Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3234203d3e20323639303437.roa
File:                     34352e3137382e3230382e302f32322d3234203d3e20323639303437.roa (raw, json)
Hash identifier:          ry/CmOAid5yVTFLaxm831Z8XF4jIGZ0Ra6mG5mK74kg=
Subject key identifier:   A1:5A:0D:F2:E0:D5:92:7B:73:9B:42:25:C3:8E:B7:79:1A:5F:AD:F0
Certificate issuer:       /CN=F3F54FA2BE2FC63F2C01D01C80714C34DBDF7378
Certificate serial:       0371CB73FA2B245FEA3B6B64BD2EB5900285524C
Authority key identifier: F3:F5:4F:A2:BE:2F:C6:3F:2C:01:D0:1C:80:71:4C:34:DB:DF:73:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3F54FA2BE2FC63F2C01D01C80714C34DBDF7378.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3234203d3e20323639303437.roa
Signing time:             Mon 13 May 2024 14:01:25 +0000
ROA not before:           Mon 13 May 2024 13:56:25 +0000
ROA not after:            Mon 12 May 2025 14:01:25 +0000
asID:                     269047
IP address blocks:        45.178.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/F3F54FA2BE2FC63F2C01D01C80714C34DBDF7378.crl
                          rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/F3F54FA2BE2FC63F2C01D01C80714C34DBDF7378.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3F54FA2BE2FC63F2C01D01C80714C34DBDF7378.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:71:cb:73:fa:2b:24:5f:ea:3b:6b:64:bd:2e:b5:90:02:85:52:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3F54FA2BE2FC63F2C01D01C80714C34DBDF7378
        Validity
            Not Before: May 13 13:56:25 2024 GMT
            Not After : May 12 14:01:25 2025 GMT
        Subject: CN=A15A0DF2E0D5927B739B4225C38EB7791A5FADF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:bb:8f:69:75:05:9b:95:52:90:e6:39:26:
                    ec:aa:67:f3:4a:61:15:ce:3f:2a:a0:b1:96:95:d4:
                    cf:ce:f2:d0:f5:87:65:62:89:aa:d1:d0:db:fb:1e:
                    cd:95:81:20:89:7f:e4:8d:5b:c1:b2:b9:9e:d6:95:
                    16:6b:df:8e:50:30:73:23:c6:ed:21:f0:c2:0f:1c:
                    fd:63:8e:53:8f:01:75:02:ea:e9:0c:b3:68:03:aa:
                    5f:ca:40:51:53:f1:6f:a8:c7:d9:15:dd:e4:7d:30:
                    1f:8c:f6:a0:7f:ea:ab:ea:62:85:36:1b:db:e5:50:
                    55:d8:6f:4e:26:ee:3b:ea:91:5e:c2:18:4b:ce:75:
                    ca:f6:09:c2:a1:8f:da:b3:75:3e:02:3e:13:23:f1:
                    6a:63:17:69:64:4c:ec:27:d9:4e:49:a9:8d:bc:dd:
                    cd:05:64:eb:99:43:15:67:af:82:8f:9b:7a:39:33:
                    70:2b:a7:20:29:35:35:fb:06:26:ad:9d:b7:4c:51:
                    d0:35:72:2f:f2:82:69:ae:cc:34:5b:df:81:fc:87:
                    b8:ad:ea:46:d8:56:64:b1:d3:dc:91:9c:c8:18:4b:
                    92:87:a3:0c:13:66:ff:c0:56:1c:ea:fc:4a:cd:1b:
                    39:ab:71:a1:45:ca:7b:5d:f9:16:a3:dd:9e:ba:d4:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5A:0D:F2:E0:D5:92:7B:73:9B:42:25:C3:8E:B7:79:1A:5F:AD:F0
            X509v3 Authority Key Identifier:
                keyid:F3:F5:4F:A2:BE:2F:C6:3F:2C:01:D0:1C:80:71:4C:34:DB:DF:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/F3F54FA2BE2FC63F2C01D01C80714C34DBDF7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3F54FA2BE2FC63F2C01D01C80714C34DBDF7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3234203d3e20323639303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:77:43:8b:bc:c0:b2:76:fe:95:e5:24:37:12:59:dd:8a:81:
         13:7e:c2:e5:fc:77:c1:49:a6:78:cc:74:a5:c7:51:32:29:ab:
         8f:05:a5:01:a5:1c:91:07:13:49:d8:e8:1f:30:35:46:25:87:
         63:13:14:81:a5:1c:81:8f:e2:40:34:06:09:f9:10:d2:aa:ff:
         ba:c0:0b:6f:81:6c:bc:ff:53:f1:2b:58:d7:29:47:dd:d8:b5:
         27:b6:bf:60:dc:e8:73:63:ac:dd:10:fe:98:85:c9:d7:96:cc:
         16:ec:39:dd:c9:ae:c3:4b:5d:38:57:6e:94:39:d5:70:49:28:
         fd:ff:02:d2:51:42:17:bb:35:d3:a2:1c:ac:00:49:38:aa:98:
         46:7e:a5:fd:4b:34:8f:62:12:76:54:5a:10:72:cc:ad:47:98:
         57:66:22:57:e5:7d:48:f9:ea:d1:d0:3e:c6:33:a6:25:30:dc:
         9c:0f:a3:09:b2:bf:8b:bd:15:01:4e:45:45:79:3d:d9:6c:7e:
         c2:7f:55:45:73:16:08:b6:5a:e3:34:d4:fa:c9:df:18:69:41:
         89:b9:fc:02:d7:66:7e:37:db:dc:76:5e:8e:0f:2a:2b:54:23:
         8a:be:1c:cb:e0:af:23:73:3f:06:66:8d:bd:e7:de:5e:48:f3:
         97:90:61:a9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUA3HLc/orJF/qO2tkvS61kAKFUkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNGNTRGQTJCRTJGQzYzRjJDMDFEMDFDODA3MTRDMzRE
QkRGNzM3ODAeFw0yNDA1MTMxMzU2MjVaFw0yNTA1MTIxNDAxMjVaMDMxMTAvBgNV
BAMTKEExNUEwREYyRTBENTkyN0I3MzlCNDIyNUMzOEVCNzc5MUE1RkFERjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8buPaXUFm5VSkOY5JuyqZ/NK
YRXOPyqgsZaV1M/O8tD1h2ViiarR0Nv7Hs2VgSCJf+SNW8GyuZ7WlRZr345QMHMj
xu0h8MIPHP1jjlOPAXUC6ukMs2gDql/KQFFT8W+ox9kV3eR9MB+M9qB/6qvqYoU2
G9vlUFXYb04m7jvqkV7CGEvOdcr2CcKhj9qzdT4CPhMj8WpjF2lkTOwn2U5JqY28
3c0FZOuZQxVnr4KPm3o5M3ArpyApNTX7BiatnbdMUdA1ci/ygmmuzDRb34H8h7it
6kbYVmSx09yRnMgYS5KHowwTZv/AVhzq/ErNGzmrcaFFyntd+Raj3Z661BnBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoVoN8uDVkntzm0Ilw463eRpfrfAwHwYDVR0j
BBgwFoAU8/VPor4vxj8sAdAcgHFMNNvfc3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm40NFZKU2F5RzJDZmcxdGNxMVdEZWNKYjliVlZ6aXZ3QnBFNUdQa042
ZWovMC9GM0Y1NEZBMkJFMkZDNjNGMkMwMUQwMUM4MDcxNEMzNERCREY3Mzc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzRjU0RkEyQkUyRkM2M0Yy
QzAxRDAxQzgwNzE0QzM0REJERjczNzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuNDRWSlNheUcyQ2ZnMXRjcTFXRGVjSmI5YlZWeml2d0JwRTVHUGtONmVqLzAv
MzQzNTJlMzEzNzM4MmUzMjMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItstAwDQYJKoZIhvcNAQELBQADggEBAMZ3Q4u8
wLJ2/pXlJDcSWd2KgRN+wuX8d8FJpnjMdKXHUTIpq48FpQGlHJEHE0nY6B8wNUYl
h2MTFIGlHIGP4kA0Bgn5ENKq/7rAC2+BbLz/U/ErWNcpR93YtSe2v2Dc6HNjrN0Q
/piFydeWzBbsOd3JrsNLXThXbpQ51XBJKP3/AtJRQhe7NdOiHKwASTiqmEZ+pf1L
NI9iEnZUWhByzK1HmFdmIlflfUj56tHQPsYzpiUw3JwPowmyv4u9FQFORUV5Pdls
fsJ/VUVzFgi2WuM01PrJ3xhpQYm5/ALXZn4329x2Xo4PKitUI4q+HMvgryNzPwZm
jb3n3l5I85eQYak=
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:48 2024 by rpki-client on console-ams.rpki-client.org