Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232322e302f32342d3234203d3e20323633323633.roa
File:                     3137302e3234342e3232322e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          PEGjRZ2kFDVTzbrndrLJT1DcygCc3M2S2vWmJSbVCVI=
Subject key identifier:   4B:03:FD:54:DA:B6:61:47:99:0D:B8:04:05:BE:D6:02:7C:8B:BA:3A
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       2B32D14C71A31538DC2C5AA0A426658E53448B1C
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232322e302f32342d3234203d3e20323633323633.roa
Signing time:             Thu 04 Apr 2024 07:28:56 +0000
ROA not before:           Thu 04 Apr 2024 07:23:56 +0000
ROA not after:            Thu 03 Apr 2025 07:28:56 +0000
asID:                     263263
IP address blocks:        170.244.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
                          rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:32:d1:4c:71:a3:15:38:dc:2c:5a:a0:a4:26:65:8e:53:44:8b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Apr  4 07:23:56 2024 GMT
            Not After : Apr  3 07:28:56 2025 GMT
        Subject: CN=4B03FD54DAB66147990DB80405BED6027C8BBA3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:e7:66:c6:94:eb:f3:65:88:22:d4:8c:6c:
                    08:80:75:72:05:4a:b0:f6:3e:43:b6:1a:c1:d0:e2:
                    04:52:07:9d:a5:f0:6f:ef:ed:e3:36:ab:27:28:1f:
                    2d:1f:5e:17:db:ff:23:b4:27:8d:0d:83:27:d2:f2:
                    db:eb:8a:c2:ba:c1:b7:4c:48:f3:47:85:6f:d5:c1:
                    00:8a:55:d5:9c:8c:c3:9b:d5:c3:da:ad:0d:ce:0c:
                    c5:8f:41:8c:88:18:09:41:47:f3:36:23:d2:94:9c:
                    f4:cf:52:13:2e:1c:e8:95:59:1c:9a:bb:40:2d:55:
                    1a:71:80:35:54:88:c5:80:f0:f1:57:0d:0c:d8:f2:
                    5d:3e:f1:99:ce:48:0c:2e:fd:3e:c8:18:7c:67:67:
                    5a:55:1e:fa:5e:06:9d:b9:da:0a:d0:80:7e:67:c6:
                    31:5d:87:10:83:4b:08:22:ef:be:5a:69:74:31:7c:
                    5f:c1:80:42:52:3c:59:90:5c:92:7b:62:9e:0f:5d:
                    5e:2d:6e:8c:be:b3:d2:6c:2c:74:5b:0c:95:0f:99:
                    57:39:fb:ee:3f:b4:e3:60:83:8f:a7:47:eb:57:97:
                    c1:1d:9f:6e:74:fd:0e:40:3b:c5:58:49:95:8e:3a:
                    16:c3:03:7d:cc:5b:9a:70:31:60:e2:b9:7c:98:f1:
                    7f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:03:FD:54:DA:B6:61:47:99:0D:B8:04:05:BE:D6:02:7C:8B:BA:3A
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232322e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:28:70:74:1b:bc:30:37:1b:a2:a8:97:5d:f4:ea:61:b3:08:
         79:ca:90:88:33:d1:d1:00:54:36:1c:ef:ac:27:f2:29:79:a7:
         ca:08:e9:95:cf:40:88:31:f6:77:aa:df:59:50:93:15:b5:53:
         c0:56:1f:d7:4e:73:15:fe:5b:74:2f:20:0f:04:8c:44:a2:ea:
         ae:22:7b:3c:13:17:f1:90:13:9b:36:62:41:1a:ac:b1:66:4b:
         70:35:66:5f:81:ac:4d:a2:c1:ec:68:40:aa:9b:9c:77:ef:b7:
         2d:66:70:ce:cc:e1:23:7e:4b:bf:f0:19:88:b1:69:da:67:9e:
         c2:9f:6b:13:3a:bb:d0:53:11:02:2d:f7:07:43:b6:f7:5e:10:
         ec:76:c6:a3:39:37:ed:54:a5:99:84:25:8d:7f:f0:a4:1e:47:
         37:1d:c0:69:a1:4d:e2:e9:3e:72:35:65:5b:9e:be:49:c9:35:
         1f:ac:5a:f5:ee:4d:a9:9f:01:c5:a0:3f:d9:fc:2b:58:1f:9d:
         eb:de:48:64:e7:e8:90:cd:ef:03:fe:64:6b:22:b5:11:a0:e8:
         1d:e9:bf:7a:b3:8f:d8:87:84:90:54:2b:e4:70:64:89:0e:47:
         cf:d3:f7:b9:27:71:7a:74:4a:37:36:d8:b7:c3:6f:65:46:84:
         ea:96:9e:e9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKzLRTHGjFTjcLFqgpCZljlNEixwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UyRDFCQzhCMjY3MzVFOTA2OEU4ODMzMzIwQTlGREVC
MDRFNjlDRDAeFw0yNDA0MDQwNzIzNTZaFw0yNTA0MDMwNzI4NTZaMDMxMTAvBgNV
BAMTKDRCMDNGRDU0REFCNjYxNDc5OTBEQjgwNDA1QkVENjAyN0M4QkJBM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0OdmxpTr82WIItSMbAiAdXIF
SrD2PkO2GsHQ4gRSB52l8G/v7eM2qycoHy0fXhfb/yO0J40NgyfS8tvrisK6wbdM
SPNHhW/VwQCKVdWcjMOb1cParQ3ODMWPQYyIGAlBR/M2I9KUnPTPUhMuHOiVWRya
u0AtVRpxgDVUiMWA8PFXDQzY8l0+8ZnOSAwu/T7IGHxnZ1pVHvpeBp252grQgH5n
xjFdhxCDSwgi775aaXQxfF/BgEJSPFmQXJJ7Yp4PXV4tboy+s9JsLHRbDJUPmVc5
++4/tONgg4+nR+tXl8Edn250/Q5AO8VYSZWOOhbDA33MW5pwMWDiuXyY8X8pAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUSwP9VNq2YUeZDbgEBb7WAnyLujowHwYDVR0j
BBgwFoAUzi0byLJnNekGjogzMgqf3rBOac0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVDVEZuOHdudTRveXNqWUozTFNRZHRLOFBIbnhObTVtRDRWSFl2SDlD
aUQvMS9DRTJEMUJDOEIyNjczNUU5MDY4RTg4MzMzMjBBOUZERUIwNEU2OUNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMkQxQkM4QjI2NzM1RTkw
NjhFODgzMzMyMEE5RkRFQjA0RTY5Q0QuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ1Q1RGbjh3bnU0b3lzallKM0xTUWR0SzhQSG54Tm01bUQ0VkhZdkg5Q2lELzEv
MzEzNzMwMmUzMjM0MzQyZTMyMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMyMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr03jANBgkqhkiG9w0BAQsFAAOCAQEAFyhw
dBu8MDcboqiXXfTqYbMIecqQiDPR0QBUNhzvrCfyKXmnygjplc9AiDH2d6rfWVCT
FbVTwFYf105zFf5bdC8gDwSMRKLqriJ7PBMX8ZATmzZiQRqssWZLcDVmX4GsTaLB
7GhAqpucd++3LWZwzszhI35Lv/AZiLFp2meewp9rEzq70FMRAi33B0O2914Q7HbG
ozk37VSlmYQljX/wpB5HNx3AaaFN4uk+cjVlW56+Sck1H6xa9e5NqZ8BxaA/2fwr
WB+d695IZOfokM3vA/5kayK1EaDoHem/erOP2IeEkFQr5HBkiQ5Hz9P3uSdxenRK
NzbYt8NvZUaE6pae6Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org