Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GX8RmjGL38oaPaiHgrr9tWe9qFVj6fDLcWFTSYBC4yph/0/34352e3136392e3138342e302f32322d3332203d3e20323638313232.roa
File:                     34352e3136392e3138342e302f32322d3332203d3e20323638313232.roa (raw, json)
Hash identifier:          +O7i7H1jjQd59/+gPIGCVjt0h0ssAwsbZn1OsCcT7Uc=
Subject key identifier:   3A:CC:4B:17:D1:B4:1A:87:CE:34:F4:96:E5:A1:AA:87:73:C4:05:61
Certificate issuer:       /CN=9585D03305012CC3104EF21BF5BE7752D559A2E7
Certificate serial:       7D5214F92623BDC3CD6D9407EFCB1E3A62255386
Authority key identifier: 95:85:D0:33:05:01:2C:C3:10:4E:F2:1B:F5:BE:77:52:D5:59:A2:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9585D03305012CC3104EF21BF5BE7752D559A2E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GX8RmjGL38oaPaiHgrr9tWe9qFVj6fDLcWFTSYBC4yph/0/34352e3136392e3138342e302f32322d3332203d3e20323638313232.roa
Signing time:             Mon 07 Oct 2024 13:32:31 +0000
ROA not before:           Mon 07 Oct 2024 13:27:31 +0000
ROA not after:            Mon 06 Oct 2025 13:32:31 +0000
asID:                     268122
IP address blocks:        45.169.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GX8RmjGL38oaPaiHgrr9tWe9qFVj6fDLcWFTSYBC4yph/0/9585D03305012CC3104EF21BF5BE7752D559A2E7.crl
                          rsync://rpki-repo.registro.br/repo/GX8RmjGL38oaPaiHgrr9tWe9qFVj6fDLcWFTSYBC4yph/0/9585D03305012CC3104EF21BF5BE7752D559A2E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9585D03305012CC3104EF21BF5BE7752D559A2E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 16:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:52:14:f9:26:23:bd:c3:cd:6d:94:07:ef:cb:1e:3a:62:25:53:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9585D03305012CC3104EF21BF5BE7752D559A2E7
        Validity
            Not Before: Oct  7 13:27:31 2024 GMT
            Not After : Oct  6 13:32:31 2025 GMT
        Subject: CN=3ACC4B17D1B41A87CE34F496E5A1AA8773C40561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:02:cc:4e:0e:a2:cb:d7:d5:a9:5f:92:15:a3:
                    93:40:36:8c:3f:31:f3:7d:d3:2b:9e:9b:6a:5d:58:
                    7e:6b:3f:36:54:fe:a7:25:fe:d1:be:b7:14:3c:27:
                    f3:50:77:31:53:59:ff:3c:3b:3a:a2:7b:3c:4b:76:
                    c4:04:7b:90:cb:77:43:39:e5:89:3c:dd:32:21:ee:
                    5c:9b:e0:57:69:88:6c:be:bc:a6:8b:36:2f:a8:29:
                    98:25:e4:81:98:68:13:00:fd:94:b1:b3:60:47:50:
                    77:ac:35:af:99:4e:f9:d9:f2:79:51:94:9c:f8:0d:
                    72:89:75:90:b5:c0:32:7f:2e:a6:e6:0c:91:ad:3b:
                    64:a6:b4:9d:c6:3c:ab:07:8b:a2:d8:b0:9b:c7:0b:
                    6e:13:b2:58:a3:3f:1d:c3:4e:dd:6b:3f:a5:8b:89:
                    c6:db:e6:49:bc:cb:98:c3:4c:2b:6b:08:eb:27:c0:
                    ad:de:c1:ff:de:c2:30:ef:fb:9c:73:43:34:b2:08:
                    95:1a:ce:45:ba:24:3f:cb:a2:d3:52:8f:fa:0e:bf:
                    22:55:a1:28:9f:30:61:d8:74:69:13:0e:29:34:e7:
                    5d:a7:76:85:c7:87:4a:4b:3a:34:01:ce:28:1f:de:
                    95:2f:14:be:c1:4f:1e:51:99:81:f2:1d:0d:70:f7:
                    78:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CC:4B:17:D1:B4:1A:87:CE:34:F4:96:E5:A1:AA:87:73:C4:05:61
            X509v3 Authority Key Identifier:
                keyid:95:85:D0:33:05:01:2C:C3:10:4E:F2:1B:F5:BE:77:52:D5:59:A2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GX8RmjGL38oaPaiHgrr9tWe9qFVj6fDLcWFTSYBC4yph/0/9585D03305012CC3104EF21BF5BE7752D559A2E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9585D03305012CC3104EF21BF5BE7752D559A2E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GX8RmjGL38oaPaiHgrr9tWe9qFVj6fDLcWFTSYBC4yph/0/34352e3136392e3138342e302f32322d3332203d3e20323638313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:57:44:8c:35:57:01:77:68:ea:f7:7d:57:67:2d:4b:89:54:
         68:1e:16:d2:6d:25:da:ac:2d:b0:98:1a:16:38:47:1c:69:fc:
         7b:07:ac:76:48:b8:9c:0e:ff:7e:d3:b0:a2:70:60:af:b9:98:
         c1:3d:44:3f:8b:2d:fa:d4:79:89:c8:cc:72:4d:9d:3b:8c:89:
         1b:c7:a8:34:49:18:f5:25:18:0a:df:b7:be:88:8a:e1:b0:a5:
         d2:36:cf:2e:87:8c:d4:e0:9a:75:b5:72:2b:29:4b:d2:4f:31:
         6d:65:76:48:bc:d1:e0:14:fa:cc:56:af:8d:38:14:86:c9:9d:
         71:5a:3e:e0:28:f6:a0:16:80:ee:a1:5e:10:78:d4:31:98:52:
         77:11:f8:bb:48:a0:5c:d8:6d:09:fe:1c:40:cd:f6:88:af:83:
         ad:20:a4:c3:e8:1b:e2:60:f3:44:6a:da:a5:97:4c:74:f8:c6:
         09:5b:3b:a5:bf:3e:2e:a3:57:04:3a:70:55:3f:a5:a2:11:41:
         45:d3:5d:20:ea:ed:34:0a:f2:ca:b7:d7:99:67:2f:c6:08:1a:
         7b:9c:d1:72:65:2e:87:5e:57:4b:06:91:b5:6d:ad:39:6d:95:
         1c:99:6d:c0:b4:4c:1e:9f:dc:4b:b0:4a:b9:b0:fd:c8:bc:f3:
         f5:dd:d1:30
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfVIU+SYjvcPNbZQH78seOmIlU4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU4NUQwMzMwNTAxMkNDMzEwNEVGMjFCRjVCRTc3NTJE
NTU5QTJFNzAeFw0yNDEwMDcxMzI3MzFaFw0yNTEwMDYxMzMyMzFaMDMxMTAvBgNV
BAMTKDNBQ0M0QjE3RDFCNDFBODdDRTM0RjQ5NkU1QTFBQTg3NzNDNDA1NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxAsxODqLL19WpX5IVo5NANow/
MfN90yuem2pdWH5rPzZU/qcl/tG+txQ8J/NQdzFTWf88OzqiezxLdsQEe5DLd0M5
5Yk83TIh7lyb4FdpiGy+vKaLNi+oKZgl5IGYaBMA/ZSxs2BHUHesNa+ZTvnZ8nlR
lJz4DXKJdZC1wDJ/LqbmDJGtO2SmtJ3GPKsHi6LYsJvHC24TslijPx3DTt1rP6WL
icbb5km8y5jDTCtrCOsnwK3ewf/ewjDv+5xzQzSyCJUazkW6JD/LotNSj/oOvyJV
oSifMGHYdGkTDik0512ndoXHh0pLOjQBzigf3pUvFL7BTx5RmYHyHQ1w93gBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOsxLF9G0GofONPSW5aGqh3PEBWEwHwYDVR0j
BBgwFoAUlYXQMwUBLMMQTvIb9b53UtVZoucwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1g4Um1qR0wzOG9hUGFpSGdycjl0V2U5cUZWajZmRExjV0ZUU1lCQzR5
cGgvMC85NTg1RDAzMzA1MDEyQ0MzMTA0RUYyMUJGNUJFNzc1MkQ1NTlBMkU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1ODVEMDMzMDUwMTJDQzMx
MDRFRjIxQkY1QkU3NzUyRDU1OUEyRTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dYOFJtakdMMzhvYVBhaUhncnI5dFdlOXFGVmo2ZkRMY1dGVFNZQkM0eXBoLzAv
MzQzNTJlMzEzNjM5MmUzMTM4MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzMTMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqbgwDQYJKoZIhvcNAQELBQADggEBAHhXRIw1
VwF3aOr3fVdnLUuJVGgeFtJtJdqsLbCYGhY4Rxxp/HsHrHZIuJwO/37TsKJwYK+5
mME9RD+LLfrUeYnIzHJNnTuMiRvHqDRJGPUlGArft76IiuGwpdI2zy6HjNTgmnW1
cispS9JPMW1ldki80eAU+sxWr404FIbJnXFaPuAo9qAWgO6hXhB41DGYUncR+LtI
oFzYbQn+HEDN9oivg60gpMPoG+Jg80Rq2qWXTHT4xglbO6W/Pi6jVwQ6cFU/paIR
QUXTXSDq7TQK8sq315lnL8YIGnuc0XJlLodeV0sGkbVtrTltlRyZbcC0TB6f3Euw
Srmw/ci88/Xd0TA=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:57 2025 by rpki-client