Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135302e302f32332d3233203d3e20323639303036.roa
File:                     34352e3137362e3135302e302f32332d3233203d3e20323639303036.roa (raw, json)
Hash identifier:          R6k0s1uJ1B1YoO7WrnyJUetYhSVxpW2wEadK4hTOAX8=
Subject key identifier:   FC:A5:2D:54:E4:67:41:44:74:9B:F8:D9:48:F8:34:F7:9C:2D:64:57
Certificate issuer:       /CN=ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085
Certificate serial:       1535767D574558B0231D9C9D6AD91E1B73C1C70C
Authority key identifier: AD:F8:D0:C1:FF:4B:05:CA:AD:19:DC:EC:62:B3:47:81:BA:5D:90:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135302e302f32332d3233203d3e20323639303036.roa
Signing time:             Wed 30 Oct 2024 18:27:55 +0000
ROA not before:           Wed 30 Oct 2024 18:22:55 +0000
ROA not after:            Wed 29 Oct 2025 18:27:55 +0000
asID:                     269006
IP address blocks:        45.176.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.crl
                          rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:35:76:7d:57:45:58:b0:23:1d:9c:9d:6a:d9:1e:1b:73:c1:c7:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085
        Validity
            Not Before: Oct 30 18:22:55 2024 GMT
            Not After : Oct 29 18:27:55 2025 GMT
        Subject: CN=FCA52D54E4674144749BF8D948F834F79C2D6457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:a5:01:69:6c:db:4c:43:6d:39:95:cf:8e:
                    32:22:40:c8:9f:50:73:00:88:94:f8:4d:91:07:07:
                    f3:5a:91:42:a3:f7:ee:68:62:2b:1f:1e:ef:db:c2:
                    d7:c5:e8:1f:cd:98:68:3f:87:7a:fe:c3:1c:25:81:
                    47:11:15:52:8a:9f:58:a5:10:60:f9:c7:e4:ea:7f:
                    0c:ac:3f:7e:82:d1:3d:e9:5c:fc:c9:9a:03:a2:99:
                    21:25:13:c8:e2:72:97:3e:61:9b:d9:51:ff:b9:10:
                    d8:2d:82:29:4a:11:a9:9d:9e:90:14:7b:0c:25:85:
                    12:28:16:b5:cb:4a:4f:f4:9c:83:07:e7:f6:47:4c:
                    e8:06:e4:d1:8f:79:89:f8:26:e2:52:0a:0f:be:56:
                    4e:97:d9:83:2e:81:6e:f4:33:a3:d8:22:42:83:65:
                    bc:e6:56:39:89:29:30:7a:0a:94:1f:19:df:e1:9a:
                    31:8f:b3:c0:1c:8a:d0:8b:78:05:50:4c:8d:30:cc:
                    58:2e:be:09:97:1e:b2:95:90:81:d1:90:cc:d7:45:
                    8f:df:0e:14:e8:c9:c0:1f:04:14:08:44:e7:ec:2b:
                    85:35:e3:16:8c:50:79:11:16:79:a5:76:ea:64:76:
                    52:cf:5d:1d:9c:eb:94:42:bd:38:90:67:bb:a8:14:
                    e6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A5:2D:54:E4:67:41:44:74:9B:F8:D9:48:F8:34:F7:9C:2D:64:57
            X509v3 Authority Key Identifier:
                keyid:AD:F8:D0:C1:FF:4B:05:CA:AD:19:DC:EC:62:B3:47:81:BA:5D:90:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135302e302f32332d3233203d3e20323639303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:8e:bc:8c:27:52:24:e0:72:5e:82:68:16:28:9f:66:5e:20:
         31:bd:12:a6:b3:7c:8f:34:56:18:f9:a9:41:ee:c7:9d:52:cb:
         a6:a8:5a:aa:f1:99:16:4c:f2:93:3a:35:6e:44:9d:8d:20:da:
         d4:9d:49:0d:82:d6:28:47:41:9f:58:ac:70:6e:d0:22:de:99:
         e6:89:b1:a8:10:d7:8f:e3:95:ef:db:1b:46:92:f1:64:18:0f:
         9e:0b:f5:11:ba:10:00:31:34:2d:5a:5f:67:43:b5:9e:f4:dd:
         d2:a8:3e:58:12:a0:94:42:88:1b:57:24:cd:57:af:a8:31:f5:
         e2:58:bb:d1:fd:1e:3a:15:ca:b7:69:be:62:20:84:8c:6f:4b:
         d0:f3:c0:7d:ff:25:e3:44:81:b6:9f:ac:bd:7a:18:67:f6:5b:
         f1:d0:2f:ae:48:93:44:20:d5:3f:91:52:67:e0:0b:85:2d:14:
         44:87:34:37:27:7f:98:ba:50:39:62:a8:c5:e2:e2:86:b0:cd:
         d2:b8:0a:cf:23:1d:60:c0:37:ce:67:06:24:42:5a:c4:9e:ae:
         34:c8:af:32:18:3a:7d:4d:37:3e:ae:14:2c:31:f4:c2:28:1a:
         ff:3d:e2:13:91:c2:50:83:da:80:88:76:c5:08:cc:1b:7f:11:
         72:73:0f:0d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFTV2fVdFWLAjHZydatkeG3PBxwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURGOEQwQzFGRjRCMDVDQUFEMTlEQ0VDNjJCMzQ3ODFC
QTVEOTA4NTAeFw0yNDEwMzAxODIyNTVaFw0yNTEwMjkxODI3NTVaMDMxMTAvBgNV
BAMTKEZDQTUyRDU0RTQ2NzQxNDQ3NDlCRjhEOTQ4RjgzNEY3OUMyRDY0NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0KUBaWzbTENtOZXPjjIiQMif
UHMAiJT4TZEHB/NakUKj9+5oYisfHu/bwtfF6B/NmGg/h3r+wxwlgUcRFVKKn1il
EGD5x+TqfwysP36C0T3pXPzJmgOimSElE8jicpc+YZvZUf+5ENgtgilKEamdnpAU
ewwlhRIoFrXLSk/0nIMH5/ZHTOgG5NGPeYn4JuJSCg++Vk6X2YMugW70M6PYIkKD
ZbzmVjmJKTB6CpQfGd/hmjGPs8AcitCLeAVQTI0wzFguvgmXHrKVkIHRkMzXRY/f
DhToycAfBBQIROfsK4U14xaMUHkRFnmldupkdlLPXR2c65RCvTiQZ7uoFOZfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/KUtVORnQUR0m/jZSPg095wtZFcwHwYDVR0j
BBgwFoAUrfjQwf9LBcqtGdzsYrNHgbpdkIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pTZjdSRll2VkZ6UDg3V25WUHVUaFd2RnlqMXBCY21QaWs2a1BIRVZQ
N1EvMC9BREY4RDBDMUZGNEIwNUNBQUQxOURDRUM2MkIzNDc4MUJBNUQ5MDg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FERjhEMEMxRkY0QjA1Q0FB
RDE5RENFQzYyQjM0NzgxQkE1RDkwODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0daU2Y3UkZZdlZGelA4N1duVlB1VGhXdkZ5ajFwQmNtUGlrNmtQSEVWUDdRLzAv
MzQzNTJlMzEzNzM2MmUzMTM1MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMDMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtsJYwDQYJKoZIhvcNAQELBQADggEBAIaOvIwn
UiTgcl6CaBYon2ZeIDG9EqazfI80Vhj5qUHux51Sy6aoWqrxmRZM8pM6NW5EnY0g
2tSdSQ2C1ihHQZ9YrHBu0CLemeaJsagQ14/jle/bG0aS8WQYD54L9RG6EAAxNC1a
X2dDtZ703dKoPlgSoJRCiBtXJM1Xr6gx9eJYu9H9HjoVyrdpvmIghIxvS9DzwH3/
JeNEgbafrL16GGf2W/HQL65Ik0Qg1T+RUmfgC4UtFESHNDcnf5i6UDliqMXi4oaw
zdK4Cs8jHWDAN85nBiRCWsSerjTIrzIYOn1NNz6uFCwx9MIoGv894hORwlCD2oCI
dsUIzBt/EXJzDw0=
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:38 2024 by rpki-client on console-ams.rpki-client.org