Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231362e302f32332d3233203d3e20323638373332.roa
File:                     34352e3137312e3231362e302f32332d3233203d3e20323638373332.roa (raw, json)
Hash identifier:          vQGNCb1ZmUd5DYs8q9Wt9ZKCU6tt+eCRGVLHxa7Uk/Q=
Subject key identifier:   68:95:91:6B:C1:9B:AC:76:F5:46:C4:1F:AC:BB:D5:BA:A8:FF:19:46
Certificate issuer:       /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial:       13712DEACD2A39A9AFDDE3BFA079C4A5E603C903
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231362e302f32332d3233203d3e20323638373332.roa
Signing time:             Wed 03 Apr 2024 18:30:09 +0000
ROA not before:           Wed 03 Apr 2024 18:25:09 +0000
ROA not after:            Wed 02 Apr 2025 18:30:09 +0000
asID:                     268732
IP address blocks:        45.171.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
                          rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:71:2d:ea:cd:2a:39:a9:af:dd:e3:bf:a0:79:c4:a5:e6:03:c9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
        Validity
            Not Before: Apr  3 18:25:09 2024 GMT
            Not After : Apr  2 18:30:09 2025 GMT
        Subject: CN=6895916BC19BAC76F546C41FACBBD5BAA8FF1946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:52:74:50:e3:6e:51:cd:db:2a:b8:eb:c8:
                    9d:95:6b:de:9d:3a:20:26:32:c9:07:53:06:4b:a0:
                    b1:ed:21:c4:93:89:0d:dd:69:93:12:db:08:bf:ed:
                    a2:b2:37:4c:fa:33:d5:66:c3:2f:04:1a:38:49:7a:
                    aa:c3:13:83:25:00:47:47:c0:d6:0b:ac:cb:26:d5:
                    31:8f:46:2d:6f:02:16:91:f3:7a:38:c3:8e:80:f8:
                    f3:96:19:6e:e1:1c:33:ec:c7:c0:9c:90:35:53:b0:
                    12:13:df:4c:0a:8f:2f:c0:3b:d5:20:54:db:f4:12:
                    bc:d3:bc:b0:29:5c:6a:a0:24:ec:f9:09:49:29:6b:
                    e8:3e:a7:78:19:77:40:25:6a:a7:87:18:e1:27:ef:
                    ad:1a:47:a2:4b:c0:e8:47:e0:5c:55:97:86:22:f4:
                    dc:08:dd:f6:48:50:99:59:29:e3:a6:fc:30:a1:b4:
                    77:c7:5f:2a:22:86:c8:d8:f4:65:2d:19:23:8a:bc:
                    81:89:cd:06:46:97:6d:8a:16:91:e2:95:28:6e:99:
                    e6:e2:c6:01:e5:15:1f:0c:49:50:95:b2:31:51:85:
                    18:d8:3d:22:a9:13:4f:da:75:c7:ff:33:be:4a:1b:
                    63:a1:c1:3f:14:76:f8:e0:bb:c4:5b:4d:ba:1a:20:
                    98:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:95:91:6B:C1:9B:AC:76:F5:46:C4:1F:AC:BB:D5:BA:A8:FF:19:46
            X509v3 Authority Key Identifier:
                keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231362e302f32332d3233203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:2b:a6:49:03:d3:8c:60:8a:b6:06:b6:9f:98:21:c1:bb:18:
         77:34:bd:78:13:d8:0e:2d:69:3f:57:14:72:b7:b0:99:d3:8f:
         97:f5:9e:4e:c0:8a:1f:71:1b:e4:b2:c9:43:5d:2b:e5:3f:66:
         14:b2:d4:a8:a5:a6:b0:e9:6b:85:17:87:5c:e1:d3:6d:6e:7d:
         97:48:e2:a4:83:50:62:29:50:4d:a1:15:b6:df:1f:a2:c5:00:
         ac:b5:2f:c3:fa:8b:fc:35:ad:09:4a:bb:e1:76:2a:10:8c:e6:
         23:b2:f0:c7:52:fd:0e:86:4a:ba:0d:d5:fc:95:8f:fd:8c:6f:
         5d:9a:88:c9:74:1c:7f:5c:46:60:3f:c3:7b:8a:93:d3:2f:4e:
         08:6f:0a:31:f4:7d:81:3d:3d:ec:82:21:9f:1b:a5:58:a9:dd:
         d5:78:a0:4c:56:dc:01:0b:b6:00:8e:78:3e:3e:97:5c:eb:cf:
         a4:2e:70:25:19:cb:70:71:25:2c:45:fe:0d:ed:a2:9f:e7:78:
         bb:57:57:f4:be:c6:ad:1c:73:ac:3f:fc:38:96:96:5f:14:e0:
         3f:33:85:6b:9c:09:4f:7e:40:39:08:47:b8:37:11:50:a1:12:
         6f:0b:6f:80:e6:fc:bb:74:5c:c3:15:21:aa:14:c3:70:a9:f0:
         1c:58:af:bd
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUE3Et6s0qOamv3eO/oHnEpeYDyQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjcxMjQ2NTFEMTlEMTMyNTQzRTk5MUI3QTc0REQ0QTY4
MDc2OEEwOTAeFw0yNDA0MDMxODI1MDlaFw0yNTA0MDIxODMwMDlaMDMxMTAvBgNV
BAMTKDY4OTU5MTZCQzE5QkFDNzZGNTQ2QzQxRkFDQkJENUJBQThGRjE5NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLm1J0UONuUc3bKrjryJ2Va96d
OiAmMskHUwZLoLHtIcSTiQ3daZMS2wi/7aKyN0z6M9Vmwy8EGjhJeqrDE4MlAEdH
wNYLrMsm1TGPRi1vAhaR83o4w46A+POWGW7hHDPsx8CckDVTsBIT30wKjy/AO9Ug
VNv0ErzTvLApXGqgJOz5CUkpa+g+p3gZd0AlaqeHGOEn760aR6JLwOhH4FxVl4Yi
9NwI3fZIUJlZKeOm/DChtHfHXyoihsjY9GUtGSOKvIGJzQZGl22KFpHilShumebi
xgHlFR8MSVCVsjFRhRjYPSKpE0/adcf/M75KG2OhwT8Udvjgu8RbTboaIJidAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUaJWRa8GbrHb1RsQfrLvVuqj/GUYwHwYDVR0j
BBgwFoAUtxJGUdGdEyVD6ZG3p03UpoB2igkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9uMTZ5MUxVTFlrS3lYem1ObVlnUXNDZTlzdjl2d2k0M1BRTHpyUXBLalNN
LzEvQjcxMjQ2NTFEMTlEMTMyNTQzRTk5MUI3QTc0REQ0QTY4MDc2OEEwOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNzEyNDY1MUQxOUQxMzI1NDNF
OTkxQjdBNzRERDRBNjgwNzY4QTA5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9u
MTZ5MUxVTFlrS3lYem1ObVlnUXNDZTlzdjl2d2k0M1BRTHpyUXBLalNNLzEvMzQz
NTJlMzEzNzMxMmUzMjMxMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2Mzgz
NzMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAEtq9gwDQYJKoZIhvcNAQELBQADggEBAEgrpkkD04xg
irYGtp+YIcG7GHc0vXgT2A4taT9XFHK3sJnTj5f1nk7Aih9xG+SyyUNdK+U/ZhSy
1KilprDpa4UXh1zh021ufZdI4qSDUGIpUE2hFbbfH6LFAKy1L8P6i/w1rQlKu+F2
KhCM5iOy8MdS/Q6GSroN1fyVj/2Mb12aiMl0HH9cRmA/w3uKk9MvTghvCjH0fYE9
PeyCIZ8bpVip3dV4oExW3AELtgCOeD4+l1zrz6QucCUZy3BxJSxF/g3top/neLtX
V/S+xq0cc6w//DiWll8U4D8zhWucCU9+QDkIR7g3EVChEm8Lb4Dm/Lt0XMMVIaoU
w3Cp8BxYr70=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:47 2024 by rpki-client on console-fra.rpki-client.org