Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/34352e3136312e32302e302f32332d3233203d3e20323638343430.roa
File:                     34352e3136312e32302e302f32332d3233203d3e20323638343430.roa (raw, json)
Hash identifier:          zZzBL44bfrFk2GmXoDVO47BDZgw/O1R69uDr1WULMek=
Subject key identifier:   9C:B0:4A:E3:F2:EC:05:F6:0E:AE:48:15:4D:4C:B4:5B:5C:1F:C3:7A
Certificate issuer:       /CN=F1E9E66CDF460681B363364D2E6C538262A83312
Certificate serial:       0945CC89DB2A8808B74F686F7D3EBCECE8CF4FAB
Authority key identifier: F1:E9:E6:6C:DF:46:06:81:B3:63:36:4D:2E:6C:53:82:62:A8:33:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E9E66CDF460681B363364D2E6C538262A83312.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/34352e3136312e32302e302f32332d3233203d3e20323638343430.roa
Signing time:             Thu 04 Apr 2024 11:31:00 +0000
ROA not before:           Thu 04 Apr 2024 11:26:00 +0000
ROA not after:            Thu 03 Apr 2025 11:31:00 +0000
asID:                     268440
IP address blocks:        45.161.20.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/F1E9E66CDF460681B363364D2E6C538262A83312.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/F1E9E66CDF460681B363364D2E6C538262A83312.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E9E66CDF460681B363364D2E6C538262A83312.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:45:cc:89:db:2a:88:08:b7:4f:68:6f:7d:3e:bc:ec:e8:cf:4f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1E9E66CDF460681B363364D2E6C538262A83312
        Validity
            Not Before: Apr  4 11:26:00 2024 GMT
            Not After : Apr  3 11:31:00 2025 GMT
        Subject: CN=9CB04AE3F2EC05F60EAE48154D4CB45B5C1FC37A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:43:63:7e:d1:18:68:eb:e1:93:12:77:94:1e:
                    c2:6a:14:f5:c7:4c:75:cd:d8:e3:76:ca:29:28:88:
                    01:6a:39:48:e5:99:94:89:c7:48:c3:fe:db:62:2d:
                    46:50:1e:59:be:42:ee:26:00:34:b6:73:de:4a:cf:
                    01:5a:fe:6f:d0:ea:78:b0:33:28:1a:fb:a7:14:02:
                    b1:9e:a4:ee:e5:b4:0b:c9:66:6d:45:bc:c1:16:48:
                    fd:67:2f:5f:5e:2f:85:2b:81:66:87:9b:a4:99:7e:
                    60:50:5c:a4:12:42:d3:b8:40:11:eb:76:a9:3f:85:
                    ee:e1:12:89:b1:c2:6c:c4:29:dc:f1:1f:02:29:f5:
                    cb:30:55:ec:f9:d2:45:83:55:17:41:95:ce:e7:d4:
                    78:4c:0c:2d:7e:31:3a:f7:ee:06:f1:3a:e4:f1:39:
                    2d:1f:6e:7e:a1:60:33:af:8f:05:04:f3:55:6d:0d:
                    e6:32:1c:2a:f7:65:bb:8a:e4:01:1f:b8:93:22:37:
                    0b:d6:94:ca:40:40:68:e7:5d:a9:49:c6:e9:be:15:
                    3a:9c:c1:34:5d:02:54:cc:d4:30:19:28:2d:4f:e2:
                    be:4e:ed:64:3e:a0:dd:e5:96:4f:ee:67:76:34:49:
                    15:27:07:ea:7d:0a:f3:90:d3:c1:b5:43:3a:6b:14:
                    1d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B0:4A:E3:F2:EC:05:F6:0E:AE:48:15:4D:4C:B4:5B:5C:1F:C3:7A
            X509v3 Authority Key Identifier:
                keyid:F1:E9:E6:6C:DF:46:06:81:B3:63:36:4D:2E:6C:53:82:62:A8:33:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/F1E9E66CDF460681B363364D2E6C538262A83312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E9E66CDF460681B363364D2E6C538262A83312.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/34352e3136312e32302e302f32332d3233203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:5c:34:0e:4f:55:87:1d:44:fb:6f:c2:a1:59:d4:a9:53:4d:
         2b:0e:d4:73:e7:96:0d:03:22:1f:3b:6e:c9:be:db:3e:b9:23:
         94:a7:db:2f:c9:f5:77:5e:a3:0a:ea:f0:11:3f:3b:9e:e0:63:
         70:87:9f:a5:11:dd:28:32:77:7d:27:d8:4e:5c:16:30:7a:3e:
         94:11:7d:64:1d:49:d3:d9:ae:9e:97:99:97:3e:d3:e6:c9:30:
         41:6e:bc:5a:dc:71:f2:85:25:85:97:77:63:cd:a5:ed:0c:7c:
         13:30:a1:5f:80:e1:7f:5e:b2:76:be:8e:ae:16:c6:cf:9e:1d:
         4c:f9:55:91:db:4a:12:6d:ec:e4:83:d9:84:91:d6:a0:1f:b2:
         1a:0c:ca:17:ef:de:b7:47:44:1e:ff:b3:92:9f:16:74:46:6a:
         51:e9:5d:c4:f7:55:1c:d1:da:91:81:33:2d:cb:a1:1e:9e:e2:
         db:09:3a:e3:38:1f:1d:47:ae:0c:23:32:86:e6:06:58:67:5b:
         27:08:f3:16:08:09:ac:63:32:34:28:81:28:8a:4c:3d:3f:5b:
         78:d7:54:6d:90:f0:2d:a6:4f:b9:bb:95:69:07:f2:2a:7d:57:
         04:d7:7c:a3:ad:23:50:e9:55:ba:7e:38:a0:b9:85:98:c3:28:
         c5:4c:59:37
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCUXMidsqiAi3T2hvfT687OjPT6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFFOUU2NkNERjQ2MDY4MUIzNjMzNjREMkU2QzUzODI2
MkE4MzMxMjAeFw0yNDA0MDQxMTI2MDBaFw0yNTA0MDMxMTMxMDBaMDMxMTAvBgNV
BAMTKDlDQjA0QUUzRjJFQzA1RjYwRUFFNDgxNTRENENCNDVCNUMxRkMzN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiQ2N+0Rho6+GTEneUHsJqFPXH
THXN2ON2yikoiAFqOUjlmZSJx0jD/ttiLUZQHlm+Qu4mADS2c95KzwFa/m/Q6niw
Myga+6cUArGepO7ltAvJZm1FvMEWSP1nL19eL4UrgWaHm6SZfmBQXKQSQtO4QBHr
dqk/he7hEomxwmzEKdzxHwIp9cswVez50kWDVRdBlc7n1HhMDC1+MTr37gbxOuTx
OS0fbn6hYDOvjwUE81VtDeYyHCr3ZbuK5AEfuJMiNwvWlMpAQGjnXalJxum+FTqc
wTRdAlTM1DAZKC1P4r5O7WQ+oN3llk/uZ3Y0SRUnB+p9CvOQ08G1QzprFB1NAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnLBK4/LsBfYOrkgVTUy0W1wfw3owHwYDVR0j
BBgwFoAU8enmbN9GBoGzYzZNLmxTgmKoMxIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGJNM0djRDl2YmhYdVh0NmN6SmRpbjVZQ3Y5MmFzZEVDbmVTc3JwMWRl
MlkvMS9GMUU5RTY2Q0RGNDYwNjgxQjM2MzM2NEQyRTZDNTM4MjYyQTgzMzEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxRTlFNjZDREY0NjA2ODFC
MzYzMzY0RDJFNkM1MzgyNjJBODMzMTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hiTTNHY0Q5dmJoWHVYdDZjekpkaW41WUN2OTJhc2RFQ25lU3NycDFkZTJZLzEv
MzQzNTJlMzEzNjMxMmUzMjMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLaEUMA0GCSqGSIb3DQEBCwUAA4IBAQCuXDQOT1WH
HUT7b8KhWdSpU00rDtRz55YNAyIfO27Jvts+uSOUp9svyfV3XqMK6vARPzue4GNw
h5+lEd0oMnd9J9hOXBYwej6UEX1kHUnT2a6el5mXPtPmyTBBbrxa3HHyhSWFl3dj
zaXtDHwTMKFfgOF/XrJ2vo6uFsbPnh1M+VWR20oSbezkg9mEkdagH7IaDMoX7963
R0Qe/7OSnxZ0RmpR6V3E91Uc0dqRgTMty6EenuLbCTrjOB8dR64MIzKG5gZYZ1sn
CPMWCAmsYzI0KIEoikw9P1t411RtkPAtpk+5u5VpB/IqfVcE13yjrSNQ6VW6fjig
uYWYwyjFTFk3
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:24 2024 by rpki-client on console-fra.rpki-client.org