Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/34352e3136322e39322e302f32342d3234203d3e20323638353137.roa
File:                     34352e3136322e39322e302f32342d3234203d3e20323638353137.roa (raw, json)
Hash identifier:          x8J4OZ+KpxqNtkEJa28nJyr31ET7GEuR+WNk9ICmxS0=
Subject key identifier:   AB:04:BD:97:83:77:E8:EE:55:D6:A1:9B:AC:6A:75:FA:7D:B3:05:B3
Certificate issuer:       /CN=32D32D34674F0161657AF3F71B992CAF74E2BBB9
Certificate serial:       2A9B6404655E41770D2490A451C30CF349780417
Authority key identifier: 32:D3:2D:34:67:4F:01:61:65:7A:F3:F7:1B:99:2C:AF:74:E2:BB:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/34352e3136322e39322e302f32342d3234203d3e20323638353137.roa
Signing time:             Sat 27 Jul 2024 20:04:44 +0000
ROA not before:           Sat 27 Jul 2024 19:59:44 +0000
ROA not after:            Sat 26 Jul 2025 20:04:44 +0000
asID:                     268517
IP address blocks:        45.162.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.crl
                          rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9b:64:04:65:5e:41:77:0d:24:90:a4:51:c3:0c:f3:49:78:04:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D32D34674F0161657AF3F71B992CAF74E2BBB9
        Validity
            Not Before: Jul 27 19:59:44 2024 GMT
            Not After : Jul 26 20:04:44 2025 GMT
        Subject: CN=AB04BD978377E8EE55D6A19BAC6A75FA7DB305B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:cf:1b:cd:b4:71:da:a8:43:7b:8d:83:8e:
                    48:02:fe:37:de:a4:82:b6:90:60:15:60:46:70:41:
                    1c:03:f2:21:3c:48:36:cd:ae:dd:78:a1:44:8f:2e:
                    ed:7e:c5:9e:85:ad:05:fd:a3:a2:47:26:3a:d9:2d:
                    d9:b8:9d:ce:57:f3:ca:f6:a3:1f:1a:e4:35:ab:1f:
                    c4:98:54:a4:1a:0c:94:c5:1a:43:85:cb:b9:9a:6e:
                    e0:67:03:2b:39:cd:09:17:c3:c2:8e:f0:bc:c4:11:
                    60:35:39:e3:05:ce:6a:80:66:2e:0b:01:83:0b:91:
                    7b:88:75:94:32:30:fc:35:7b:30:89:98:07:87:4f:
                    40:0b:e0:74:ae:04:39:ff:0e:e7:bd:11:7a:2d:a1:
                    e5:35:89:d3:6e:59:f2:d4:9a:7a:25:88:23:8d:91:
                    98:61:62:2c:ee:ac:b7:3e:d2:e8:5f:88:f6:0b:48:
                    ea:00:9a:f4:2e:c8:94:4c:4d:08:53:eb:b9:c0:de:
                    2d:59:a1:a0:1e:44:48:63:2f:4b:32:ce:09:0f:c6:
                    94:53:41:68:fb:5c:08:76:6c:ea:4e:4a:65:f5:34:
                    d7:78:f0:a1:86:9b:b8:ab:9b:75:7a:69:da:e0:1f:
                    95:c0:bb:34:d5:66:2e:ba:f8:4a:1d:85:b8:d6:93:
                    6b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:04:BD:97:83:77:E8:EE:55:D6:A1:9B:AC:6A:75:FA:7D:B3:05:B3
            X509v3 Authority Key Identifier:
                keyid:32:D3:2D:34:67:4F:01:61:65:7A:F3:F7:1B:99:2C:AF:74:E2:BB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/34352e3136322e39322e302f32342d3234203d3e20323638353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:dd:9e:73:22:c2:51:0f:de:00:6e:52:63:52:f2:4b:b2:2c:
         50:ba:9e:b4:f0:5a:de:82:cb:06:f0:3f:2c:b0:90:c7:3d:c7:
         b4:7d:9b:04:c0:d9:df:80:dc:98:d9:ed:27:75:19:f2:b2:6a:
         1c:83:f2:4a:da:87:68:1a:db:a8:d6:a3:6e:ca:1d:1d:b0:58:
         bc:78:d1:57:e8:fb:ed:54:b6:70:05:3c:cd:79:61:62:9b:05:
         01:b2:ea:9a:b2:82:49:78:c2:be:e5:52:74:73:4a:d2:cf:65:
         62:42:08:1e:95:8b:c0:b8:0b:a1:e7:86:30:c1:a3:09:0b:a1:
         46:f4:e6:7c:4a:ae:0d:16:53:74:87:29:02:96:b8:ae:4f:dc:
         2f:9d:dd:ce:63:64:0d:dc:7a:53:b9:9f:b2:17:24:a7:89:45:
         91:90:05:69:02:0b:38:ba:b2:9c:d3:42:f0:ba:f6:1d:f6:95:
         8d:22:3c:51:92:e2:e1:40:34:ec:62:98:2a:29:02:e6:f9:64:
         d4:a8:c1:e9:61:9c:29:1d:03:33:02:f1:dd:dd:bf:6e:08:4b:
         e2:5f:87:b3:c5:17:75:0b:8f:5b:56:90:52:fb:db:03:c5:ca:
         95:90:ab:cf:36:f6:c4:56:af:82:1e:91:10:a3:d7:72:33:df:
         b5:b0:02:72
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKptkBGVeQXcNJJCkUcMM80l4BBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJEMzJEMzQ2NzRGMDE2MTY1N0FGM0Y3MUI5OTJDQUY3
NEUyQkJCOTAeFw0yNDA3MjcxOTU5NDRaFw0yNTA3MjYyMDA0NDRaMDMxMTAvBgNV
BAMTKEFCMDRCRDk3ODM3N0U4RUU1NUQ2QTE5QkFDNkE3NUZBN0RCMzA1QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3288bzbRx2qhDe42DjkgC/jfe
pIK2kGAVYEZwQRwD8iE8SDbNrt14oUSPLu1+xZ6FrQX9o6JHJjrZLdm4nc5X88r2
ox8a5DWrH8SYVKQaDJTFGkOFy7mabuBnAys5zQkXw8KO8LzEEWA1OeMFzmqAZi4L
AYMLkXuIdZQyMPw1ezCJmAeHT0AL4HSuBDn/Due9EXotoeU1idNuWfLUmnoliCON
kZhhYizurLc+0uhfiPYLSOoAmvQuyJRMTQhT67nA3i1ZoaAeREhjL0syzgkPxpRT
QWj7XAh2bOpOSmX1NNd48KGGm7irm3V6adrgH5XAuzTVZi66+EodhbjWk2tfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqwS9l4N36O5V1qGbrGp1+n2zBbMwHwYDVR0j
BBgwFoAUMtMtNGdPAWFlevP3G5ksr3Tiu7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE5hcU4zcmRrQU5QcVFkdzhkZmthZFF2UUdWcTFRb1RBMkJzaUJUZHNn
a1QvMC8zMkQzMkQzNDY3NEYwMTYxNjU3QUYzRjcxQjk5MkNBRjc0RTJCQkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyRDMyRDM0Njc0RjAxNjE2
NTdBRjNGNzFCOTkyQ0FGNzRFMkJCQjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hOYXFOM3Jka0FOUHFRZHc4ZGZrYWRRdlFHVnExUW9UQTJCc2lCVGRzZ2tULzAv
MzQzNTJlMzEzNjMyMmUzOTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzUzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaJcMA0GCSqGSIb3DQEBCwUAA4IBAQAZ3Z5zIsJR
D94AblJjUvJLsixQup608FregssG8D8ssJDHPce0fZsEwNnfgNyY2e0ndRnysmoc
g/JK2odoGtuo1qNuyh0dsFi8eNFX6PvtVLZwBTzNeWFimwUBsuqasoJJeMK+5VJ0
c0rSz2ViQggelYvAuAuh54YwwaMJC6FG9OZ8Sq4NFlN0hykClriuT9wvnd3OY2QN
3HpTuZ+yFySniUWRkAVpAgs4urKc00LwuvYd9pWNIjxRkuLhQDTsYpgqKQLm+WTU
qMHpYZwpHQMzAvHd3b9uCEviX4ezxRd1C49bVpBS+9sDxcqVkKvPNvbEVq+CHpEQ
o9dyM9+1sAJy
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:41 2024 by rpki-client on console-fra.rpki-client.org