Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/34352e3137392e3234322e302f32342d3234203d3e20323639313434.roa
File:                     34352e3137392e3234322e302f32342d3234203d3e20323639313434.roa (raw, json)
Hash identifier:          lT+/07wUziIfPIwTd/r9nSpzku2HoinyoqnERNyEhqs=
Subject key identifier:   78:83:E5:FB:25:FE:85:95:5D:78:F8:37:8D:39:5A:E8:50:D5:84:B2
Certificate issuer:       /CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
Certificate serial:       4F7FF268132F09424D2953E1C31A4ABDE96F9DBF
Authority key identifier: 47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/34352e3137392e3234322e302f32342d3234203d3e20323639313434.roa
Signing time:             Thu 08 Aug 2024 12:50:22 +0000
ROA not before:           Thu 08 Aug 2024 12:45:22 +0000
ROA not after:            Thu 07 Aug 2025 12:50:22 +0000
asID:                     269144
IP address blocks:        45.179.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl
                          rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 13:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7f:f2:68:13:2f:09:42:4d:29:53:e1:c3:1a:4a:bd:e9:6f:9d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
        Validity
            Not Before: Aug  8 12:45:22 2024 GMT
            Not After : Aug  7 12:50:22 2025 GMT
        Subject: CN=7883E5FB25FE85955D78F8378D395AE850D584B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:00:d6:e3:4e:27:6b:e0:22:bf:23:64:ff:
                    60:d5:ee:22:16:ef:36:bf:40:79:62:0d:38:d5:24:
                    58:11:94:9f:2d:53:3b:49:75:ae:21:64:74:a6:a4:
                    f5:97:67:ef:86:3e:00:dc:a3:ed:d3:59:10:48:28:
                    6d:94:e1:78:13:28:1c:49:51:11:0a:62:01:c8:9d:
                    b7:79:bc:97:99:ca:71:ce:67:25:47:8b:b4:57:bd:
                    de:c2:2f:b6:73:04:fa:5a:91:b9:ea:9b:20:ef:6b:
                    c2:11:a7:1e:0b:a5:ca:41:52:79:6e:4f:29:e7:92:
                    f1:da:63:0f:8e:de:b6:2f:69:10:78:04:8c:13:dc:
                    82:8a:d3:ff:60:01:c8:6b:8c:58:ee:15:f4:dc:64:
                    af:b5:f6:48:0d:a6:d8:df:ef:3e:54:76:57:96:45:
                    c2:bb:46:20:8a:ba:be:64:5d:9f:f8:da:51:a4:cf:
                    6a:2e:41:ba:a0:27:f0:c6:e1:af:a1:ee:78:d6:74:
                    24:2c:5f:2f:b7:a9:00:13:c4:4d:45:57:08:02:69:
                    1f:73:9e:a6:aa:01:19:6e:af:02:c0:eb:b6:f9:22:
                    dd:a8:be:4c:86:7e:5b:91:44:50:66:21:da:90:a6:
                    04:9a:20:03:29:0d:01:d5:76:49:b2:6e:80:5b:36:
                    55:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:83:E5:FB:25:FE:85:95:5D:78:F8:37:8D:39:5A:E8:50:D5:84:B2
            X509v3 Authority Key Identifier:
                keyid:47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/34352e3137392e3234322e302f32342d3234203d3e20323639313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:17:2e:8c:be:66:aa:e0:02:6c:7f:83:03:55:89:0b:d4:38:
         88:bf:9f:68:de:12:72:f6:d8:2d:35:99:fe:21:b8:8c:79:74:
         5d:be:cb:06:92:2f:c8:31:de:0a:ab:bf:de:38:95:f1:06:c6:
         b6:5d:68:7f:a5:dc:83:af:38:b3:77:56:3a:22:18:b3:f0:cf:
         bb:bc:d6:3c:f8:9c:18:ff:51:a8:43:7d:74:b2:a8:96:84:f2:
         c2:b4:4c:30:20:af:44:4f:39:c7:1c:25:1a:0c:55:01:c1:3c:
         71:9b:9c:1e:29:b3:2e:40:19:e7:ab:88:15:f3:07:6e:f9:df:
         7c:ab:38:9a:a9:48:e2:53:77:f3:7f:a5:20:ce:85:f5:3c:79:
         b3:49:ac:2d:6b:48:4d:88:72:53:00:a4:e9:0e:8c:74:dd:f1:
         f0:16:14:bf:a8:48:df:a9:6b:93:c5:4b:81:81:d9:90:6c:43:
         ac:2d:83:ac:87:f9:26:c8:09:82:62:24:ea:25:c2:5c:39:7f:
         b3:7a:47:fe:8e:17:dc:d7:78:74:9f:7e:87:29:12:60:22:d7:
         47:54:dc:f5:78:ff:c7:86:9d:84:c4:f6:71:5a:e5:cb:6c:16:
         ee:a8:a2:fb:5f:21:4e:91:e0:66:7b:3c:6f:63:86:fe:b7:94:
         40:d9:ac:df
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT3/yaBMvCUJNKVPhwxpKvelvnb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc0RTRGRTZDMDU4NTgzMjkzNUU2RTVEOUE2N0VFNDEw
QjI3NENDQjAeFw0yNDA4MDgxMjQ1MjJaFw0yNTA4MDcxMjUwMjJaMDMxMTAvBgNV
BAMTKDc4ODNFNUZCMjVGRTg1OTU1RDc4RjgzNzhEMzk1QUU4NTBENTg0QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uADW404na+AivyNk/2DV7iIW
7za/QHliDTjVJFgRlJ8tUztJda4hZHSmpPWXZ++GPgDco+3TWRBIKG2U4XgTKBxJ
UREKYgHInbd5vJeZynHOZyVHi7RXvd7CL7ZzBPpakbnqmyDva8IRpx4LpcpBUnlu
TynnkvHaYw+O3rYvaRB4BIwT3IKK0/9gAchrjFjuFfTcZK+19kgNptjf7z5UdleW
RcK7RiCKur5kXZ/42lGkz2ouQbqgJ/DG4a+h7njWdCQsXy+3qQATxE1FVwgCaR9z
nqaqARlurwLA67b5It2ovkyGfluRRFBmIdqQpgSaIAMpDQHVdkmyboBbNlVPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUeIPl+yX+hZVdePg3jTla6FDVhLIwHwYDVR0j
BBgwFoAUR05P5sBYWDKTXm5dmmfuQQsnTMswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pWa281dUYyVkJNeFdVenByNkJZWVhxc2NpRjZOTjF6elhXOFRzSno0
S3kvMC80NzRFNEZFNkMwNTg1ODMyOTM1RTZFNUQ5QTY3RUU0MTBCMjc0Q0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3NEU0RkU2QzA1ODU4MzI5
MzVFNkU1RDlBNjdFRTQxMEIyNzRDQ0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0daVmtvNXVGMlZCTXhXVXpwcjZCWVlYcXNjaUY2Tk4xenpYVzhUc0p6NEt5LzAv
MzQzNTJlMzEzNzM5MmUzMjM0MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAts/IwDQYJKoZIhvcNAQELBQADggEBAHAXLoy+
ZqrgAmx/gwNViQvUOIi/n2jeEnL22C01mf4huIx5dF2+ywaSL8gx3gqrv944lfEG
xrZdaH+l3IOvOLN3VjoiGLPwz7u81jz4nBj/UahDfXSyqJaE8sK0TDAgr0RPOccc
JRoMVQHBPHGbnB4psy5AGeeriBXzB27533yrOJqpSOJTd/N/pSDOhfU8ebNJrC1r
SE2IclMApOkOjHTd8fAWFL+oSN+pa5PFS4GB2ZBsQ6wtg6yH+SbICYJiJOolwlw5
f7N6R/6OF9zXeHSffocpEmAi10dU3PV4/8eGnYTE9nFa5ctsFu6oovtfIU6R4GZ7
PG9jhv63lEDZrN8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:22:25 2025 by rpki-client