Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/34352e3137302e3232382e302f32322d3232203d3e20323638373130.roa
File:                     34352e3137302e3232382e302f32322d3232203d3e20323638373130.roa (raw, json)
Hash identifier:          0yO8jlQfLKmV63KZbrQTv80ZhlWd1qNylW+oBu12MTI=
Subject key identifier:   A0:88:09:DD:2B:89:80:00:57:03:41:2D:82:B1:3F:97:02:60:D9:0B
Certificate issuer:       /CN=5847FB25C967B7747A3862CC818403059C9613CB
Certificate serial:       13B34149DFA5A7999558E4432DC47336C6DA392D
Authority key identifier: 58:47:FB:25:C9:67:B7:74:7A:38:62:CC:81:84:03:05:9C:96:13:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5847FB25C967B7747A3862CC818403059C9613CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/34352e3137302e3232382e302f32322d3232203d3e20323638373130.roa
Signing time:             Thu 04 Apr 2024 16:45:32 +0000
ROA not before:           Thu 04 Apr 2024 16:40:32 +0000
ROA not after:            Thu 03 Apr 2025 16:45:32 +0000
asID:                     268710
IP address blocks:        45.170.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/5847FB25C967B7747A3862CC818403059C9613CB.crl
                          rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/5847FB25C967B7747A3862CC818403059C9613CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5847FB25C967B7747A3862CC818403059C9613CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b3:41:49:df:a5:a7:99:95:58:e4:43:2d:c4:73:36:c6:da:39:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5847FB25C967B7747A3862CC818403059C9613CB
        Validity
            Not Before: Apr  4 16:40:32 2024 GMT
            Not After : Apr  3 16:45:32 2025 GMT
        Subject: CN=A08809DD2B8980005703412D82B13F970260D90B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ca:ef:6c:ca:43:e6:ea:fe:8e:16:9d:da:c7:
                    c4:cb:fd:e4:e1:19:f5:28:52:74:a2:89:ab:82:58:
                    ae:45:22:9d:28:87:74:77:c7:8e:45:34:e8:3c:01:
                    5f:2d:3c:b6:0d:ff:d2:e4:35:0f:50:39:b3:75:ad:
                    1c:35:44:44:5d:0e:68:9e:a2:7a:b4:fe:d3:a1:35:
                    04:43:e3:66:dd:02:fd:db:c7:a3:97:bb:a3:60:da:
                    e9:0d:28:69:90:9d:06:de:47:07:02:cb:ab:d9:7f:
                    d1:05:86:7b:04:b1:88:9b:5c:f2:35:4b:34:b9:90:
                    29:37:e3:29:99:75:1a:3e:cb:af:28:ac:0b:ec:41:
                    31:14:47:1b:80:d0:62:4a:88:c8:60:dc:3d:16:44:
                    b9:38:66:1f:5d:87:f3:6e:e6:4e:e0:47:83:9e:c9:
                    13:48:c2:8f:17:e4:76:f7:c3:c4:40:bb:5b:48:56:
                    72:b5:13:3d:5b:ac:cb:4b:2a:f9:66:2d:5a:58:32:
                    2b:1f:cd:c6:3a:2e:47:65:b3:d5:e9:dd:84:c7:16:
                    28:00:44:af:02:6a:ba:b9:94:58:e9:8e:d0:89:8d:
                    3c:20:b9:52:f4:04:b7:ac:cd:34:36:12:9f:9c:c7:
                    54:de:05:9c:7d:08:e1:d5:07:59:8b:87:3b:f4:50:
                    e3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:88:09:DD:2B:89:80:00:57:03:41:2D:82:B1:3F:97:02:60:D9:0B
            X509v3 Authority Key Identifier:
                keyid:58:47:FB:25:C9:67:B7:74:7A:38:62:CC:81:84:03:05:9C:96:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/5847FB25C967B7747A3862CC818403059C9613CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5847FB25C967B7747A3862CC818403059C9613CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/34352e3137302e3232382e302f32322d3232203d3e20323638373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:28:28:88:bc:e4:82:f6:d7:87:f9:fd:5b:13:01:65:47:97:
         d3:63:67:4d:92:fb:8d:57:57:10:ad:ba:fd:0b:38:af:49:fd:
         e6:a3:c6:fe:c7:94:8a:dc:c4:35:95:3b:c9:05:c3:16:6d:55:
         e1:24:26:0d:7f:86:6b:12:39:5c:e7:b2:11:ed:a9:fc:f9:c3:
         1d:ad:8d:18:bf:6b:a2:81:0c:58:ec:55:6d:d5:fd:88:18:66:
         39:27:f4:cd:0c:88:5f:06:49:39:2c:c8:92:55:db:06:65:70:
         11:7a:11:6c:a6:94:50:51:70:6c:cd:85:1a:d6:a6:c2:63:c3:
         d4:f8:61:bd:6d:19:e3:2d:19:88:01:4a:5e:af:d0:59:17:8e:
         a7:d9:9e:8b:a2:ad:b3:71:0e:93:44:b6:bb:f8:b3:64:1a:8f:
         26:b3:bd:02:6e:51:27:79:5a:6d:a4:56:44:83:40:65:43:07:
         a6:42:f5:06:43:e4:4e:09:58:6c:84:a4:a4:e8:e8:55:e2:80:
         49:64:4d:ed:b7:1d:96:5a:cf:a0:fa:69:6e:16:7d:d3:b4:19:
         10:3a:e1:a2:ef:d9:2e:ad:c1:95:cc:50:55:cb:64:73:52:ae:
         ec:96:6c:a5:f4:44:49:7c:24:5b:0c:75:f0:a4:4b:be:c5:77:
         d6:20:b5:54
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUE7NBSd+lp5mVWORDLcRzNsbaOS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg0N0ZCMjVDOTY3Qjc3NDdBMzg2MkNDODE4NDAzMDU5
Qzk2MTNDQjAeFw0yNDA0MDQxNjQwMzJaFw0yNTA0MDMxNjQ1MzJaMDMxMTAvBgNV
BAMTKEEwODgwOUREMkI4OTgwMDA1NzAzNDEyRDgyQjEzRjk3MDI2MEQ5MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxyu9sykPm6v6OFp3ax8TL/eTh
GfUoUnSiiauCWK5FIp0oh3R3x45FNOg8AV8tPLYN/9LkNQ9QObN1rRw1RERdDmie
onq0/tOhNQRD42bdAv3bx6OXu6Ng2ukNKGmQnQbeRwcCy6vZf9EFhnsEsYibXPI1
SzS5kCk34ymZdRo+y68orAvsQTEURxuA0GJKiMhg3D0WRLk4Zh9dh/Nu5k7gR4Oe
yRNIwo8X5Hb3w8RAu1tIVnK1Ez1brMtLKvlmLVpYMisfzcY6Lkdls9Xp3YTHFigA
RK8Carq5lFjpjtCJjTwguVL0BLeszTQ2Ep+cx1TeBZx9COHVB1mLhzv0UOMJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoIgJ3SuJgABXA0EtgrE/lwJg2QswHwYDVR0j
BBgwFoAUWEf7Jclnt3R6OGLMgYQDBZyWE8swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3lUNVJqWlk4aFBCelFxaktxSzJ3QWhTeVZDaHFDVkM5SjdCMVF2RDZM
N3MvMS81ODQ3RkIyNUM5NjdCNzc0N0EzODYyQ0M4MTg0MDMwNTlDOTYxM0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4NDdGQjI1Qzk2N0I3NzQ3
QTM4NjJDQzgxODQwMzA1OUM5NjEzQ0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN5VDVSalpZOGhQQnpRcWpLcUsyd0FoU3lWQ2hxQ1ZDOUo3QjFRdkQ2TDdzLzEv
MzQzNTJlMzEzNzMwMmUzMjMyMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItquQwDQYJKoZIhvcNAQELBQADggEBAFkoKIi8
5IL214f5/VsTAWVHl9NjZ02S+41XVxCtuv0LOK9J/eajxv7HlIrcxDWVO8kFwxZt
VeEkJg1/hmsSOVznshHtqfz5wx2tjRi/a6KBDFjsVW3V/YgYZjkn9M0MiF8GSTks
yJJV2wZlcBF6EWymlFBRcGzNhRrWpsJjw9T4Yb1tGeMtGYgBSl6v0FkXjqfZnoui
rbNxDpNEtrv4s2QajyazvQJuUSd5Wm2kVkSDQGVDB6ZC9QZD5E4JWGyEpKTo6FXi
gElkTe23HZZaz6D6aW4WfdO0GRA64aLv2S6twZXMUFXLZHNSruyWbKX0REl8JFsM
dfCkS77Fd9YgtVQ=
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:05 2024 by rpki-client on console-ams.rpki-client.org