Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37342e302f32342d3234203d3e20323638333535.roa
File:                     34352e3233392e37342e302f32342d3234203d3e20323638333535.roa (raw, json)
Hash identifier:          JjIenFO2WhvOy+hdCWl/7+s2ilfmMUmcvdW7J8aNHL8=
Subject key identifier:   83:5C:F1:16:8B:B0:96:32:31:7C:B1:F0:E9:88:E3:1C:1C:80:23:2D
Certificate issuer:       /CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
Certificate serial:       2A8C5059B65CA23493E5BA6BDA18EA08B280FF13
Authority key identifier: 28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37342e302f32342d3234203d3e20323638333535.roa
Signing time:             Wed 16 Oct 2024 13:44:27 +0000
ROA not before:           Wed 16 Oct 2024 13:39:27 +0000
ROA not after:            Wed 15 Oct 2025 13:44:27 +0000
asID:                     268355
IP address blocks:        45.239.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl
                          rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 06:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8c:50:59:b6:5c:a2:34:93:e5:ba:6b:da:18:ea:08:b2:80:ff:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
        Validity
            Not Before: Oct 16 13:39:27 2024 GMT
            Not After : Oct 15 13:44:27 2025 GMT
        Subject: CN=835CF1168BB09632317CB1F0E988E31C1C80232D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:82:ef:7e:49:41:c3:72:db:1f:59:3e:1b:
                    35:f9:b8:59:59:60:43:c1:91:59:05:fb:58:10:d3:
                    ce:49:aa:eb:bc:2b:80:dc:24:a8:b3:1c:2d:da:4c:
                    e4:51:64:45:b1:3a:c2:33:f1:a5:ac:5d:a3:55:9d:
                    1b:d8:d5:66:77:10:c6:5d:50:12:d1:80:ed:6c:3d:
                    73:2b:2d:c4:c1:22:af:97:c2:72:d2:d2:14:54:c5:
                    3d:63:49:1f:87:ff:fc:2e:c5:4d:e0:69:1f:05:f5:
                    07:f6:be:3a:2b:ff:9a:0c:46:8b:e3:b0:0f:c2:63:
                    97:0f:7b:48:7d:31:42:0e:63:60:97:0a:cf:27:2a:
                    5b:c2:72:4c:8d:ad:5a:00:ee:3d:9f:7a:91:3d:56:
                    df:7f:e4:a6:92:c6:69:7f:16:d4:98:f0:cb:4d:98:
                    22:a3:be:f2:2c:79:98:68:85:8b:a7:d6:0c:57:fb:
                    fb:60:4b:e2:a4:c4:71:b7:52:98:9f:16:8c:56:e9:
                    13:24:09:47:35:12:f4:c1:64:e4:a3:91:24:44:05:
                    22:cf:08:de:84:cc:2d:cb:2d:78:0e:b1:60:99:88:
                    57:a9:a1:55:86:e9:37:6a:21:06:27:88:87:1d:a5:
                    30:6c:01:57:b8:6f:3c:c6:44:e9:1e:49:94:80:91:
                    5a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5C:F1:16:8B:B0:96:32:31:7C:B1:F0:E9:88:E3:1C:1C:80:23:2D
            X509v3 Authority Key Identifier:
                keyid:28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37342e302f32342d3234203d3e20323638333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:08:96:12:41:2a:46:f8:3a:8b:42:b9:d5:03:8e:fb:46:55:
         a0:ce:b4:ba:d2:24:d9:cc:43:31:02:2d:6e:cc:f3:17:73:10:
         14:19:82:73:50:f1:62:ba:5f:8b:18:0f:43:63:88:62:83:9f:
         1c:58:5e:e5:20:c8:b2:4a:2b:25:f2:02:cd:a2:e0:c3:0c:24:
         d8:91:b6:e8:8d:65:3e:fe:03:49:47:65:5c:a0:d6:17:a0:92:
         a7:29:8d:46:0d:c0:1c:14:29:82:27:80:cf:4a:3f:67:4e:34:
         d4:14:05:a3:db:02:a2:be:eb:5a:4a:26:78:82:26:9d:69:c7:
         ff:0c:12:cc:a7:a8:fc:3f:4c:62:ef:18:d7:c8:76:4f:bd:80:
         9c:4d:18:43:23:a0:91:37:16:ee:7a:41:b6:ca:39:0b:ae:29:
         eb:bd:36:70:12:5e:30:d8:c1:23:82:4c:69:57:62:61:82:d1:
         26:09:3a:71:5a:ed:30:c9:91:46:6e:5d:ec:d3:a9:60:ce:aa:
         60:58:e2:ee:69:aa:1b:cd:84:26:87:55:fc:11:c8:16:ab:c5:
         16:2d:7e:ab:69:6f:8a:e5:f1:f0:20:d4:45:20:6c:b8:84:6c:
         50:59:d1:2c:30:99:30:e4:d8:26:b7:ba:fe:a4:9e:ff:0d:50:
         9c:3f:2e:a8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKoxQWbZcojST5bpr2hjqCLKA/xMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhGOUY5RkJERjQ4OUU4NkEyQ0I5MjlBNDdFOEJDMEFC
QzJBMUIxQzAeFw0yNDEwMTYxMzM5MjdaFw0yNTEwMTUxMzQ0MjdaMDMxMTAvBgNV
BAMTKDgzNUNGMTE2OEJCMDk2MzIzMTdDQjFGMEU5ODhFMzFDMUM4MDIzMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GILvfklBw3LbH1k+GzX5uFlZ
YEPBkVkF+1gQ085Jquu8K4DcJKizHC3aTORRZEWxOsIz8aWsXaNVnRvY1WZ3EMZd
UBLRgO1sPXMrLcTBIq+XwnLS0hRUxT1jSR+H//wuxU3gaR8F9Qf2vjor/5oMRovj
sA/CY5cPe0h9MUIOY2CXCs8nKlvCckyNrVoA7j2fepE9Vt9/5KaSxml/FtSY8MtN
mCKjvvIseZhohYun1gxX+/tgS+KkxHG3UpifFoxW6RMkCUc1EvTBZOSjkSREBSLP
CN6EzC3LLXgOsWCZiFepoVWG6TdqIQYniIcdpTBsAVe4bzzGROkeSZSAkVohAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUg1zxFouwljIxfLHw6YjjHByAIy0wHwYDVR0j
BBgwFoAUKPn5+99Inoaiy5KaR+i8CrwqGxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJOVHdLVmRlblRSSzdkWFZQY0MzMVNwUnJUSFF5aXdFdnlYaFFVQll0
aTkvMC8yOEY5RjlGQkRGNDg5RTg2QTJDQjkyOUE0N0U4QkMwQUJDMkExQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4RjlGOUZCREY0ODlFODZB
MkNCOTI5QTQ3RThCQzBBQkMyQTFCMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyTlR3S1ZkZW5UUks3ZFhWUGNDMzFTcFJyVEhReWl3RXZ5WGhRVUJZdGk5LzAv
MzQzNTJlMzIzMzM5MmUzNzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzMzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALe9KMA0GCSqGSIb3DQEBCwUAA4IBAQAYCJYSQSpG
+DqLQrnVA477RlWgzrS60iTZzEMxAi1uzPMXcxAUGYJzUPFiul+LGA9DY4hig58c
WF7lIMiySisl8gLNouDDDCTYkbbojWU+/gNJR2VcoNYXoJKnKY1GDcAcFCmCJ4DP
Sj9nTjTUFAWj2wKivutaSiZ4giadacf/DBLMp6j8P0xi7xjXyHZPvYCcTRhDI6CR
NxbuekG2yjkLrinrvTZwEl4w2MEjgkxpV2JhgtEmCTpxWu0wyZFGbl3s06lgzqpg
WOLuaaobzYQmh1X8EcgWq8UWLX6raW+K5fHwINRFIGy4hGxQWdEsMJkw5Ngmt7r+
pJ7/DVCcPy6o
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:38:12 2025 by rpki-client