Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131322e302f32332d3233203d3e20323639333733.roa
File:                     34352e3138352e3131322e302f32332d3233203d3e20323639333733.roa (raw, json)
Hash identifier:          +ap408G0t75+JZOicYZExzI0zwZr/dsQO/kixB+XW/M=
Subject key identifier:   5E:9C:30:BC:95:41:48:A2:B4:62:BC:F2:AA:ED:A8:A3:55:C6:64:64
Certificate issuer:       /CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
Certificate serial:       0AF815BEC7BB88A3FDB5B0C404CE15D0DD8884E6
Authority key identifier: 2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131322e302f32332d3233203d3e20323639333733.roa
Signing time:             Thu 04 Apr 2024 03:00:14 +0000
ROA not before:           Thu 04 Apr 2024 02:55:14 +0000
ROA not after:            Thu 03 Apr 2025 03:00:14 +0000
asID:                     269373
IP address blocks:        45.185.112.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl
                          rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 15:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f8:15:be:c7:bb:88:a3:fd:b5:b0:c4:04:ce:15:d0:dd:88:84:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
        Validity
            Not Before: Apr  4 02:55:14 2024 GMT
            Not After : Apr  3 03:00:14 2025 GMT
        Subject: CN=5E9C30BC954148A2B462BCF2AAEDA8A355C66464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:f1:44:6c:03:67:12:b3:e4:39:4f:54:11:
                    94:6c:26:57:4d:a4:54:fb:aa:39:5a:eb:91:a2:07:
                    31:ee:36:aa:ea:a3:9a:d3:40:b6:9c:08:e3:49:e6:
                    89:12:61:05:c6:07:bc:69:83:9b:ea:7b:93:44:91:
                    20:80:01:4c:b8:f2:87:78:1f:66:c5:e4:95:a2:03:
                    f6:94:17:fa:c4:e1:fd:ee:c7:72:4a:82:b0:8e:d0:
                    99:8e:99:9f:2b:1b:ca:59:28:f5:c7:2e:0a:60:b7:
                    9b:a3:fc:87:6a:a0:a4:d8:91:af:38:fc:15:0e:c2:
                    19:eb:80:2e:90:42:85:74:b8:15:48:1b:10:44:29:
                    6d:a6:6c:1d:7e:4c:88:71:15:97:1a:94:5f:20:92:
                    0c:10:84:eb:a2:04:91:7c:70:0d:06:c7:84:59:f7:
                    6f:8e:2b:38:24:36:6f:6b:40:d5:42:42:44:6a:90:
                    b6:3d:63:b7:bf:d3:08:4a:13:94:89:da:3e:eb:e8:
                    1e:cf:7f:c8:4e:ad:49:55:87:16:2d:aa:48:d4:68:
                    68:a0:82:ac:19:73:a8:32:51:a3:60:b6:7b:73:1a:
                    16:80:ca:91:78:a2:f6:c9:4e:a2:6d:e5:41:21:45:
                    50:3e:ad:ad:ad:f1:4c:1d:67:51:eb:73:3f:2a:0e:
                    d3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9C:30:BC:95:41:48:A2:B4:62:BC:F2:AA:ED:A8:A3:55:C6:64:64
            X509v3 Authority Key Identifier:
                keyid:2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131322e302f32332d3233203d3e20323639333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:25:3f:dd:c3:5b:64:02:86:78:50:a8:cd:47:79:cf:33:b4:
         08:e3:19:45:fe:c3:bc:9e:5d:98:a1:05:2c:64:b9:41:13:0e:
         aa:7d:94:54:3d:b1:4c:ce:48:11:f3:64:46:4e:f2:30:ca:2a:
         f0:42:32:0f:b1:6d:66:25:1c:72:6d:60:76:12:a9:a4:a8:97:
         d1:da:f1:92:67:cc:d5:7f:be:f7:04:7f:47:96:75:fa:fc:e2:
         60:56:e8:ad:8a:15:67:0b:a2:be:e1:2b:59:f8:dd:1c:a0:e5:
         42:4d:91:40:b3:f6:a7:eb:fc:fb:2a:0a:64:37:9b:13:95:31:
         47:3d:a0:52:09:e4:99:36:1c:66:bc:93:b9:39:3b:c0:5b:ee:
         b8:ba:fb:dc:e3:23:28:98:9b:d7:db:b4:92:fb:95:20:e5:36:
         01:1b:df:d2:cc:73:89:92:ff:41:fb:bb:bb:8c:58:2b:74:4a:
         5b:8b:49:09:d3:89:8f:98:72:a0:4e:11:9d:ba:39:7a:d1:0e:
         19:2f:1f:9b:ee:ef:2d:94:a9:12:b0:48:aa:a3:4b:56:88:20:
         d5:f1:6e:b3:9f:b0:0e:13:a5:b0:d2:01:3b:9b:4b:b1:e3:96:
         ba:b7:d4:e9:6f:54:8a:27:54:20:17:6f:11:26:09:33:8a:ae:
         d5:b6:a0:13
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCvgVvse7iKP9tbDEBM4V0N2IhOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNDMEIyMkQ3QzJCNUMyODZGRUFCNTQ5OEZGRjM0MTFG
RTZDMTk5RDAeFw0yNDA0MDQwMjU1MTRaFw0yNTA0MDMwMzAwMTRaMDMxMTAvBgNV
BAMTKDVFOUMzMEJDOTU0MTQ4QTJCNDYyQkNGMkFBRURBOEEzNTVDNjY0NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vfFEbANnErPkOU9UEZRsJldN
pFT7qjla65GiBzHuNqrqo5rTQLacCONJ5okSYQXGB7xpg5vqe5NEkSCAAUy48od4
H2bF5JWiA/aUF/rE4f3ux3JKgrCO0JmOmZ8rG8pZKPXHLgpgt5uj/IdqoKTYka84
/BUOwhnrgC6QQoV0uBVIGxBEKW2mbB1+TIhxFZcalF8gkgwQhOuiBJF8cA0Gx4RZ
92+OKzgkNm9rQNVCQkRqkLY9Y7e/0whKE5SJ2j7r6B7Pf8hOrUlVhxYtqkjUaGig
gqwZc6gyUaNgtntzGhaAypF4ovbJTqJt5UEhRVA+ra2t8UwdZ1Hrcz8qDtObAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXpwwvJVBSKK0Yrzyqu2oo1XGZGQwHwYDVR0j
BBgwFoAULMCyLXwrXChv6rVJj/80Ef5sGZ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjZVN3pKWWp4enhodlJVcWlSVzFCZUJCY0w3aW1uR0w0M3BKczRNSFE3
eG8vMS8yQ0MwQjIyRDdDMkI1QzI4NkZFQUI1NDk4RkZGMzQxMUZFNkMxOTlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQzBCMjJEN0MyQjVDMjg2
RkVBQjU0OThGRkYzNDExRkU2QzE5OUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o2VTd6SllqeHp4aHZSVXFpUlcxQmVCQmNMN2ltbkdMNDNwSnM0TUhRN3hvLzEv
MzQzNTJlMzEzODM1MmUzMTMxMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtuXAwDQYJKoZIhvcNAQELBQADggEBAAslP93D
W2QChnhQqM1Hec8ztAjjGUX+w7yeXZihBSxkuUETDqp9lFQ9sUzOSBHzZEZO8jDK
KvBCMg+xbWYlHHJtYHYSqaSol9Ha8ZJnzNV/vvcEf0eWdfr84mBW6K2KFWcLor7h
K1n43Ryg5UJNkUCz9qfr/PsqCmQ3mxOVMUc9oFIJ5Jk2HGa8k7k5O8Bb7ri6+9zj
IyiYm9fbtJL7lSDlNgEb39LMc4mS/0H7u7uMWCt0SluLSQnTiY+YcqBOEZ26OXrR
DhkvH5vu7y2UqRKwSKqjS1aIINXxbrOfsA4TpbDSATubS7Hjlrq31OlvVIonVCAX
bxEmCTOKrtW2oBM=
-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:10 2024 by rpki-client on console-fra.rpki-client.org