Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132332e302f32342d3234203d3e20323638383736.roa
File:                     34352e3137312e3132332e302f32342d3234203d3e20323638383736.roa (raw, json)
Hash identifier:          JDdUdWCjH1RokZ86B1LSv60sptmH6us4cRDTCEhw/rU=
Subject key identifier:   03:8F:29:97:F1:79:E0:88:FA:21:69:FC:C6:8D:FB:19:66:1D:A6:C7
Certificate issuer:       /CN=FDD4E609728A79B5F481EFFB6BE30EADF7E69F36
Certificate serial:       160F22520CB0E2946F7FE20B09414D9B0A6B92AB
Authority key identifier: FD:D4:E6:09:72:8A:79:B5:F4:81:EF:FB:6B:E3:0E:AD:F7:E6:9F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132332e302f32342d3234203d3e20323638383736.roa
Signing time:             Tue 19 Nov 2024 12:43:48 +0000
ROA not before:           Tue 19 Nov 2024 12:38:48 +0000
ROA not after:            Tue 18 Nov 2025 12:43:48 +0000
asID:                     268876
IP address blocks:        45.171.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.crl
                          rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0f:22:52:0c:b0:e2:94:6f:7f:e2:0b:09:41:4d:9b:0a:6b:92:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDD4E609728A79B5F481EFFB6BE30EADF7E69F36
        Validity
            Not Before: Nov 19 12:38:48 2024 GMT
            Not After : Nov 18 12:43:48 2025 GMT
        Subject: CN=038F2997F179E088FA2169FCC68DFB19661DA6C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:c4:72:87:dd:be:f3:8c:83:9d:99:ab:a8:
                    ff:c9:86:ae:95:d2:14:e9:c4:73:67:e8:d5:af:b0:
                    e1:fe:df:e7:88:86:98:ce:91:f2:7f:b4:54:99:90:
                    9b:dd:23:65:f2:b3:86:11:c6:cc:de:08:a7:22:f9:
                    5f:bc:53:e8:c2:b0:81:10:32:cb:e5:7b:06:e7:e8:
                    c5:6a:db:0e:29:ce:d2:0b:f5:e8:af:70:28:b8:b9:
                    1c:38:76:17:cc:44:48:79:f9:27:0a:b8:96:f2:b3:
                    d1:1d:ae:f7:e4:c8:3e:c5:35:4e:23:38:a1:43:2e:
                    bf:fb:5e:40:e9:0c:a6:1d:f0:5d:18:fc:75:54:1a:
                    57:0a:96:2f:a2:8f:b4:d5:e3:9b:14:74:b8:1c:c8:
                    81:14:e7:5a:c6:69:06:f2:c4:14:ab:d1:53:ed:97:
                    6e:67:ba:27:b4:60:70:1a:e0:dc:00:e9:7c:00:fc:
                    ff:ff:97:55:5b:d9:3f:d9:3e:a6:e5:b2:8e:ae:31:
                    39:b3:85:35:cb:1c:63:43:46:fd:19:43:c7:6f:98:
                    4d:d5:d4:61:29:d8:11:34:84:52:8c:e3:35:79:92:
                    2b:a2:46:d9:09:db:58:b1:28:76:26:72:b4:a2:b7:
                    ca:d9:c0:da:62:ab:6f:0a:3d:c2:e2:a2:82:75:aa:
                    96:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8F:29:97:F1:79:E0:88:FA:21:69:FC:C6:8D:FB:19:66:1D:A6:C7
            X509v3 Authority Key Identifier:
                keyid:FD:D4:E6:09:72:8A:79:B5:F4:81:EF:FB:6B:E3:0E:AD:F7:E6:9F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132332e302f32342d3234203d3e20323638383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:75:94:34:a4:6f:ac:e1:85:f8:3c:2a:c9:b3:64:3d:43:10:
         e0:41:ba:c5:d9:31:12:7b:fc:91:e7:9d:db:09:65:3c:0b:c0:
         f8:f8:c5:4a:05:44:81:42:8e:ca:e5:6d:ab:05:24:e1:79:eb:
         4b:65:66:f5:f8:02:8b:1d:7c:56:40:db:49:55:64:a3:6f:9a:
         88:41:99:f9:30:02:f5:5e:06:55:cf:82:bb:80:83:61:ef:82:
         cf:b4:c0:c1:71:43:54:25:07:98:84:b6:6e:3f:3c:74:fa:72:
         3b:ac:fb:fc:d5:90:2e:3e:a9:42:ab:c6:1b:b1:b9:d3:58:30:
         e4:d5:7a:7c:7f:94:6c:40:29:9a:1d:a3:d0:4a:77:96:9f:1b:
         4e:f2:bd:ba:f2:c3:8a:6d:74:1a:6d:22:f7:ed:a8:fb:11:98:
         3a:3a:38:d0:26:74:ae:2d:9e:43:f4:ad:d9:4d:b9:32:20:70:
         82:07:e6:4c:b9:75:10:b8:92:5c:d5:3a:35:e5:9c:80:2f:9c:
         6c:91:26:32:e0:b9:b7:7f:10:34:8e:51:e8:5f:c9:98:4b:f7:
         ee:fd:c1:38:88:9b:d8:33:e8:18:88:25:91:d9:dc:b5:1c:ad:
         3a:a2:64:e9:ab:15:be:2e:98:52:00:96:03:04:ed:fb:da:3d:
         49:24:f5:df
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFg8iUgyw4pRvf+ILCUFNmwprkqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRENEU2MDk3MjhBNzlCNUY0ODFFRkZCNkJFMzBFQURG
N0U2OUYzNjAeFw0yNDExMTkxMjM4NDhaFw0yNTExMTgxMjQzNDhaMDMxMTAvBgNV
BAMTKDAzOEYyOTk3RjE3OUUwODhGQTIxNjlGQ0M2OERGQjE5NjYxREE2QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0pcRyh92+84yDnZmrqP/Jhq6V
0hTpxHNn6NWvsOH+3+eIhpjOkfJ/tFSZkJvdI2Xys4YRxszeCKci+V+8U+jCsIEQ
Msvlewbn6MVq2w4pztIL9eivcCi4uRw4dhfMREh5+ScKuJbys9EdrvfkyD7FNU4j
OKFDLr/7XkDpDKYd8F0Y/HVUGlcKli+ij7TV45sUdLgcyIEU51rGaQbyxBSr0VPt
l25nuie0YHAa4NwA6XwA/P//l1Vb2T/ZPqblso6uMTmzhTXLHGNDRv0ZQ8dvmE3V
1GEp2BE0hFKM4zV5kiuiRtkJ21ixKHYmcrSit8rZwNpiq28KPcLiooJ1qpb1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUA48pl/F54Ij6IWn8xo37GWYdpscwHwYDVR0j
BBgwFoAU/dTmCXKKebX0ge/7a+MOrffmnzYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDJITk5GVlNTbkNtNDZqODJ5QWFVREFkRHZpMXl5Qkw1cXJacFNHcnJu
RXYvMC9GREQ0RTYwOTcyOEE3OUI1RjQ4MUVGRkI2QkUzMEVBREY3RTY5RjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZERDRFNjA5NzI4QTc5QjVG
NDgxRUZGQjZCRTMwRUFERjdFNjlGMzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gySE5ORlZTU25DbTQ2ajgyeUFhVURBZER2aTF5eUJMNXFyWnBTR3JybkV2LzAv
MzQzNTJlMzEzNzMxMmUzMTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzODM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtq3swDQYJKoZIhvcNAQELBQADggEBAJR1lDSk
b6zhhfg8KsmzZD1DEOBBusXZMRJ7/JHnndsJZTwLwPj4xUoFRIFCjsrlbasFJOF5
60tlZvX4AosdfFZA20lVZKNvmohBmfkwAvVeBlXPgruAg2Hvgs+0wMFxQ1QlB5iE
tm4/PHT6cjus+/zVkC4+qUKrxhuxudNYMOTVenx/lGxAKZodo9BKd5afG07yvbry
w4ptdBptIvftqPsRmDo6ONAmdK4tnkP0rdlNuTIgcIIH5ky5dRC4klzVOjXlnIAv
nGyRJjLgubd/EDSOUehfyZhL9+79wTiIm9gz6BiIJZHZ3LUcrTqiZOmrFb4umFIA
lgME7fvaPUkk9d8=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:21 2024 by rpki-client on console-fra.rpki-client.org