Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3134382e302f32342d3332203d3e20323639303036.roa
File:                     34352e3137362e3134382e302f32342d3332203d3e20323639303036.roa (raw, json)
Hash identifier:          EeUsBmcbVmbWIdAiKKcqq8LwM+RAibndKaHpPP590dg=
Subject key identifier:   22:81:F8:20:BE:6C:88:7E:D1:74:1E:A9:91:E3:90:ED:D5:2A:60:A6
Certificate issuer:       /CN=ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085
Certificate serial:       063404602A0DB9F0C2D63CC823E72CE387AECF54
Authority key identifier: AD:F8:D0:C1:FF:4B:05:CA:AD:19:DC:EC:62:B3:47:81:BA:5D:90:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3134382e302f32342d3332203d3e20323639303036.roa
Signing time:             Wed 30 Oct 2024 18:13:06 +0000
ROA not before:           Wed 30 Oct 2024 18:08:06 +0000
ROA not after:            Wed 29 Oct 2025 18:13:06 +0000
asID:                     269006
IP address blocks:        45.176.148.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.crl
                          rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:34:04:60:2a:0d:b9:f0:c2:d6:3c:c8:23:e7:2c:e3:87:ae:cf:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085
        Validity
            Not Before: Oct 30 18:08:06 2024 GMT
            Not After : Oct 29 18:13:06 2025 GMT
        Subject: CN=2281F820BE6C887ED1741EA991E390EDD52A60A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:c5:91:e0:58:d8:30:07:dd:f5:80:f2:0f:
                    d9:5b:85:52:30:e2:69:6e:b0:56:b6:0f:d3:d6:a2:
                    ba:22:66:42:31:ac:5d:04:c5:74:91:73:87:c2:c8:
                    bc:aa:21:d1:49:90:9b:49:0b:8f:21:e1:ba:ed:ce:
                    a3:dc:d7:e7:39:fa:41:76:f9:3e:c9:df:17:f2:21:
                    53:29:71:d7:35:c1:fe:36:f4:6a:b2:f8:8f:33:bb:
                    2b:7d:bc:61:2c:b9:79:f7:7e:30:1f:76:d7:50:08:
                    c3:63:a4:61:c4:a2:4a:23:53:54:62:e3:84:b0:17:
                    9c:dc:c2:cf:58:44:b8:50:59:17:78:b9:16:f0:49:
                    39:cd:eb:d1:41:79:d6:9c:bd:4a:85:ff:80:1e:44:
                    a1:68:65:3e:b3:2b:ad:ac:b6:a0:8c:58:97:12:c5:
                    aa:f9:84:b4:1a:82:af:c8:df:fc:4a:db:fe:49:fb:
                    27:bc:ff:e3:15:7f:e2:dd:db:a9:8f:b7:89:e6:62:
                    a9:d5:ae:27:af:45:9a:d6:94:fa:6b:1f:f6:84:6d:
                    31:d9:6d:75:77:9b:ce:bf:40:12:49:01:7f:2e:10:
                    4f:19:51:c5:45:40:6f:b8:7e:a0:ca:7b:d3:a5:a9:
                    fd:21:7d:be:1e:6e:47:a6:83:05:03:cd:f2:ac:01:
                    8a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:81:F8:20:BE:6C:88:7E:D1:74:1E:A9:91:E3:90:ED:D5:2A:60:A6
            X509v3 Authority Key Identifier:
                keyid:AD:F8:D0:C1:FF:4B:05:CA:AD:19:DC:EC:62:B3:47:81:BA:5D:90:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3134382e302f32342d3332203d3e20323639303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:4d:21:70:00:13:52:c1:af:0f:45:11:57:1d:b1:71:1f:e1:
         c3:a2:05:82:ff:ed:1d:47:00:97:f7:7b:55:6d:27:d5:12:ef:
         99:4d:9d:95:05:1f:2c:a0:79:17:43:6d:81:20:c2:cf:24:a5:
         a1:f7:78:24:d2:a6:9c:9c:2c:13:43:f3:fc:c5:53:e7:57:12:
         77:c0:fe:e8:05:2d:ae:ba:ec:43:a0:81:b6:72:7c:a8:00:ea:
         5a:08:80:9a:26:3f:98:da:66:e9:74:af:45:6b:b4:b7:41:cb:
         94:65:3a:84:97:74:12:05:a0:88:3f:fb:d7:f5:02:ab:47:7f:
         68:67:9c:27:9c:c1:9a:a5:22:4d:4b:f1:5f:82:f3:da:d0:d6:
         12:49:47:f3:cc:7f:c5:cd:32:2d:c1:5f:bf:66:67:4b:68:aa:
         99:d8:62:2c:2d:7c:b8:9e:00:0e:38:fa:fa:c5:44:b0:6b:20:
         c6:4f:a0:76:79:75:ae:fd:a2:af:be:42:48:82:8a:35:20:ad:
         bb:1e:82:ca:ac:a9:fc:0b:11:b9:5d:cb:a1:09:8a:9a:b8:7d:
         90:8a:ac:27:6d:83:37:2b:d4:ed:a7:3e:0a:0e:64:ca:0d:94:
         90:cb:b7:2d:5d:63:a3:99:77:d5:af:d6:e9:d1:7b:be:d8:ab:
         03:49:73:ed
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBjQEYCoNufDC1jzII+cs44euz1QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURGOEQwQzFGRjRCMDVDQUFEMTlEQ0VDNjJCMzQ3ODFC
QTVEOTA4NTAeFw0yNDEwMzAxODA4MDZaFw0yNTEwMjkxODEzMDZaMDMxMTAvBgNV
BAMTKDIyODFGODIwQkU2Qzg4N0VEMTc0MUVBOTkxRTM5MEVERDUyQTYwQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtsWR4FjYMAfd9YDyD9lbhVIw
4mlusFa2D9PWoroiZkIxrF0ExXSRc4fCyLyqIdFJkJtJC48h4brtzqPc1+c5+kF2
+T7J3xfyIVMpcdc1wf429Gqy+I8zuyt9vGEsuXn3fjAfdtdQCMNjpGHEokojU1Ri
44SwF5zcws9YRLhQWRd4uRbwSTnN69FBedacvUqF/4AeRKFoZT6zK62stqCMWJcS
xar5hLQagq/I3/xK2/5J+ye8/+MVf+Ld26mPt4nmYqnVrievRZrWlPprH/aEbTHZ
bXV3m86/QBJJAX8uEE8ZUcVFQG+4fqDKe9Olqf0hfb4ebkemgwUDzfKsAYrXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIoH4IL5siH7RdB6pkeOQ7dUqYKYwHwYDVR0j
BBgwFoAUrfjQwf9LBcqtGdzsYrNHgbpdkIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pTZjdSRll2VkZ6UDg3V25WUHVUaFd2RnlqMXBCY21QaWs2a1BIRVZQ
N1EvMC9BREY4RDBDMUZGNEIwNUNBQUQxOURDRUM2MkIzNDc4MUJBNUQ5MDg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FERjhEMEMxRkY0QjA1Q0FB
RDE5RENFQzYyQjM0NzgxQkE1RDkwODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0daU2Y3UkZZdlZGelA4N1duVlB1VGhXdkZ5ajFwQmNtUGlrNmtQSEVWUDdRLzAv
MzQzNTJlMzEzNzM2MmUzMTM0MzgyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzkzMDMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtsJQwDQYJKoZIhvcNAQELBQADggEBALJNIXAA
E1LBrw9FEVcdsXEf4cOiBYL/7R1HAJf3e1VtJ9US75lNnZUFHyygeRdDbYEgws8k
paH3eCTSppycLBND8/zFU+dXEnfA/ugFLa667EOggbZyfKgA6loIgJomP5jaZul0
r0VrtLdBy5RlOoSXdBIFoIg/+9f1AqtHf2hnnCecwZqlIk1L8V+C89rQ1hJJR/PM
f8XNMi3BX79mZ0toqpnYYiwtfLieAA44+vrFRLBrIMZPoHZ5da79oq++QkiCijUg
rbsegsqsqfwLEbldy6EJipq4fZCKrCdtgzcr1O2nPgoOZMoNlJDLty1dY6OZd9Wv
1unRe77YqwNJc+0=
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:38 2024 by rpki-client on console-ams.rpki-client.org