Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231342e302f32332d3233203d3e203532373036.roa
File:                     3137302e3233332e3231342e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          GhaueHaEvwU0+qAefSvFsQa1Se898OcFsQlv+JcGWGY=
Subject key identifier:   62:DE:03:B9:8A:4A:95:AF:91:53:98:5F:0E:85:27:99:F5:6C:F0:88
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       7B0553B910B0379C7DD930A8E41B9755ACE350C5
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231342e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:30 +0000
ROA not before:           Thu 04 Apr 2024 02:23:30 +0000
ROA not after:            Thu 03 Apr 2025 02:28:30 +0000
asID:                     52706
IP address blocks:        170.233.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:05:53:b9:10:b0:37:9c:7d:d9:30:a8:e4:1b:97:55:ac:e3:50:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:30 2024 GMT
            Not After : Apr  3 02:28:30 2025 GMT
        Subject: CN=62DE03B98A4A95AF9153985F0E852799F56CF088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:69:09:c8:45:18:e1:f1:d1:68:72:25:65:
                    f7:47:61:72:39:14:f5:11:26:85:76:97:c3:09:dc:
                    5f:36:97:ce:19:ac:42:33:ab:5e:7e:ea:46:4a:fd:
                    64:06:ba:7d:c1:89:b7:e7:61:82:54:8a:5b:73:48:
                    04:26:98:c1:f1:ba:99:44:9f:45:77:db:ad:ad:a6:
                    0e:4a:4f:ed:88:e1:ed:6c:fc:c6:3a:96:36:42:d2:
                    2f:23:32:fa:cc:dd:2c:77:bc:00:32:1c:1a:a1:72:
                    db:7f:55:2c:da:09:63:59:2e:0f:88:9f:e8:06:b9:
                    53:40:c8:4e:bf:bd:06:c6:56:1c:39:97:49:7f:bc:
                    4c:55:ad:eb:22:fc:c7:ce:51:f0:e8:3e:ef:f5:db:
                    71:b3:69:a5:c7:6d:2b:6c:77:23:9d:c0:cd:6b:cc:
                    c8:5a:49:2a:09:41:ec:6e:d3:e0:d4:7d:94:2a:12:
                    8b:bd:ee:a4:6d:f0:a6:6f:0d:9c:93:f9:4c:f8:e6:
                    b4:01:d4:3d:d1:c7:7e:d6:0c:09:ad:40:3d:6b:05:
                    e2:c6:b7:47:25:3b:df:d9:0d:02:c9:09:da:b9:60:
                    39:26:91:54:ed:98:d9:c3:de:3d:80:bb:70:97:a1:
                    41:a6:79:30:8e:65:98:31:e7:c3:e5:64:6c:dd:8c:
                    dc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DE:03:B9:8A:4A:95:AF:91:53:98:5F:0E:85:27:99:F5:6C:F0:88
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231342e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:cb:99:19:1b:f6:7b:a1:d8:af:91:65:e3:89:06:33:4a:16:
         1d:cd:e8:94:26:42:5d:2d:1a:f7:fe:7f:80:d6:b6:7e:87:37:
         92:67:d2:79:74:3e:76:bc:35:1b:b0:54:17:8c:c7:a3:fb:5b:
         06:da:cf:a1:0d:c4:cc:5e:9c:4a:4c:c9:a6:5f:cc:fd:9c:99:
         a1:0f:38:13:e6:96:17:d9:e3:23:02:bc:79:c9:c2:70:b2:de:
         1a:1c:5e:b1:79:66:38:38:f7:1d:15:60:0e:12:fd:0f:89:f0:
         6b:2b:e1:35:df:7a:ac:c0:ba:d3:9e:24:a9:ba:87:26:41:0f:
         fb:fd:f6:9a:6a:af:35:93:07:1c:08:3f:43:85:3c:49:0a:75:
         b7:26:1d:b0:e5:ef:eb:68:15:24:a8:7e:be:ee:ae:1a:c1:c7:
         3d:3f:1f:e7:1d:84:34:24:c0:44:de:67:8f:18:ba:bc:a2:d2:
         1c:73:7e:5c:f9:f2:cf:1b:85:76:e8:64:7a:92:9c:87:21:f5:
         27:e4:8f:c9:7c:10:ec:a0:51:8c:94:40:2d:f4:bc:cd:0d:60:
         07:69:54:c1:a2:c7:15:ff:63:53:3c:87:a9:d6:36:c7:6e:74:
         63:46:36:e1:93:c3:9e:3b:b1:8c:ef:bb:82:24:c9:17:7d:4a:
         49:2a:64:f5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUewVTuRCwN5x92TCo5BuXVazjUMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNDA0MDQwMjIzMzBaFw0yNTA0MDMwMjI4MzBaMDMxMTAvBgNV
BAMTKDYyREUwM0I5OEE0QTk1QUY5MTUzOTg1RjBFODUyNzk5RjU2Q0YwODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6g2kJyEUY4fHRaHIlZfdHYXI5
FPURJoV2l8MJ3F82l84ZrEIzq15+6kZK/WQGun3BibfnYYJUiltzSAQmmMHxuplE
n0V3262tpg5KT+2I4e1s/MY6ljZC0i8jMvrM3Sx3vAAyHBqhctt/VSzaCWNZLg+I
n+gGuVNAyE6/vQbGVhw5l0l/vExVresi/MfOUfDoPu/123GzaaXHbStsdyOdwM1r
zMhaSSoJQexu0+DUfZQqEou97qRt8KZvDZyT+Uz45rQB1D3Rx37WDAmtQD1rBeLG
t0clO9/ZDQLJCdq5YDkmkVTtmNnD3j2Au3CXoUGmeTCOZZgx58PlZGzdjNwLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYt4DuYpKla+RU5hfDoUnmfVs8IgwHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzEzNzMwMmUzMjMzMzMyZTMyMzEzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNzMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq6dYwDQYJKoZIhvcNAQELBQADggEBAHzLmRkb
9nuh2K+RZeOJBjNKFh3N6JQmQl0tGvf+f4DWtn6HN5Jn0nl0Pna8NRuwVBeMx6P7
Wwbaz6ENxMxenEpMyaZfzP2cmaEPOBPmlhfZ4yMCvHnJwnCy3hocXrF5Zjg49x0V
YA4S/Q+J8Gsr4TXfeqzAutOeJKm6hyZBD/v99ppqrzWTBxwIP0OFPEkKdbcmHbDl
7+toFSSofr7urhrBxz0/H+cdhDQkwETeZ48Yuryi0hxzflz58s8bhXboZHqSnIch
9Sfkj8l8EOygUYyUQC30vM0NYAdpVMGixxX/Y1M8h6nWNsdudGNGNuGTw547sYzv
u4IkyRd9SkkqZPU=
-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org