6:76:74:41:24:5e:dc:be:
                    8e:b3:87:14:50:b0:4a:c2:eb:18:c3:0b:80:cc:74:
                    c1:b3:c3:35:a4:23:b5:67:4e:a9:7f:87:2a:07:e1:
                    1f:5f:23:71:81:50:cb:fc:76:67:ba:ea:6c:fa:c1:
                    0a:bf:bf:3d:5e:6c:8f:45:25:d7:7c:c1:6d:fc:99:
                    39:7c:cc:3d:49:36:26:fe:1c:bf:f9:cd:5f:90:31:
                    92:4d:c0:fb:b5:93:33:1b:70:66:79:1c:df:0d:7e:
                    f9:1d:65:68:25:e4:26:1f:62:b1:e8:88:5b:95:6d:
                    ae:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B8:9D:C8:28:82:DD:8F:73:C6:55:8C:08:D5:75:22:13:71:ED:FC
            X509v3 Authority Key Identifier:
                keyid:4B:FC:87:5B:B6:20:AF:91:36:2E:3B:E0:0B:27:6B:5E:37:F4:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFC875BB620AF91362E3BE00B276B5E37F4DD35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136312e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:e6:29:7d:80:37:08:d9:b7:8d:d0:1c:2e:19:b2:72:3b:d0:
         93:92:21:2e:84:df:7a:40:ee:45:42:a2:e2:40:16:cb:3e:e3:
         08:15:ca:de:8e:52:60:f2:67:dd:1e:6d:ab:03:fe:37:8c:83:
         9c:38:bd:4c:a9:d3:67:04:5a:a8:cb:cf:7c:a7:0d:fd:57:8e:
         85:9b:e1:02:cd:fe:6e:63:73:67:85:aa:ac:bf:6b:78:3a:81:
         c6:54:d0:5b:f8:66:7a:04:d0:41:78:52:cd:bc:03:c4:71:c6:
         94:fa:88:fe:5e:14:7b:5b:f2:91:2f:04:f5:6d:73:ff:fe:5f:
         a4:b7:17:df:70:5d:e1:63:65:d1:8b:1f:96:ce:3a:e2:f3:db:
         1f:9a:08:f5:cd:96:9c:8e:39:13:9a:9f:7e:4a:81:25:5f:c6:
         2c:03:8c:c8:81:b4:2e:31:e2:13:85:59:c3:87:cd:d6:e3:5c:
         d0:90:56:d3:fa:41:8b:ac:6a:d1:7e:2d:d2:a0:88:21:37:9d:
         6d:08:3d:fc:3c:dc:de:e4:6a:d5:b8:48:a9:66:15:c2:db:e1:
         25:b1:4e:c7:b2:d5:3a:8c:14:2d:18:84:46:39:ec:7e:14:96:
         b0:a3:d7:79:da:71:e2:79:06:07:43:fa:28:2e:63:d9:33:ab:
         a8:ae:2e:df
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZE6uuqgGM9LFbbT1ZSmXvQtaLpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJGQzg3NUJCNjIwQUY5MTM2MkUzQkUwMEIyNzZCNUUz
N0Y0REQzNTAeFw0yNDA0MDcyMjA4MjZaFw0yNTA0MDYyMjEzMjZaMDMxMTAvBgNV
BAMTKDdBQjg5REM4Mjg4MkREOEY3M0M2NTU4QzA4RDU3NTIyMTM3MUVERkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9WdWU8EhYry8uIdE0JobLM1u
CsX4nRLWdEN5TFDGc++7lYvJObBDSyIs7/i2nEXI1DpOGNZRLT18JnTFWvAwmWiU
C6uo+5JE8fudeMcsJPA1Nx7NYijQcVG8Q3veqswSUrS8LRsAzwBfpNEeYxC77laD
jnlnh05xvgsHq89QhFuG8wmS8jJcgkhKlWrmdnRBJF7cvo6zhxRQsErC6xjDC4DM
dMGzwzWkI7VnTql/hyoH4R9fI3GBUMv8dme66mz6wQq/vz1ebI9FJdd8wW38mTl8
zD1JNib+HL/5zV+QMZJNwPu1kzMbcGZ5HN8NfvkdZWgl5CYfYrHoiFuVba4RAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUeridyCiC3Y9zxlWMCNV1IhNx7fwwHwYDVR0j
BBgwFoAUS/yHW7Ygr5E2LjvgCydrXjf03TUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hVQ0RXQnU2U3BDM3VZVzhUOTlGdzRwb2RuV2RMMjY5R3NYMlUyNTRB
ZFEvMC80QkZDODc1QkI2MjBBRjkxMzYyRTNCRTAwQjI3NkI1RTM3RjRERDM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRkM4NzVCQjYyMEFGOTEz
NjJFM0JFMDBCMjc2QjVFMzdGNEREMzUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIVUNEV0J1NlNwQzN1WVc4VDk5Rnc0cG9kbldkTDI2OUdzWDJVMjU0QWRRLzAv
MzQzNTJlMzYyZTMxMzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjMx
MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0GoTANBgkqhkiG9w0BAQsFAAOCAQEAT+YpfYA3CNm3
jdAcLhmycjvQk5IhLoTfekDuRUKi4kAWyz7jCBXK3o5SYPJn3R5tqwP+N4yDnDi9
TKnTZwRaqMvPfKcN/VeOhZvhAs3+bmNzZ4WqrL9reDqBxlTQW/hmegTQQXhSzbwD
xHHGlPqI/l4Ue1vykS8E9W1z//5fpLcX33Bd4WNl0Ysfls464vPbH5oI9c2WnI45
E5qffkqBJV/GLAOMyIG0LjHiE4VZw4fN1uNc0JBW0/pBi6xq0X4t0qCIITedbQg9
/Dzc3uRq1bhIqWYVwtvhJbFOx7LVOowULRiERjnsfhSWsKPXedpx4nkGB0P6KC5j
2TOrqK4u3w==
-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:46 2024 by rpki-client on console-fra.rpki-client.org