Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3132382e302f32332d3233203d3e20323633323633.roa
File:                     3230302e33332e3132382e302f32332d3233203d3e20323633323633.roa (raw, json)
Hash identifier:          NEif6p9ekuNWlZsOSZ4+XOkNtvvMbtGViQ4T/rtcnic=
Subject key identifier:   9A:45:D0:EA:A8:C4:76:76:AB:46:BB:48:75:1D:61:D1:70:7C:F8:EF
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       2378E188EA12BD3706ACCF31AC55C3F0A61D8384
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3132382e302f32332d3233203d3e20323633323633.roa
Signing time:             Thu 04 Apr 2024 07:28:56 +0000
ROA not before:           Thu 04 Apr 2024 07:23:56 +0000
ROA not after:            Thu 03 Apr 2025 07:28:56 +0000
asID:                     263263
IP address blocks:        200.33.128.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
                          rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:78:e1:88:ea:12:bd:37:06:ac:cf:31:ac:55:c3:f0:a6:1d:83:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Apr  4 07:23:56 2024 GMT
            Not After : Apr  3 07:28:56 2025 GMT
        Subject: CN=9A45D0EAA8C47676AB46BB48751D61D1707CF8EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:e5:9a:98:8e:35:a6:29:93:e3:ba:e0:16:
                    5c:f7:90:77:be:c8:22:ee:29:29:13:3a:73:db:0f:
                    a5:27:e6:01:dd:47:28:a8:1d:ef:cf:c2:5c:a7:4f:
                    5f:a3:d4:b2:6b:b6:d3:df:0f:96:b3:a5:86:87:f1:
                    aa:16:b8:ce:0c:5f:b7:a9:47:28:49:ae:9a:09:47:
                    83:22:72:4d:ea:95:6e:ca:4a:0e:7c:f9:d4:67:4d:
                    47:5e:c1:8c:0c:ee:61:f6:e7:62:b0:06:65:e7:b5:
                    48:2b:ec:81:d3:22:73:bd:84:23:89:f8:16:00:74:
                    68:70:30:58:ff:e9:6c:2e:5e:a3:44:08:df:77:ca:
                    c2:21:8c:de:eb:21:22:ef:26:2c:84:28:bd:10:ff:
                    51:1f:c2:8b:f3:e8:6c:73:7d:19:3e:7a:6c:e6:1c:
                    e9:12:58:71:78:d8:25:fe:9e:8a:52:06:32:b8:9f:
                    9e:f1:17:93:8c:20:a2:f7:f9:c0:8c:4a:84:8f:e8:
                    8c:b8:d3:75:10:bd:19:18:7f:7d:8b:f4:18:ab:f7:
                    e8:0d:11:21:eb:a0:40:3d:e1:a4:d2:33:e0:c6:df:
                    71:32:d8:22:40:d9:54:bc:2d:6d:f8:e4:e7:2d:b6:
                    82:29:1d:7a:a7:19:bd:26:83:37:c2:1d:8e:bc:59:
                    9b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:45:D0:EA:A8:C4:76:76:AB:46:BB:48:75:1D:61:D1:70:7C:F8:EF
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3132382e302f32332d3233203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:d1:19:d2:2d:03:3c:f1:a1:b2:4e:85:ee:cb:67:e0:92:81:
         e2:d9:d3:bf:41:bf:aa:98:5c:0c:83:15:68:56:f0:5e:48:e6:
         d6:ca:73:51:26:e9:26:68:57:5e:fb:cc:83:c9:e4:ef:c1:17:
         ce:26:3b:31:b0:9c:85:e9:39:65:9f:33:ff:a2:17:56:50:f4:
         ad:77:39:15:63:bc:2f:32:14:34:06:d3:ed:0c:b2:f3:9a:1f:
         86:83:74:66:ee:8d:2f:f5:ad:42:69:05:bd:ad:1a:a5:f6:6c:
         01:c5:ec:26:f2:a6:1d:e3:06:9e:cd:9e:51:46:8a:2e:a1:d8:
         ef:01:d8:67:5f:31:1f:29:f5:03:2e:78:c3:d9:2e:1b:76:80:
         c8:ac:4f:a6:c2:2b:02:9e:2a:c3:a1:4a:b2:bd:ff:8a:67:47:
         8f:4f:13:7a:8c:40:18:df:79:71:e5:d1:8b:4a:d6:01:7c:1f:
         1b:04:1f:0a:02:fd:d6:cf:56:ff:dd:a6:d7:2d:80:83:55:05:
         e0:04:83:63:74:38:40:6a:bd:68:dd:26:f3:5d:28:aa:84:83:
         f9:41:ef:54:be:b2:85:22:a5:35:6a:ca:f6:07:f4:13:a7:06:
         d4:6a:3d:e3:e1:fc:b4:ad:fc:64:8b:0d:21:9c:bc:92:8f:05:
         b5:2d:36:d1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI3jhiOoSvTcGrM8xrFXD8KYdg4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UyRDFCQzhCMjY3MzVFOTA2OEU4ODMzMzIwQTlGREVC
MDRFNjlDRDAeFw0yNDA0MDQwNzIzNTZaFw0yNTA0MDMwNzI4NTZaMDMxMTAvBgNV
BAMTKDlBNDVEMEVBQThDNDc2NzZBQjQ2QkI0ODc1MUQ2MUQxNzA3Q0Y4RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2neWamI41pimT47rgFlz3kHe+
yCLuKSkTOnPbD6Un5gHdRyioHe/PwlynT1+j1LJrttPfD5azpYaH8aoWuM4MX7ep
RyhJrpoJR4Mick3qlW7KSg58+dRnTUdewYwM7mH252KwBmXntUgr7IHTInO9hCOJ
+BYAdGhwMFj/6WwuXqNECN93ysIhjN7rISLvJiyEKL0Q/1Efwovz6GxzfRk+emzm
HOkSWHF42CX+nopSBjK4n57xF5OMIKL3+cCMSoSP6Iy403UQvRkYf32L9Bir9+gN
ESHroEA94aTSM+DG33Ey2CJA2VS8LW345OcttoIpHXqnGb0mgzfCHY68WZttAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmkXQ6qjEdnarRrtIdR1h0XB8+O8wHwYDVR0j
BBgwFoAUzi0byLJnNekGjogzMgqf3rBOac0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVDVEZuOHdudTRveXNqWUozTFNRZHRLOFBIbnhObTVtRDRWSFl2SDlD
aUQvMS9DRTJEMUJDOEIyNjczNUU5MDY4RTg4MzMzMjBBOUZERUIwNEU2OUNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMkQxQkM4QjI2NzM1RTkw
NjhFODgzMzMyMEE5RkRFQjA0RTY5Q0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ1Q1RGbjh3bnU0b3lzallKM0xTUWR0SzhQSG54Tm01bUQ0VkhZdkg5Q2lELzEv
MzIzMDMwMmUzMzMzMmUzMTMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHIIYAwDQYJKoZIhvcNAQELBQADggEBAHLRGdIt
AzzxobJOhe7LZ+CSgeLZ079Bv6qYXAyDFWhW8F5I5tbKc1Em6SZoV177zIPJ5O/B
F84mOzGwnIXpOWWfM/+iF1ZQ9K13ORVjvC8yFDQG0+0MsvOaH4aDdGbujS/1rUJp
Bb2tGqX2bAHF7Cbyph3jBp7NnlFGii6h2O8B2GdfMR8p9QMueMPZLht2gMisT6bC
KwKeKsOhSrK9/4pnR49PE3qMQBjfeXHl0YtK1gF8HxsEHwoC/dbPVv/dptctgINV
BeAEg2N0OEBqvWjdJvNdKKqEg/lB71S+soUipTVqyvYH9BOnBtRqPePh/LSt/GSL
DSGcvJKPBbUtNtE=
-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:21 2024 by rpki-client on console-fra.rpki-client.org