Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233382e302f32342d3234203d3e20323639353935.roa
File:                     34352e3138382e3233382e302f32342d3234203d3e20323639353935.roa (raw, json)
Hash identifier:          GVumaK3wgiHLt2mQz9/S6GRYvf2HsGEDVnfnJx0Hro0=
Subject key identifier:   20:44:2F:CD:1A:AB:FF:09:BC:BF:4D:A9:A2:06:D5:32:C6:18:20:F4
Certificate issuer:       /CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
Certificate serial:       25B0C952454E0D7F72BD84046C182AF9CD2A2F74
Authority key identifier: 79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233382e302f32342d3234203d3e20323639353935.roa
Signing time:             Wed 05 Jun 2024 17:49:59 +0000
ROA not before:           Wed 05 Jun 2024 17:44:59 +0000
ROA not after:            Wed 04 Jun 2025 17:49:59 +0000
asID:                     269595
IP address blocks:        45.188.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 09:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b0:c9:52:45:4e:0d:7f:72:bd:84:04:6c:18:2a:f9:cd:2a:2f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
        Validity
            Not Before: Jun  5 17:44:59 2024 GMT
            Not After : Jun  4 17:49:59 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:0f:83:53:30:0c:b6:e1:4e:04:a5:2f:d8:
                    01:c3:16:73:84:a9:7e:1f:89:26:0e:5f:f5:4f:f5:
                    35:5e:f9:e5:8e:ef:c2:fa:03:51:94:ed:d8:95:8d:
                    85:3e:7b:97:6d:c0:5b:dc:b3:e2:86:69:e4:e1:26:
                    d5:3e:0e:b7:0e:3f:06:c5:dd:cd:52:52:3a:ba:fa:
                    e7:f2:91:de:14:0e:a5:cd:4a:7e:0f:89:5f:28:e8:
                    49:e8:08:8b:83:eb:4f:96:e4:b8:3b:2d:07:a0:d7:
                    87:b7:41:e0:1f:45:87:d3:51:a9:89:49:de:4f:80:
                    ab:eb:1f:71:a7:28:70:06:2e:04:9b:70:f5:0d:b2:
                    e6:0d:81:14:57:11:2b:95:ca:c2:ae:17:95:47:c1:
                    9a:42:6c:68:3f:77:7a:f9:2d:b2:9b:c1:12:17:43:
                    52:30:bb:d6:37:50:cd:0b:16:32:61:ed:e8:a6:e0:
                    ec:77:e2:81:2d:87:b6:3b:3e:35:39:7a:77:0c:89:
                    27:66:8a:db:ce:fc:fc:0d:94:47:37:08:f8:e9:42:
                    10:84:38:44:ed:a8:0e:42:91:8a:f9:51:bd:25:87:
                    9e:30:19:df:09:bb:3f:3e:54:e0:35:a9:52:83:6a:
                    6c:69:22:d5:a1:11:25:55:ee:e7:8f:77:e5:fd:43:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:44:2F:CD:1A:AB:FF:09:BC:BF:4D:A9:A2:06:D5:32:C6:18:20:F4
            X509v3 Authority Key Identifier:
                keyid:79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233382e302f32342d3234203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:81:0c:84:b9:83:e7:4c:00:79:8a:36:fc:95:5d:c8:eb:d9:
         7d:6e:ef:08:7f:06:2b:c2:b6:3c:2b:76:d3:af:7b:cf:09:c1:
         2b:8f:5d:35:cd:4b:9d:d5:e3:b6:78:7e:ae:9a:1e:ee:47:ec:
         0c:cd:dc:87:cf:36:a5:10:98:df:c4:a7:6d:17:51:34:82:da:
         54:21:dd:6b:e3:df:02:44:1f:40:3b:95:23:93:21:91:75:b2:
         d4:6c:5d:42:43:ac:83:f5:c2:a2:9c:02:0d:de:b9:be:c3:95:
         33:7e:40:39:60:69:c8:cc:a1:77:b0:e8:ef:97:fe:0b:92:69:
         04:0d:55:8d:37:5a:ca:12:ce:14:b1:41:6a:a5:23:ba:8d:b3:
         45:5c:86:64:b1:1f:71:6e:f1:73:2d:3d:f6:93:e5:a6:c0:cd:
         da:c2:29:c5:94:ba:48:99:65:5f:87:0c:1c:15:11:f4:5f:08:
         7b:4e:d9:41:f2:72:29:ba:72:b4:2b:42:90:37:d7:d4:7f:b2:
         c7:0a:c5:2f:fe:7d:43:b2:66:b7:f4:bf:37:32:64:61:61:0a:
         99:9b:84:f9:e5:96:fa:90:88:04:af:c9:ae:4a:43:80:be:4e:
         81:a0:20:c3:f5:5e:72:43:bc:09:1a:82:67:3b:aa:7c:27:d8:
         b1:a5:95:49
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUJbDJUkVODX9yvYQEbBgq+c0qL3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5QTE1NTQzQTYxRDZFMTlEQzg1QkZFOTkzRjRFMDcz
QzRFNTE5QzAeFw0yNDA2MDUxNzQ0NTlaFw0yNTA2MDQxNzQ5NTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREE5NjBGODM1MzMwMENCNkUx
NEUwNEE1MkZEODAxQzMxNjczODRBOTdFMUY4OTI2MEU1RkY1NEZGNTM1NUVGOUU1
OEVFRkMyRkEwMzUxOTRFREQ4OTU4RDg1M0U3Qjk3NkRDMDVCRENCM0UyODY2OUU0
RTEyNkQ1M0UwRUI3MEUzRjA2QzVERENENTI1MjNBQkFGQUU3RjI5MURFMTQwRUE1
Q0Q0QTdFMEY4OTVGMjhFODQ5RTgwODhCODNFQjRGOTZFNEI4M0IyRDA3QTBENzg3
Qjc0MUUwMUY0NTg3RDM1MUE5ODk0OURFNEY4MEFCRUIxRjcxQTcyODcwMDYyRTA0
OUI3MEY1MERCMkU2MEQ4MTE0NTcxMTJCOTVDQUMyQUUxNzk1NDdDMTlBNDI2QzY4
M0Y3NzdBRjkyREIyOUJDMTEyMTc0MzUyMzBCQkQ2Mzc1MENEMEIxNjMyNjFFREU4
QTZFMEVDNzdFMjgxMkQ4N0I2M0IzRTM1Mzk3QTc3MEM4OTI3NjY4QURCQ0VGQ0ZD
MEQ5NDQ3MzcwOEY4RTk0MjEwODQzODQ0RURBODBFNDI5MThBRjk1MUJEMjU4NzlF
MzAxOURGMDlCQjNGM0U1NEUwMzVBOTUyODM2QTZDNjkyMkQ1QTExMTI1NTVFRUU3
OEY3N0U1RkQ0M0ZCMEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2pYPg1MwDLbhTgSlL9gBwxZzhKl+H4kmDl/1T/U1Xvnlju/C+gNR
lO3YlY2FPnuXbcBb3LPihmnk4SbVPg63Dj8Gxd3NUlI6uvrn8pHeFA6lzUp+D4lf
KOhJ6AiLg+tPluS4Oy0HoNeHt0HgH0WH01GpiUneT4Cr6x9xpyhwBi4Em3D1DbLm
DYEUVxErlcrCrheVR8GaQmxoP3d6+S2ym8ESF0NSMLvWN1DNCxYyYe3opuDsd+KB
LYe2Oz41OXp3DIknZorbzvz8DZRHNwj46UIQhDhE7agOQpGK+VG9JYeeMBnfCbs/
PlTgNalSg2psaSLVoRElVe7nj3fl/UP7DQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FCBEL80aq/8JvL9NqaIG1TLGGCD0MB8GA1UdIwQYMBaAFHmaFVQ6Ydbhnchb/pk/
Tgc8TlGcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVHRENpcmdoUXZCYUpY
OXJXa0sxd1JQZzVBNlFyOTdvNUJkSmJRVG1ZZFA2LzEvNzk5QTE1NTQzQTYxRDZF
MTlEQzg1QkZFOTkzRjRFMDczQzRFNTE5Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS83OTlBMTU1NDNBNjFENkUxOURDODVCRkU5OTNGNEUwNzNDNEU1
MTlDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81R0RDaXJnaFF2QmFKWDlyV2tL
MXdSUGc1QTZRcjk3bzVCZEpiUVRtWWRQNi8xLzM0MzUyZTMxMzgzODJlMzIzMzM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzUzOTM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LbzuMA0GCSqGSIb3DQEBCwUAA4IBAQC3gQyEuYPnTAB5ijb8lV3I69l9bu8IfwYr
wrY8K3bTr3vPCcErj101zUud1eO2eH6umh7uR+wMzdyHzzalEJjfxKdtF1E0gtpU
Id1r498CRB9AO5UjkyGRdbLUbF1CQ6yD9cKinAIN3rm+w5UzfkA5YGnIzKF3sOjv
l/4LkmkEDVWNN1rKEs4UsUFqpSO6jbNFXIZksR9xbvFzLT32k+WmwM3awinFlLpI
mWVfhwwcFRH0Xwh7TtlB8nIpunK0K0KQN9fUf7LHCsUv/n1Dsma39L83MmRhYQqZ
m4T55Zb6kIgEr8muSkOAvk6BoCDD9V5yQ7wJGoJnO6p8J9ixpZVJ
-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:09 2024 by rpki-client on console-ams.rpki-client.org