Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3230382e302f32342d3234203d3e20323636323530.roa
File:                     34352e362e3230382e302f32342d3234203d3e20323636323530.roa (raw, json)
Hash identifier:          rJwXC9Z2TWdqoQcMZXHxilMDRW8w9DTsYGICXTDADSY=
Subject key identifier:   D7:3B:74:55:EC:2B:17:F0:41:87:4D:EA:9A:4A:CA:E3:15:5B:2C:A0
Certificate issuer:       /CN=A55FD4B72C403135D20815EC6F427D2BEFEBCE58
Certificate serial:       159A65822998F0868E9A1CBBB69AF579E7DC408C
Authority key identifier: A5:5F:D4:B7:2C:40:31:35:D2:08:15:EC:6F:42:7D:2B:EF:EB:CE:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3230382e302f32342d3234203d3e20323636323530.roa
Signing time:             Fri 17 May 2024 17:16:42 +0000
ROA not before:           Fri 17 May 2024 17:11:42 +0000
ROA not after:            Fri 16 May 2025 17:16:42 +0000
asID:                     266250
IP address blocks:        45.6.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.crl
                          rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9a:65:82:29:98:f0:86:8e:9a:1c:bb:b6:9a:f5:79:e7:dc:40:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A55FD4B72C403135D20815EC6F427D2BEFEBCE58
        Validity
            Not Before: May 17 17:11:42 2024 GMT
            Not After : May 16 17:16:42 2025 GMT
        Subject: CN=D73B7455EC2B17F041874DEA9A4ACAE3155B2CA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:15:be:66:1b:e4:35:13:c6:cc:a8:8c:e0:
                    08:cd:3d:fa:42:78:ce:13:88:24:60:56:17:4e:71:
                    f5:ff:51:22:e1:d7:03:13:28:76:25:0b:1b:a5:63:
                    73:50:aa:c4:99:2d:33:b8:a0:2d:ca:43:da:ff:f8:
                    47:1d:87:e8:00:24:89:08:e8:7d:9c:15:16:7b:5f:
                    1c:11:51:11:f7:db:8b:05:98:e4:4c:00:17:ae:84:
                    70:15:64:46:bd:99:1b:bc:7e:e1:cf:e0:ba:3d:bc:
                    e2:cc:7c:03:b1:c5:85:e3:8f:ef:bc:94:d5:e3:b1:
                    5c:39:e8:32:ad:4a:d9:e4:cc:36:f1:f3:1f:52:fb:
                    78:e0:cc:ca:38:99:40:23:b1:e4:85:3c:4f:ac:93:
                    47:c3:d9:0f:72:d1:ed:50:26:3a:e6:75:ee:66:72:
                    a7:a3:fe:1b:82:ea:b8:a3:7a:35:b5:23:1d:55:94:
                    86:28:34:2b:c6:67:11:fc:01:09:2d:c2:0e:99:7c:
                    66:52:21:cb:b9:30:74:ee:0d:8c:44:e5:3f:9a:8e:
                    49:fd:80:97:8b:49:dd:0b:1d:0a:92:ad:c4:09:8c:
                    4e:2d:c5:66:36:3c:72:e0:91:8b:05:4e:df:83:bc:
                    0e:b4:5f:a9:0b:01:65:3a:94:ca:76:62:1e:99:5b:
                    1f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3B:74:55:EC:2B:17:F0:41:87:4D:EA:9A:4A:CA:E3:15:5B:2C:A0
            X509v3 Authority Key Identifier:
                keyid:A5:5F:D4:B7:2C:40:31:35:D2:08:15:EC:6F:42:7D:2B:EF:EB:CE:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3230382e302f32342d3234203d3e20323636323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:0c:5b:68:b1:a5:4e:33:49:a9:07:84:94:7f:dc:76:32:71:
         1b:31:47:d0:eb:ff:53:f4:1c:95:88:bf:69:27:4e:90:bd:e1:
         dd:96:bb:45:ea:69:ab:44:ab:b9:6c:c6:bb:bc:7d:cf:c0:e3:
         9e:53:c6:c2:36:09:5c:62:b3:99:56:78:94:da:2b:57:97:b6:
         ee:54:43:a7:f9:fa:25:b4:f7:9b:43:42:ae:b6:e6:b3:17:ea:
         ad:c8:11:3c:6d:12:cf:d0:71:4e:69:6a:ee:96:18:d8:bf:ec:
         bf:bc:16:f6:60:2a:40:43:37:f8:c0:ca:8e:4b:5e:0c:9f:06:
         34:f1:75:11:03:04:38:df:68:fa:c9:df:82:e8:95:3f:51:b8:
         4b:0b:fc:62:52:1c:8a:86:10:2e:ce:bf:8b:05:a4:97:72:3c:
         0f:70:ba:b3:a5:59:24:51:f1:ca:6b:02:ef:4d:d0:6c:36:2a:
         24:25:8b:e2:42:45:33:cc:2c:40:58:17:40:b2:35:b1:47:7d:
         69:15:af:5b:32:55:99:9e:ff:ee:b1:eb:67:6f:b1:c8:d5:07:
         e3:a0:04:bc:8d:68:b1:60:21:95:c7:77:2c:f1:f6:ec:71:5e:
         9d:0f:b9:ea:d7:8f:dd:92:ee:bd:37:e8:07:98:3f:85:6c:28:
         93:72:ce:f2
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFZplgimY8IaOmhy7tpr1eefcQIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU1RkQ0QjcyQzQwMzEzNUQyMDgxNUVDNkY0MjdEMkJF
RkVCQ0U1ODAeFw0yNDA1MTcxNzExNDJaFw0yNTA1MTYxNzE2NDJaMDMxMTAvBgNV
BAMTKEQ3M0I3NDU1RUMyQjE3RjA0MTg3NERFQTlBNEFDQUUzMTU1QjJDQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJaRW+ZhvkNRPGzKiM4AjNPfpC
eM4TiCRgVhdOcfX/USLh1wMTKHYlCxulY3NQqsSZLTO4oC3KQ9r/+Ecdh+gAJIkI
6H2cFRZ7XxwRURH324sFmORMABeuhHAVZEa9mRu8fuHP4Lo9vOLMfAOxxYXjj++8
lNXjsVw56DKtStnkzDbx8x9S+3jgzMo4mUAjseSFPE+sk0fD2Q9y0e1QJjrmde5m
cqej/huC6rijejW1Ix1VlIYoNCvGZxH8AQktwg6ZfGZSIcu5MHTuDYxE5T+ajkn9
gJeLSd0LHQqSrcQJjE4txWY2PHLgkYsFTt+DvA60X6kLAWU6lMp2Yh6ZWx89AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU1zt0VewrF/BBh03qmkrK4xVbLKAwHwYDVR0j
BBgwFoAUpV/UtyxAMTXSCBXsb0J9K+/rzlgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmVXUjE4cmtXM2lXc2p6YVpIcnZ1RUw4N21wQnFKN0h0MmVXdHFtQzh0
NnkvMC9BNTVGRDRCNzJDNDAzMTM1RDIwODE1RUM2RjQyN0QyQkVGRUJDRTU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NUZENEI3MkM0MDMxMzVE
MjA4MTVFQzZGNDI3RDJCRUZFQkNFNTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJlV1IxOHJrVzNpV3NqemFaSHJ2dUVMODdtcEJxSjdIdDJlV3RxbUM4dDZ5LzAv
MzQzNTJlMzYyZTMyMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjMy
MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0G0DANBgkqhkiG9w0BAQsFAAOCAQEADgxbaLGlTjNJ
qQeElH/cdjJxGzFH0Ov/U/QclYi/aSdOkL3h3Za7Reppq0SruWzGu7x9z8DjnlPG
wjYJXGKzmVZ4lNorV5e27lRDp/n6JbT3m0NCrrbmsxfqrcgRPG0Sz9BxTmlq7pYY
2L/sv7wW9mAqQEM3+MDKjkteDJ8GNPF1EQMEON9o+snfguiVP1G4Swv8YlIcioYQ
Ls6/iwWkl3I8D3C6s6VZJFHxymsC703QbDYqJCWL4kJFM8wsQFgXQLI1sUd9aRWv
WzJVmZ7/7rHrZ2+xyNUH46AEvI1osWAhlcd3LPH27HFenQ+56teP3ZLuvTfoB5g/
hWwok3LO8g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:30 2024 by rpki-client on console-ams.rpki-client.org