Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/34352e3136342e38302e302f32322d3234203d3e20323638363038.roa
File:                     34352e3136342e38302e302f32322d3234203d3e20323638363038.roa (raw, json)
Hash identifier:          FRtccyHDeeurx2M8+OLmy7VxRinEOtiTHiYBi2uyCJ4=
Subject key identifier:   BA:E2:94:3A:DE:7E:08:81:18:1D:8F:C2:B9:7E:E4:C3:90:36:92:84
Certificate issuer:       /CN=B79F6AEAA7F8129E7FC6130A0B0DEA717E8FA3B2
Certificate serial:       712C2491AA33ED753AE0C56A8C6299CD9903E87A
Authority key identifier: B7:9F:6A:EA:A7:F8:12:9E:7F:C6:13:0A:0B:0D:EA:71:7E:8F:A3:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B79F6AEAA7F8129E7FC6130A0B0DEA717E8FA3B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/34352e3136342e38302e302f32322d3234203d3e20323638363038.roa
Signing time:             Mon 08 Apr 2024 19:23:31 +0000
ROA not before:           Mon 08 Apr 2024 19:18:31 +0000
ROA not after:            Mon 07 Apr 2025 19:23:31 +0000
asID:                     268608
IP address blocks:        45.164.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/B79F6AEAA7F8129E7FC6130A0B0DEA717E8FA3B2.crl
                          rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/B79F6AEAA7F8129E7FC6130A0B0DEA717E8FA3B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B79F6AEAA7F8129E7FC6130A0B0DEA717E8FA3B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2c:24:91:aa:33:ed:75:3a:e0:c5:6a:8c:62:99:cd:99:03:e8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B79F6AEAA7F8129E7FC6130A0B0DEA717E8FA3B2
        Validity
            Not Before: Apr  8 19:18:31 2024 GMT
            Not After : Apr  7 19:23:31 2025 GMT
        Subject: CN=BAE2943ADE7E0881181D8FC2B97EE4C390369284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:be:2d:a4:c0:8f:fd:4a:17:40:29:07:cd:
                    6e:2b:3b:8a:76:7b:48:29:78:45:fb:51:d7:4c:75:
                    67:e5:51:1e:75:01:f1:65:15:ba:32:f3:d0:19:78:
                    f9:6f:a2:e8:20:ee:0a:53:72:6a:77:26:fb:12:1f:
                    4a:aa:d5:d0:98:4f:2f:aa:d4:1f:48:da:ce:cd:0f:
                    9f:db:17:78:41:24:8a:5e:40:e4:38:cc:64:a2:c7:
                    20:ef:ae:d5:fd:73:a6:ac:28:dc:3f:03:71:03:1e:
                    7f:19:c3:9e:22:3c:ab:5b:5a:33:f5:f3:37:cd:76:
                    b1:e2:a5:c6:21:76:27:02:6e:93:9d:a1:40:6c:fc:
                    c1:46:a5:85:c2:24:b4:7a:19:94:ae:5b:e9:f2:4a:
                    d0:12:5c:64:b4:59:c6:1e:6c:8c:0a:eb:48:0b:0e:
                    5e:bb:07:41:c2:e7:0d:17:56:bf:f8:06:59:7b:8f:
                    a0:ac:17:fa:e1:52:5a:17:bf:68:a8:7d:c9:87:ec:
                    da:0c:f1:3d:fd:31:01:50:14:d8:f7:3f:35:03:d7:
                    b6:2b:32:c5:d0:17:27:ff:bb:27:02:f0:3d:6f:96:
                    1e:19:8c:56:90:99:0a:ad:8e:47:11:69:f7:5d:53:
                    23:fc:dc:fb:4d:12:4d:b8:aa:92:ae:a9:73:95:63:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E2:94:3A:DE:7E:08:81:18:1D:8F:C2:B9:7E:E4:C3:90:36:92:84
            X509v3 Authority Key Identifier:
                keyid:B7:9F:6A:EA:A7:F8:12:9E:7F:C6:13:0A:0B:0D:EA:71:7E:8F:A3:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/B79F6AEAA7F8129E7FC6130A0B0DEA717E8FA3B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B79F6AEAA7F8129E7FC6130A0B0DEA717E8FA3B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/34352e3136342e38302e302f32322d3234203d3e20323638363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:1c:8f:ea:01:aa:5a:70:db:fa:e4:6a:6e:d0:a5:a2:91:af:
         7f:9b:2e:9a:60:14:1c:1c:3c:43:2d:ac:4b:7a:1e:fa:3e:52:
         a8:49:44:ad:69:f0:c5:ce:69:e8:2a:ea:41:af:0f:28:b8:a0:
         01:a9:6f:e7:c3:dc:e6:06:92:d0:a5:79:58:7a:cf:8b:49:95:
         dc:ec:56:a4:2a:93:e2:93:6d:7c:c9:21:ae:f5:55:44:a2:3b:
         55:f7:a4:bf:ed:e0:d0:05:d5:ee:e9:3a:25:fe:35:43:7b:8c:
         27:17:40:5a:10:a4:81:30:ef:a4:d8:e2:ba:d7:f5:8f:11:3d:
         e2:61:1a:c1:ff:cb:a4:7a:55:0f:4f:cd:02:ce:7a:b0:a8:21:
         08:c9:54:1e:2f:dd:be:f3:8f:89:73:3d:67:73:ed:70:09:9d:
         91:b0:7f:82:24:6e:4b:64:fc:78:e8:a6:6c:4b:dc:03:14:9c:
         02:2f:bc:62:c8:81:4e:e1:4b:72:11:28:1f:b4:98:01:51:e6:
         18:f8:d3:0d:66:c3:59:54:64:37:86:d4:e9:f8:82:89:67:bd:
         ba:5f:e4:d4:74:74:a3:99:3a:09:16:42:79:02:f9:d1:0d:53:
         a1:e0:74:82:a4:f8:64:ec:86:a2:8c:da:73:66:f0:2b:8d:63:
         ae:cb:ad:d0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcSwkkaoz7XU64MVqjGKZzZkD6HowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc5RjZBRUFBN0Y4MTI5RTdGQzYxMzBBMEIwREVBNzE3
RThGQTNCMjAeFw0yNDA0MDgxOTE4MzFaFw0yNTA0MDcxOTIzMzFaMDMxMTAvBgNV
BAMTKEJBRTI5NDNBREU3RTA4ODExODFEOEZDMkI5N0VFNEMzOTAzNjkyODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCisb4tpMCP/UoXQCkHzW4rO4p2
e0gpeEX7UddMdWflUR51AfFlFboy89AZePlvougg7gpTcmp3JvsSH0qq1dCYTy+q
1B9I2s7ND5/bF3hBJIpeQOQ4zGSixyDvrtX9c6asKNw/A3EDHn8Zw54iPKtbWjP1
8zfNdrHipcYhdicCbpOdoUBs/MFGpYXCJLR6GZSuW+nyStASXGS0WcYebIwK60gL
Dl67B0HC5w0XVr/4Bll7j6CsF/rhUloXv2iofcmH7NoM8T39MQFQFNj3PzUD17Yr
MsXQFyf/uycC8D1vlh4ZjFaQmQqtjkcRafddUyP83PtNEk24qpKuqXOVY8d7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuuKUOt5+CIEYHY/CuX7kw5A2koQwHwYDVR0j
BBgwFoAUt59q6qf4Ep5/xhMKCw3qcX6Po7IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkROOEZNbzZCVlV5SFlyQnJpaWU2NjVycGJvbkNhQmtZYWZCQ3R2V05y
VXUvMC9CNzlGNkFFQUE3RjgxMjlFN0ZDNjEzMEEwQjBERUE3MTdFOEZBM0IyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3OUY2QUVBQTdGODEyOUU3
RkM2MTMwQTBCMERFQTcxN0U4RkEzQjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pETjhGTW82QlZVeUhZckJyaWllNjY1cnBib25DYUJrWWFmQkN0dldOclV1LzAv
MzQzNTJlMzEzNjM0MmUzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzYzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaRQMA0GCSqGSIb3DQEBCwUAA4IBAQCbHI/qAapa
cNv65Gpu0KWika9/my6aYBQcHDxDLaxLeh76PlKoSUStafDFzmnoKupBrw8ouKAB
qW/nw9zmBpLQpXlYes+LSZXc7FakKpPik218ySGu9VVEojtV96S/7eDQBdXu6Tol
/jVDe4wnF0BaEKSBMO+k2OK61/WPET3iYRrB/8ukelUPT80CznqwqCEIyVQeL92+
84+Jcz1nc+1wCZ2RsH+CJG5LZPx46KZsS9wDFJwCL7xiyIFO4UtyESgftJgBUeYY
+NMNZsNZVGQ3htTp+IKJZ726X+TUdHSjmToJFkJ5AvnRDVOh4HSCpPhk7IaijNpz
ZvArjWOuy63Q
-----END CERTIFICATE-----
Generated at Fri Sep 20 10:39:45 2024 by rpki-client on console-ams.rpki-client.org