Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/34352e3136312e32322e302f32332d3233203d3e20323638343430.roa
File:                     34352e3136312e32322e302f32332d3233203d3e20323638343430.roa (raw, json)
Hash identifier:          w7LbEAoHYw1JwG+oL1KY6YzFj75KlC9XPBVPiI6bp7c=
Subject key identifier:   BC:9B:40:CE:E3:EA:74:D3:09:22:10:4E:3A:05:3A:0A:6E:C8:4C:C3
Certificate issuer:       /CN=F1E9E66CDF460681B363364D2E6C538262A83312
Certificate serial:       41639E906EFA57C67ECD4E4D413904526328BF21
Authority key identifier: F1:E9:E6:6C:DF:46:06:81:B3:63:36:4D:2E:6C:53:82:62:A8:33:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E9E66CDF460681B363364D2E6C538262A83312.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/34352e3136312e32322e302f32332d3233203d3e20323638343430.roa
Signing time:             Thu 04 Apr 2024 11:30:59 +0000
ROA not before:           Thu 04 Apr 2024 11:25:59 +0000
ROA not after:            Thu 03 Apr 2025 11:30:59 +0000
asID:                     268440
IP address blocks:        45.161.22.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/F1E9E66CDF460681B363364D2E6C538262A83312.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/F1E9E66CDF460681B363364D2E6C538262A83312.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E9E66CDF460681B363364D2E6C538262A83312.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:63:9e:90:6e:fa:57:c6:7e:cd:4e:4d:41:39:04:52:63:28:bf:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1E9E66CDF460681B363364D2E6C538262A83312
        Validity
            Not Before: Apr  4 11:25:59 2024 GMT
            Not After : Apr  3 11:30:59 2025 GMT
        Subject: CN=BC9B40CEE3EA74D30922104E3A053A0A6EC84CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:b6:15:71:21:2d:b7:fe:2b:c0:2d:c8:35:
                    00:d6:9c:2b:f4:e1:63:b0:f0:66:03:03:85:bb:7f:
                    7b:de:7c:a7:4a:67:c1:f9:08:b8:dc:b0:5f:ad:95:
                    19:67:ed:25:54:60:90:34:bf:65:66:48:1b:a8:70:
                    42:c9:6a:74:a5:bd:db:6e:6d:98:d5:81:43:08:5b:
                    e2:82:cc:b3:03:42:ef:28:f8:ba:a6:28:40:03:14:
                    9e:78:9f:56:a1:f4:6f:09:e1:36:de:5a:f6:60:42:
                    74:27:dc:14:95:f2:10:f1:12:de:38:0e:b4:a1:ff:
                    1d:32:cb:c1:17:2e:9b:12:32:69:fc:4a:be:9a:b2:
                    c1:fa:11:10:42:58:ec:19:b3:3b:ea:ae:81:58:1d:
                    da:41:10:cb:7e:49:fd:f3:5e:6a:b1:d1:e0:6a:fd:
                    7f:0b:1c:6a:60:e4:f5:c9:d8:6e:01:68:ef:f2:b3:
                    6e:43:1f:23:d2:1d:cb:0d:68:cf:ea:c1:8b:d1:09:
                    ef:9f:df:04:37:9a:6e:42:fb:12:25:ba:ac:8a:64:
                    ee:a0:50:b5:6f:a8:68:df:d2:64:98:bb:d6:74:af:
                    9e:67:68:ae:cb:ed:a8:83:05:23:25:5d:ce:de:40:
                    1c:9c:0f:66:c8:1f:a9:b0:19:2f:30:db:9f:67:6a:
                    23:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9B:40:CE:E3:EA:74:D3:09:22:10:4E:3A:05:3A:0A:6E:C8:4C:C3
            X509v3 Authority Key Identifier:
                keyid:F1:E9:E6:6C:DF:46:06:81:B3:63:36:4D:2E:6C:53:82:62:A8:33:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/F1E9E66CDF460681B363364D2E6C538262A83312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E9E66CDF460681B363364D2E6C538262A83312.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/34352e3136312e32322e302f32332d3233203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:3b:93:ea:13:47:b1:f5:4d:42:da:c2:fb:bc:22:b4:e5:81:
         db:a9:79:24:45:a1:51:e8:a0:eb:bf:bd:2f:98:25:74:d3:50:
         09:0c:8f:92:02:19:b9:d1:ed:9b:e9:79:e9:ec:7a:7e:91:b6:
         04:45:65:f1:00:32:66:b7:8f:56:31:de:bb:a9:88:dc:f9:5a:
         1f:00:ba:c7:c2:8e:70:da:48:1b:dc:c3:54:d3:59:3f:27:84:
         30:ec:83:23:65:9c:46:13:09:39:77:ba:a5:40:3a:73:90:cf:
         d1:b0:b4:2a:56:de:d6:bd:47:c6:1d:72:ee:59:19:e7:4e:cd:
         95:fc:6f:f8:2f:93:f3:7a:f7:1b:80:ce:03:cb:82:3b:c4:71:
         7d:85:15:ae:aa:e6:6f:eb:36:80:25:56:f8:80:95:60:31:ac:
         ad:ce:6a:77:6d:54:ed:a7:5c:83:49:f7:0e:ef:5b:51:74:59:
         14:f5:17:ca:78:81:d5:1f:ca:16:88:8a:f3:0b:ab:fe:d3:39:
         cd:2d:7b:54:0a:34:17:f4:19:b2:4c:0c:74:90:80:80:1b:90:
         55:97:97:fa:1a:f0:ad:e9:8d:60:4d:86:0e:67:0a:15:2c:5b:
         06:a4:f6:5a:b1:36:18:39:1e:06:64:0e:8a:ac:c3:82:3c:7a:
         47:c1:53:1f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQWOekG76V8Z+zU5NQTkEUmMovyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFFOUU2NkNERjQ2MDY4MUIzNjMzNjREMkU2QzUzODI2
MkE4MzMxMjAeFw0yNDA0MDQxMTI1NTlaFw0yNTA0MDMxMTMwNTlaMDMxMTAvBgNV
BAMTKEJDOUI0MENFRTNFQTc0RDMwOTIyMTA0RTNBMDUzQTBBNkVDODRDQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfLYVcSEtt/4rwC3INQDWnCv0
4WOw8GYDA4W7f3vefKdKZ8H5CLjcsF+tlRln7SVUYJA0v2VmSBuocELJanSlvdtu
bZjVgUMIW+KCzLMDQu8o+LqmKEADFJ54n1ah9G8J4TbeWvZgQnQn3BSV8hDxEt44
DrSh/x0yy8EXLpsSMmn8Sr6assH6ERBCWOwZszvqroFYHdpBEMt+Sf3zXmqx0eBq
/X8LHGpg5PXJ2G4BaO/ys25DHyPSHcsNaM/qwYvRCe+f3wQ3mm5C+xIluqyKZO6g
ULVvqGjf0mSYu9Z0r55naK7L7aiDBSMlXc7eQBycD2bIH6mwGS8w259naiN5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvJtAzuPqdNMJIhBOOgU6Cm7ITMMwHwYDVR0j
BBgwFoAU8enmbN9GBoGzYzZNLmxTgmKoMxIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGJNM0djRDl2YmhYdVh0NmN6SmRpbjVZQ3Y5MmFzZEVDbmVTc3JwMWRl
MlkvMS9GMUU5RTY2Q0RGNDYwNjgxQjM2MzM2NEQyRTZDNTM4MjYyQTgzMzEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxRTlFNjZDREY0NjA2ODFC
MzYzMzY0RDJFNkM1MzgyNjJBODMzMTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hiTTNHY0Q5dmJoWHVYdDZjekpkaW41WUN2OTJhc2RFQ25lU3NycDFkZTJZLzEv
MzQzNTJlMzEzNjMxMmUzMjMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLaEWMA0GCSqGSIb3DQEBCwUAA4IBAQArO5PqE0ex
9U1C2sL7vCK05YHbqXkkRaFR6KDrv70vmCV001AJDI+SAhm50e2b6Xnp7Hp+kbYE
RWXxADJmt49WMd67qYjc+VofALrHwo5w2kgb3MNU01k/J4Qw7IMjZZxGEwk5d7ql
QDpzkM/RsLQqVt7WvUfGHXLuWRnnTs2V/G/4L5PzevcbgM4Dy4I7xHF9hRWuquZv
6zaAJVb4gJVgMaytzmp3bVTtp1yDSfcO71tRdFkU9RfKeIHVH8oWiIrzC6v+0znN
LXtUCjQX9BmyTAx0kICAG5BVl5f6GvCt6Y1gTYYOZwoVLFsGpPZasTYYOR4GZA6K
rMOCPHpHwVMf
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:31 2024 by rpki-client on console-ams.rpki-client.org