Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130322e302f32342d3234203d3e20323638323639.roa
File:                     34352e3233372e3130322e302f32342d3234203d3e20323638323639.roa (raw, json)
Hash identifier:          v34cx1U7ctJqOhGrTlvfYx2g+7/gLJ41SWWWxYa5nDI=
Subject key identifier:   09:DE:77:2F:BF:4C:B0:F7:2E:FE:29:0F:CC:70:42:F4:9D:C4:D2:1B
Certificate issuer:       /CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
Certificate serial:       2D8F45DB20E97DEF4D0468F5B3504EEC5C609A8E
Authority key identifier: B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130322e302f32342d3234203d3e20323638323639.roa
Signing time:             Thu 04 Apr 2024 19:08:48 +0000
ROA not before:           Thu 04 Apr 2024 19:03:48 +0000
ROA not after:            Thu 03 Apr 2025 19:08:48 +0000
asID:                     268269
IP address blocks:        45.237.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.crl
                          rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8f:45:db:20:e9:7d:ef:4d:04:68:f5:b3:50:4e:ec:5c:60:9a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
        Validity
            Not Before: Apr  4 19:03:48 2024 GMT
            Not After : Apr  3 19:08:48 2025 GMT
        Subject: CN=09DE772FBF4CB0F72EFE290FCC7042F49DC4D21B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:18:81:12:ba:0a:94:cb:42:16:9e:c9:f1:
                    83:bb:35:a0:b3:95:63:c1:22:91:3b:9a:9c:b3:e2:
                    9a:ab:15:30:55:30:a2:9f:b2:3a:77:24:7c:de:c4:
                    c7:d5:73:47:5f:22:84:a5:d4:56:98:a4:92:39:0f:
                    43:ce:f9:81:d6:ae:0c:c3:72:f2:47:b5:3b:86:97:
                    44:ab:fd:6e:61:6e:3a:13:cb:cb:ce:79:f4:b9:e7:
                    91:b9:c4:9e:27:c3:c0:20:75:47:71:b7:45:79:85:
                    2c:d9:39:bf:5a:0c:e7:f7:fd:69:44:61:6f:67:33:
                    bc:bb:e1:89:6a:7d:09:b5:65:a8:c3:f8:fe:39:f2:
                    d3:91:7b:de:f0:2b:9d:94:55:76:e5:d9:04:21:b6:
                    9f:2d:b0:86:d2:17:7f:05:99:fa:4d:d6:be:cc:f1:
                    a6:47:c0:ab:36:5f:dc:6f:df:cb:09:51:eb:98:ff:
                    66:a7:4e:f1:eb:81:d3:3e:af:41:f7:8c:45:5c:c5:
                    91:36:90:05:10:d4:60:3f:89:23:79:85:04:4d:38:
                    ea:22:44:35:6a:7a:66:27:aa:f1:6a:2f:48:da:3a:
                    0a:25:cb:53:c8:1f:37:74:d2:4d:92:b7:4a:5d:2b:
                    99:d2:6c:f0:83:df:a7:dd:c4:e4:3a:86:68:0d:d4:
                    4d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DE:77:2F:BF:4C:B0:F7:2E:FE:29:0F:CC:70:42:F4:9D:C4:D2:1B
            X509v3 Authority Key Identifier:
                keyid:B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130322e302f32342d3234203d3e20323638323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:0f:4e:4c:c7:d3:0e:c4:52:c4:f3:cd:70:3c:9c:68:04:7d:
         ba:2f:ac:16:43:4f:8e:b2:5b:7f:99:22:7a:11:63:7c:39:c4:
         13:22:f9:a6:f3:3c:65:91:50:5b:fc:ea:9f:69:c6:e8:ea:f9:
         8e:59:78:0b:62:f7:86:76:16:22:0a:94:dd:73:15:1f:81:e2:
         66:36:92:0f:94:b4:51:5f:ce:f3:c1:e8:7c:ea:e0:d5:79:f0:
         1c:cc:3f:30:5f:1a:98:b7:2c:2a:5d:6b:f5:68:f3:69:df:b8:
         32:b3:c3:42:63:7e:6a:73:8c:cd:c2:06:fe:f1:05:17:f7:51:
         82:74:3d:d9:09:02:e8:4c:80:07:d6:e1:7d:19:52:bf:1d:cd:
         ab:71:1e:3a:c2:57:b4:59:b4:6b:57:d9:35:9e:3a:46:9e:bc:
         16:ee:6c:e5:d7:e3:03:83:19:cc:14:c1:5c:97:dc:65:37:d6:
         94:61:5b:97:0a:c6:50:0c:25:bc:9c:d2:46:21:bb:d6:59:62:
         28:c0:10:96:42:a4:3f:68:69:ec:65:3d:7c:dd:f0:52:2e:07:
         fc:a2:d1:27:08:ef:46:ef:58:56:f5:e1:5e:6c:53:95:20:cf:
         a1:d6:dd:99:bf:d0:7a:2e:cf:4d:53:2d:f7:e4:8b:d1:22:d1:
         a9:a1:4a:1a
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIULY9F2yDpfe9NBGj1s1BO7Fxgmo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgyNzQyMjJEQUU5RkNBODA5NzUxNzEzMzdEREU0RkYx
OUNFOEUyNDAeFw0yNDA0MDQxOTAzNDhaFw0yNTA0MDMxOTA4NDhaMDMxMTAvBgNV
BAMTKDA5REU3NzJGQkY0Q0IwRjcyRUZFMjkwRkNDNzA0MkY0OURDNEQyMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rhiBEroKlMtCFp7J8YO7NaCz
lWPBIpE7mpyz4pqrFTBVMKKfsjp3JHzexMfVc0dfIoSl1FaYpJI5D0PO+YHWrgzD
cvJHtTuGl0Sr/W5hbjoTy8vOefS555G5xJ4nw8AgdUdxt0V5hSzZOb9aDOf3/WlE
YW9nM7y74YlqfQm1ZajD+P458tORe97wK52UVXbl2QQhtp8tsIbSF38FmfpN1r7M
8aZHwKs2X9xv38sJUeuY/2anTvHrgdM+r0H3jEVcxZE2kAUQ1GA/iSN5hQRNOOoi
RDVqemYnqvFqL0jaOgoly1PIHzd00k2St0pdK5nSbPCD36fdxOQ6hmgN1E2jAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUCd53L79MsPcu/ikPzHBC9J3E0hswHwYDVR0j
BBgwFoAUuCdCItrp/KgJdRcTN93k/xnOjiQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NY2ZrU1N5SGJBMjVWR0RTZXhpV0NQbUx3WndYRWROTFlZQzdqVTdESzlC
LzEvQjgyNzQyMjJEQUU5RkNBODA5NzUxNzEzMzdEREU0RkYxOUNFOEUyNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CODI3NDIyMkRBRTlGQ0E4MDk3
NTE3MTMzN0RERTRGRjE5Q0U4RTI0LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9N
Y2ZrU1N5SGJBMjVWR0RTZXhpV0NQbUx3WndYRWROTFlZQzdqVTdESzlCLzEvMzQz
NTJlMzIzMzM3MmUzMTMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzgz
MjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAt7WYwDQYJKoZIhvcNAQELBQADggEBANcPTkzH0w7E
UsTzzXA8nGgEfbovrBZDT46yW3+ZInoRY3w5xBMi+abzPGWRUFv86p9pxujq+Y5Z
eAti94Z2FiIKlN1zFR+B4mY2kg+UtFFfzvPB6Hzq4NV58BzMPzBfGpi3LCpda/Vo
82nfuDKzw0JjfmpzjM3CBv7xBRf3UYJ0PdkJAuhMgAfW4X0ZUr8dzatxHjrCV7RZ
tGtX2TWeOkaevBbubOXX4wODGcwUwVyX3GU31pRhW5cKxlAMJbyc0kYhu9ZZYijA
EJZCpD9oaexlPXzd8FIuB/yi0ScI70bvWFb14V5sU5Ugz6HW3Zm/0Houz01TLffk
i9Ei0amhSho=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:21 2024 by rpki-client on console-ams.rpki-client.org