Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35322e302f32332d3233203d3e20323638323231.roa
File:                     34352e3233362e35322e302f32332d3233203d3e20323638323231.roa (raw, json)
Hash identifier:          TP1DZhDPcJtZEbCLC5hzbgMAWAKbtcDJimX9hhg43y4=
Subject key identifier:   67:54:C6:88:DF:E9:25:38:D5:0C:B8:C5:B4:49:BD:3F:1D:61:58:DB
Certificate issuer:       /CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
Certificate serial:       2AD6AB5BA4857B0F9F7E7204C245823488DF999A
Authority key identifier: 42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35322e302f32332d3233203d3e20323638323231.roa
Signing time:             Tue 28 May 2024 19:21:10 +0000
ROA not before:           Tue 28 May 2024 19:16:10 +0000
ROA not after:            Tue 27 May 2025 19:21:10 +0000
asID:                     268221
IP address blocks:        45.236.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl
                          rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d6:ab:5b:a4:85:7b:0f:9f:7e:72:04:c2:45:82:34:88:df:99:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
        Validity
            Not Before: May 28 19:16:10 2024 GMT
            Not After : May 27 19:21:10 2025 GMT
        Subject: CN=6754C688DFE92538D50CB8C5B449BD3F1D6158DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:32:40:7e:9e:af:72:15:0a:e2:c1:13:d3:
                    ef:36:79:51:f9:f4:5e:40:ed:97:fa:00:40:8c:45:
                    18:92:26:c9:e9:78:fd:f8:57:d4:ee:1d:ad:60:06:
                    b7:fd:63:79:82:52:ea:ac:52:91:5b:77:82:bc:06:
                    d6:f8:cc:83:86:c3:7e:d0:b8:b8:fc:1e:80:1e:65:
                    a5:54:f7:e2:07:2f:2d:30:7f:e1:37:32:ab:36:d1:
                    2d:18:b8:a6:3d:81:09:76:f5:0d:e6:79:43:6e:ed:
                    64:07:87:bc:e5:8d:f0:b0:63:ee:9e:ff:57:bf:30:
                    8c:77:1d:b2:f9:43:9a:23:9f:4a:23:6d:95:80:3f:
                    da:83:4d:d5:ed:8e:fc:7b:73:7c:97:5d:f2:7d:20:
                    9c:57:7e:2e:3a:61:bd:14:6b:fb:dd:d3:e0:ab:f8:
                    17:89:c7:5d:cc:1b:22:e9:96:bd:48:04:94:52:42:
                    eb:e4:1f:f5:84:5d:5f:50:7c:86:2d:35:10:ef:4e:
                    12:da:91:95:91:9e:56:ab:4f:d1:b3:84:3e:b5:5b:
                    f0:cd:2d:05:8c:f6:8d:79:10:8e:0a:b9:7b:12:3a:
                    f9:f3:ac:d5:a2:fe:bf:75:63:5c:0a:1d:8c:ce:e0:
                    f8:05:0f:8b:94:99:74:22:ee:e0:99:74:a2:85:a5:
                    62:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:54:C6:88:DF:E9:25:38:D5:0C:B8:C5:B4:49:BD:3F:1D:61:58:DB
            X509v3 Authority Key Identifier:
                keyid:42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35322e302f32332d3233203d3e20323638323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:4a:2b:2a:8e:7e:9c:e4:7f:5e:9d:18:98:bc:ec:bf:52:01:
         59:b3:6a:16:87:ad:d5:24:5e:57:eb:e5:46:46:b4:f3:72:36:
         9a:30:e0:e4:91:9f:2e:b2:6f:fd:4d:ef:be:31:1e:4e:b4:52:
         52:60:9b:a9:e5:71:d2:78:dd:b1:96:75:89:67:fb:6b:28:4a:
         9f:67:ae:e5:4c:a7:ca:1c:f4:c6:1f:05:1f:95:31:0e:a2:9c:
         b8:9a:35:f2:19:46:73:36:98:54:de:9d:d4:a1:70:8e:54:9a:
         e6:e0:de:da:4f:c6:12:ce:13:5f:b5:14:b3:d4:57:6f:7a:4d:
         29:b3:26:e9:ef:16:42:7a:5e:c2:55:23:82:85:08:56:8f:03:
         9c:07:65:56:b3:96:60:83:9f:ea:88:86:77:30:df:2e:df:04:
         64:04:24:dd:85:0a:fc:77:ad:77:89:05:be:8e:39:a6:6b:07:
         2d:e5:d5:f8:2e:cb:25:f5:e6:64:08:94:67:81:dc:f1:76:ca:
         38:b4:e6:c0:28:ee:79:4d:a4:84:69:fa:ca:18:b2:e8:f8:65:
         92:ce:5c:69:e5:65:c3:47:99:55:74:dc:95:2d:9d:a8:09:57:
         64:60:00:65:88:04:9f:9f:0c:86:52:98:a7:10:ad:c4:34:9f:
         2c:f2:19:bf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKtarW6SFew+ffnIEwkWCNIjfmZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJENjA0Njk4QUZBOUJBNDkyODA3Mzk4QUE2NTI3QjZF
N0IwNEFCNDAeFw0yNDA1MjgxOTE2MTBaFw0yNTA1MjcxOTIxMTBaMDMxMTAvBgNV
BAMTKDY3NTRDNjg4REZFOTI1MzhENTBDQjhDNUI0NDlCRDNGMUQ2MTU4REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81jJAfp6vchUK4sET0+82eVH5
9F5A7Zf6AECMRRiSJsnpeP34V9TuHa1gBrf9Y3mCUuqsUpFbd4K8Btb4zIOGw37Q
uLj8HoAeZaVU9+IHLy0wf+E3Mqs20S0YuKY9gQl29Q3meUNu7WQHh7zljfCwY+6e
/1e/MIx3HbL5Q5ojn0ojbZWAP9qDTdXtjvx7c3yXXfJ9IJxXfi46Yb0Ua/vd0+Cr
+BeJx13MGyLplr1IBJRSQuvkH/WEXV9QfIYtNRDvThLakZWRnlarT9GzhD61W/DN
LQWM9o15EI4KuXsSOvnzrNWi/r91Y1wKHYzO4PgFD4uUmXQi7uCZdKKFpWLZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZ1TGiN/pJTjVDLjFtEm9Px1hWNswHwYDVR0j
BBgwFoAUQtYEaYr6m6SSgHOYqmUntuewSrQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5oQ1hWb280b0R4a0Z0MWR2dGg3d0tEQ0ZvdWl1N3Bqd3pmenlrYTVQ
NU4vMC80MkQ2MDQ2OThBRkE5QkE0OTI4MDczOThBQTY1MjdCNkU3QjA0QUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyRDYwNDY5OEFGQTlCQTQ5
MjgwNzM5OEFBNjUyN0I2RTdCMDRBQjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJOaENYVm9vNG9EeGtGdDFkdnRoN3dLRENGb3VpdTdwand6Znp5a2E1UDVOLzAv
MzQzNTJlMzIzMzM2MmUzNTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzIzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLew0MA0GCSqGSIb3DQEBCwUAA4IBAQBRSisqjn6c
5H9enRiYvOy/UgFZs2oWh63VJF5X6+VGRrTzcjaaMODkkZ8usm/9Te++MR5OtFJS
YJup5XHSeN2xlnWJZ/trKEqfZ67lTKfKHPTGHwUflTEOopy4mjXyGUZzNphU3p3U
oXCOVJrm4N7aT8YSzhNftRSz1Fdvek0psybp7xZCel7CVSOChQhWjwOcB2VWs5Zg
g5/qiIZ3MN8u3wRkBCTdhQr8d613iQW+jjmmawct5dX4Lssl9eZkCJRngdzxdso4
tObAKO55TaSEafrKGLLo+GWSzlxp5WXDR5lVdNyVLZ2oCVdkYABliASfnwyGUpin
EK3ENJ8s8hm/
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:09 2024 by rpki-client on console-ams.rpki-client.org