Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/34352e3138302e3135362e302f32322d3234203d3e20323639313431.roa
File:                     34352e3138302e3135362e302f32322d3234203d3e20323639313431.roa (raw, json)
Hash identifier:          DPobiWgtBr7R4H2i6UNTo6aChL7ZCPmxyC1tjzJjDlM=
Subject key identifier:   99:91:BB:FD:9F:A0:AF:7B:BF:5A:A9:70:47:5F:DB:81:F3:5B:EE:14
Certificate issuer:       /CN=5666FA538340CCBC4448BADB02FF13734D58C9DA
Certificate serial:       5F82A7192BDA3F3459165AF00B3C27866024DBEC
Authority key identifier: 56:66:FA:53:83:40:CC:BC:44:48:BA:DB:02:FF:13:73:4D:58:C9:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5666FA538340CCBC4448BADB02FF13734D58C9DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/34352e3138302e3135362e302f32322d3234203d3e20323639313431.roa
Signing time:             Wed 22 May 2024 17:15:01 +0000
ROA not before:           Wed 22 May 2024 17:10:01 +0000
ROA not after:            Wed 21 May 2025 17:15:01 +0000
asID:                     269141
IP address blocks:        45.180.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/5666FA538340CCBC4448BADB02FF13734D58C9DA.crl
                          rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/5666FA538340CCBC4448BADB02FF13734D58C9DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5666FA538340CCBC4448BADB02FF13734D58C9DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 03:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:82:a7:19:2b:da:3f:34:59:16:5a:f0:0b:3c:27:86:60:24:db:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5666FA538340CCBC4448BADB02FF13734D58C9DA
        Validity
            Not Before: May 22 17:10:01 2024 GMT
            Not After : May 21 17:15:01 2025 GMT
        Subject: CN=9991BBFD9FA0AF7BBF5AA970475FDB81F35BEE14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:be:17:1b:ee:6c:9a:49:cb:c6:0b:83:98:
                    c0:06:c0:d2:8e:1e:4a:fd:c2:fb:da:53:6e:45:f9:
                    f6:e0:a8:9e:b4:77:c9:84:7d:b0:28:6d:3c:2e:a5:
                    bd:d8:ec:aa:3f:0c:7d:d3:ac:d1:a0:08:2d:fe:da:
                    3d:9a:be:cb:87:a4:fb:84:91:c1:64:4e:cd:1a:f0:
                    69:e0:f0:65:66:07:eb:db:9e:f4:f2:9c:fa:c9:0e:
                    73:f1:8d:15:a3:7e:3c:b6:1c:a9:74:54:43:ac:ab:
                    01:42:0b:2b:37:04:61:54:ff:6c:24:52:08:d2:2e:
                    6c:73:ea:99:44:86:f4:50:ac:6a:8c:70:39:5f:29:
                    86:dc:24:2f:bd:2d:9a:31:cc:c7:84:c5:37:3d:f6:
                    62:ea:8a:4d:c6:3d:0b:14:9e:80:b3:d7:f9:15:0d:
                    3e:ee:ec:39:96:42:af:81:3b:ec:aa:6e:59:4e:7a:
                    48:ce:b4:cf:d9:f1:11:e8:73:c6:f7:a6:4a:dd:6d:
                    0b:94:c4:65:3e:df:d4:d6:e4:5e:61:34:86:04:90:
                    29:b6:a0:e2:10:37:79:64:80:2c:29:33:b7:ec:72:
                    6e:cc:29:5c:21:fc:e3:1a:dd:4b:eb:38:fe:e1:55:
                    f7:4f:b7:54:f7:c9:96:a0:c1:8a:77:44:52:42:7b:
                    3e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:91:BB:FD:9F:A0:AF:7B:BF:5A:A9:70:47:5F:DB:81:F3:5B:EE:14
            X509v3 Authority Key Identifier:
                keyid:56:66:FA:53:83:40:CC:BC:44:48:BA:DB:02:FF:13:73:4D:58:C9:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/5666FA538340CCBC4448BADB02FF13734D58C9DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5666FA538340CCBC4448BADB02FF13734D58C9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/34352e3138302e3135362e302f32322d3234203d3e20323639313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:c6:36:65:eb:8d:5f:1b:83:3f:97:3b:a7:9d:04:78:8b:56:
         25:89:b4:47:67:58:3d:f8:05:0b:a4:60:c2:9c:d0:dd:89:9c:
         f7:4d:cb:c9:2f:08:93:35:e3:07:c9:79:d4:0e:8f:60:54:68:
         6a:1e:9c:50:86:9e:6b:85:ba:33:ee:7d:4f:c0:03:0e:46:45:
         6f:9f:fc:1c:81:73:34:0e:4d:7b:a3:6c:d8:46:b3:d3:17:1b:
         23:78:8c:44:c0:78:53:5e:b3:13:8c:92:1a:6f:ac:52:74:42:
         6e:39:96:f9:af:51:b9:7c:1f:f1:4c:81:a9:45:55:65:3e:9d:
         5d:bc:56:90:2e:78:66:3f:8a:df:78:20:9b:03:00:0e:7d:4d:
         d6:f4:5a:7c:4f:fe:3d:8c:1c:30:e3:23:4f:62:e7:cd:55:b2:
         3a:27:44:58:61:1c:fd:14:11:fa:73:a0:b1:0b:9c:06:67:c4:
         60:a6:0c:a6:ce:e7:f6:89:63:b9:a1:75:16:a3:75:7a:00:3d:
         af:79:66:e1:9d:82:5a:79:44:1f:ee:5e:73:9b:e5:e5:be:ec:
         54:4f:ad:0e:25:f7:30:ed:48:8c:ad:12:fe:88:ac:f5:16:41:
         98:bb:42:dc:c3:c7:79:42:04:3f:c7:c5:2b:6f:83:8a:30:8f:
         df:25:47:53
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX4KnGSvaPzRZFlrwCzwnhmAk2+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2NkZBNTM4MzQwQ0NCQzQ0NDhCQURCMDJGRjEzNzM0
RDU4QzlEQTAeFw0yNDA1MjIxNzEwMDFaFw0yNTA1MjExNzE1MDFaMDMxMTAvBgNV
BAMTKDk5OTFCQkZEOUZBMEFGN0JCRjVBQTk3MDQ3NUZEQjgxRjM1QkVFMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBt74XG+5smknLxguDmMAGwNKO
Hkr9wvvaU25F+fbgqJ60d8mEfbAobTwupb3Y7Ko/DH3TrNGgCC3+2j2avsuHpPuE
kcFkTs0a8Gng8GVmB+vbnvTynPrJDnPxjRWjfjy2HKl0VEOsqwFCCys3BGFU/2wk
UgjSLmxz6plEhvRQrGqMcDlfKYbcJC+9LZoxzMeExTc99mLqik3GPQsUnoCz1/kV
DT7u7DmWQq+BO+yqbllOekjOtM/Z8RHoc8b3pkrdbQuUxGU+39TW5F5hNIYEkCm2
oOIQN3lkgCwpM7fscm7MKVwh/OMa3UvrOP7hVfdPt1T3yZagwYp3RFJCez4BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmZG7/Z+gr3u/WqlwR1/bgfNb7hQwHwYDVR0j
BBgwFoAUVmb6U4NAzLxESLrbAv8Tc01YydowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmFoZm11VTVUd1oxOTd5V1VBVm9WSnpYQWo2a1NlNG5FTVRBQUhydlZR
bTEvMC81NjY2RkE1MzgzNDBDQ0JDNDQ0OEJBREIwMkZGMTM3MzRENThDOURBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2NjZGQTUzODM0MENDQkM0
NDQ4QkFEQjAyRkYxMzczNEQ1OEM5REEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZhaGZtdVU1VHdaMTk3eVdVQVZvVkp6WEFqNmtTZTRuRU1UQUFIcnZWUW0xLzAv
MzQzNTJlMzEzODMwMmUzMTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIttJwwDQYJKoZIhvcNAQELBQADggEBAD/GNmXr
jV8bgz+XO6edBHiLViWJtEdnWD34BQukYMKc0N2JnPdNy8kvCJM14wfJedQOj2BU
aGoenFCGnmuFujPufU/AAw5GRW+f/ByBczQOTXujbNhGs9MXGyN4jETAeFNesxOM
khpvrFJ0Qm45lvmvUbl8H/FMgalFVWU+nV28VpAueGY/it94IJsDAA59Tdb0WnxP
/j2MHDDjI09i581VsjonRFhhHP0UEfpzoLELnAZnxGCmDKbO5/aJY7mhdRajdXoA
Pa95ZuGdglp5RB/uXnOb5eW+7FRPrQ4l9zDtSIytEv6IrPUWQZi7QtzDx3lCBD/H
xStvg4owj98lR1M=
-----END CERTIFICATE-----
Generated at Mon Jun 3 04:12:38 2024 by rpki-client on console-ams.rpki-client.org