Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/34352e3233382e34302e302f32322d3234203d3e20323638333131.roa
File:                     34352e3233382e34302e302f32322d3234203d3e20323638333131.roa (raw, json)
Hash identifier:          ECvYVI6025jQqGFh0wzGFMxUhtQ8Q7LX6LJyas9KnnI=
Subject key identifier:   BE:9C:54:75:3E:FC:20:BF:17:8C:09:42:4E:74:29:79:D8:00:77:CF
Certificate issuer:       /CN=B1DBBA8EA92CD857019C49802F323CF13FFF24AF
Certificate serial:       3340E40FF975B1C178F172E57B13043EABE48E42
Authority key identifier: B1:DB:BA:8E:A9:2C:D8:57:01:9C:49:80:2F:32:3C:F1:3F:FF:24:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/34352e3233382e34302e302f32322d3234203d3e20323638333131.roa
Signing time:             Thu 04 Apr 2024 02:17:38 +0000
ROA not before:           Thu 04 Apr 2024 02:12:38 +0000
ROA not after:            Thu 03 Apr 2025 02:17:38 +0000
asID:                     268311
IP address blocks:        45.238.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.crl
                          rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:40:e4:0f:f9:75:b1:c1:78:f1:72:e5:7b:13:04:3e:ab:e4:8e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1DBBA8EA92CD857019C49802F323CF13FFF24AF
        Validity
            Not Before: Apr  4 02:12:38 2024 GMT
            Not After : Apr  3 02:17:38 2025 GMT
        Subject: CN=BE9C54753EFC20BF178C09424E742979D80077CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:d6:17:7c:e0:1f:f6:1a:ba:59:bd:f2:8d:
                    e3:c1:f8:31:8e:3f:2e:da:b3:2b:a1:62:01:b2:f6:
                    d4:22:c4:fb:f6:be:12:02:f3:be:3b:95:e8:99:04:
                    2d:f5:dd:9b:2d:a9:30:ca:12:cd:86:58:47:e4:db:
                    94:00:19:df:17:b8:25:cb:24:77:5a:6a:dd:cb:22:
                    aa:8c:76:44:b5:1a:8d:0d:8c:2e:6a:6f:56:5f:ed:
                    76:fe:7d:5e:29:73:93:7d:e7:cf:65:a1:cd:19:60:
                    f6:ff:d4:f8:31:1c:76:9c:e1:82:fe:a7:9a:8b:bf:
                    9e:4c:ff:4b:55:8b:e1:aa:01:0c:8e:02:7f:ff:44:
                    82:de:3b:47:10:cd:a8:9c:0d:e4:2a:bf:8d:0c:92:
                    ac:bf:b1:e4:68:55:e0:aa:76:e2:5e:25:c5:88:86:
                    d4:83:9e:25:86:dd:fc:e1:ff:02:48:c4:52:e8:28:
                    28:ec:07:a7:2b:71:38:52:91:f9:d7:21:12:0b:d5:
                    d4:67:38:a2:1f:72:4a:d2:cb:32:e3:d1:44:32:b3:
                    2b:7b:31:73:e3:35:08:85:b3:6a:98:9a:93:b0:c9:
                    f7:a8:7d:42:96:71:d5:97:a2:61:5c:5e:94:0a:02:
                    d4:74:50:a3:74:7a:21:17:47:1e:29:02:02:c6:54:
                    0c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9C:54:75:3E:FC:20:BF:17:8C:09:42:4E:74:29:79:D8:00:77:CF
            X509v3 Authority Key Identifier:
                keyid:B1:DB:BA:8E:A9:2C:D8:57:01:9C:49:80:2F:32:3C:F1:3F:FF:24:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/34352e3233382e34302e302f32322d3234203d3e20323638333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:38:52:7a:40:c0:9b:ff:5a:9a:e6:30:04:a5:d0:8b:73:53:
         fe:f7:db:42:13:21:72:30:b3:80:35:15:b2:a4:bf:28:e7:ed:
         b6:19:27:d8:58:62:17:fb:78:d4:e6:c9:ed:ae:0f:bf:cf:47:
         3e:ac:cc:1e:fc:f3:e9:f6:b9:e1:0e:18:a7:9d:b7:95:0a:9b:
         9f:6b:19:ed:1f:68:ac:6b:86:3f:bd:f4:79:ac:81:d4:71:ce:
         be:0c:e4:72:1d:e7:3e:b8:38:1c:52:15:8d:98:68:b1:18:39:
         d8:3e:f4:43:5b:0b:db:ec:6f:08:bd:a5:fd:c4:5c:96:e1:1a:
         81:55:18:af:25:f9:b2:16:3a:5a:99:6f:26:5a:f0:bb:e6:ff:
         82:22:c7:c8:54:56:a5:b0:e1:5f:b9:a8:e6:ea:d5:27:9d:59:
         90:d6:16:a2:94:10:c9:8a:a5:8e:ff:e9:f0:d6:5d:28:7d:d3:
         3e:90:36:3b:f9:c3:eb:b0:7b:6c:f4:f9:1d:d9:a4:11:f1:dc:
         ed:97:da:37:fc:58:1a:9d:d7:63:a6:7f:87:c2:ff:b6:7d:4a:
         64:4e:8b:ce:dd:dc:46:20:25:32:00:6f:df:3c:4c:82:b8:7d:
         ef:a3:ed:cb:e0:e5:62:fa:19:f7:ca:d1:e2:80:24:2c:b8:8e:
         55:58:42:e4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUM0DkD/l1scF48XLlexMEPqvkjkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFEQkJBOEVBOTJDRDg1NzAxOUM0OTgwMkYzMjNDRjEz
RkZGMjRBRjAeFw0yNDA0MDQwMjEyMzhaFw0yNTA0MDMwMjE3MzhaMDMxMTAvBgNV
BAMTKEJFOUM1NDc1M0VGQzIwQkYxNzhDMDk0MjRFNzQyOTc5RDgwMDc3Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPjtYXfOAf9hq6Wb3yjePB+DGO
Py7asyuhYgGy9tQixPv2vhIC8747leiZBC313ZstqTDKEs2GWEfk25QAGd8XuCXL
JHdaat3LIqqMdkS1Go0NjC5qb1Zf7Xb+fV4pc5N9589loc0ZYPb/1PgxHHac4YL+
p5qLv55M/0tVi+GqAQyOAn//RILeO0cQzaicDeQqv40Mkqy/seRoVeCqduJeJcWI
htSDniWG3fzh/wJIxFLoKCjsB6crcThSkfnXIRIL1dRnOKIfckrSyzLj0UQysyt7
MXPjNQiFs2qYmpOwyfeofUKWcdWXomFcXpQKAtR0UKN0eiEXRx4pAgLGVAzxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvpxUdT78IL8XjAlCTnQpedgAd88wHwYDVR0j
BBgwFoAUsdu6jqks2FcBnEmALzI88T//JK8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMTRBQU1QUjFHWkF5UlRwdFRVSjJDbUhOSFRyR2lmbXREUUUyd0ZWYVI1
WWkvMS9CMURCQkE4RUE5MkNEODU3MDE5QzQ5ODAyRjMyM0NGMTNGRkYyNEFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxREJCQThFQTkyQ0Q4NTcw
MTlDNDk4MDJGMzIzQ0YxM0ZGRjI0QUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzE0QUFNUFIxR1pBeVJUcHRUVUoyQ21ITkhUckdpZm10RFFFMndGVmFSNVlpLzEv
MzQzNTJlMzIzMzM4MmUzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzMzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLe4oMA0GCSqGSIb3DQEBCwUAA4IBAQDBOFJ6QMCb
/1qa5jAEpdCLc1P+99tCEyFyMLOANRWypL8o5+22GSfYWGIX+3jU5sntrg+/z0c+
rMwe/PPp9rnhDhinnbeVCpufaxntH2isa4Y/vfR5rIHUcc6+DORyHec+uDgcUhWN
mGixGDnYPvRDWwvb7G8IvaX9xFyW4RqBVRivJfmyFjpamW8mWvC75v+CIsfIVFal
sOFfuajm6tUnnVmQ1hailBDJiqWO/+nw1l0ofdM+kDY7+cPrsHts9Pkd2aQR8dzt
l9o3/Fganddjpn+Hwv+2fUpkTovO3dxGICUyAG/fPEyCuH3vo+3L4OVi+hn3ytHi
gCQsuI5VWELk
-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:09 2024 by rpki-client on console-ams.rpki-client.org