Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/2/34352e3139302e32382e302f32322d3234203d3e20323639363332.roa
File:                     34352e3139302e32382e302f32322d3234203d3e20323639363332.roa (raw, json)
Hash identifier:          Sm09CXA+1OdKV8V/5edSJFRWMbW61FyH8h1gaiTBeZk=
Subject key identifier:   6E:CD:CE:57:01:65:50:FB:9D:29:92:72:AA:51:37:3B:E5:7B:E8:73
Certificate issuer:       /CN=ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2
Certificate serial:       7D4CFA717520B45FDFC2E5D88C3DA556FCE1BC54
Authority key identifier: ED:51:66:AD:49:A8:DC:BB:F4:67:7B:EA:A2:FC:8A:73:E2:F0:60:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/2/34352e3139302e32382e302f32322d3234203d3e20323639363332.roa
Signing time:             Thu 04 Apr 2024 02:51:36 +0000
ROA not before:           Thu 04 Apr 2024 02:46:36 +0000
ROA not after:            Thu 03 Apr 2025 02:51:36 +0000
asID:                     269632
IP address blocks:        45.190.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/2/ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2.crl
                          rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/2/ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4c:fa:71:75:20:b4:5f:df:c2:e5:d8:8c:3d:a5:56:fc:e1:bc:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2
        Validity
            Not Before: Apr  4 02:46:36 2024 GMT
            Not After : Apr  3 02:51:36 2025 GMT
        Subject: CN=6ECDCE57016550FB9D299272AA51373BE57BE873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:9b:fb:77:e3:82:50:70:6d:a4:76:0a:3e:
                    46:6c:ae:7e:16:d1:6a:6a:45:c4:62:40:de:e7:f4:
                    b4:b0:27:95:eb:e3:60:d3:03:d8:cc:3c:e8:2b:0b:
                    88:e4:73:24:2f:0a:ed:dd:02:d6:a1:94:3e:05:8d:
                    26:56:1c:c8:3b:10:7d:53:42:ce:2b:86:bd:ca:60:
                    75:f3:e1:0e:5e:08:ad:77:6b:9c:ee:c0:b3:2b:9b:
                    7a:b7:18:3e:4e:c7:0d:10:e0:ef:cc:b2:65:04:3f:
                    a2:3e:79:95:43:00:b5:e4:02:d5:c2:5a:af:e9:56:
                    bb:f6:ef:81:b8:ea:79:9a:a6:97:23:dd:35:b2:a9:
                    05:71:21:95:e4:78:ee:b4:3e:0f:62:11:88:21:fd:
                    d5:b5:cf:d7:e8:b3:4d:34:d6:ad:47:f2:a9:a1:cf:
                    5b:f9:56:70:4e:a7:4f:69:95:ff:6c:55:52:82:a3:
                    10:cf:d7:f9:a9:0f:d7:54:45:d2:bf:2c:0a:6a:37:
                    7a:05:54:ee:14:71:31:fb:a4:7a:ea:e0:52:f9:e6:
                    03:e6:3f:28:45:4c:e2:a5:11:eb:8b:17:3b:dc:a0:
                    af:7e:e8:91:fa:70:64:39:f7:fc:3b:52:d0:7e:fb:
                    35:3a:af:fa:09:0e:b8:d7:dc:98:f0:60:2b:94:a6:
                    79:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CD:CE:57:01:65:50:FB:9D:29:92:72:AA:51:37:3B:E5:7B:E8:73
            X509v3 Authority Key Identifier:
                keyid:ED:51:66:AD:49:A8:DC:BB:F4:67:7B:EA:A2:FC:8A:73:E2:F0:60:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/2/ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5166AD49A8DCBBF4677BEAA2FC8A73E2F060A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/2/34352e3139302e32382e302f32322d3234203d3e20323639363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:2c:7e:11:80:80:fd:64:39:f5:dc:05:d4:18:7a:3a:8c:05:
         da:e6:97:f8:7b:9a:fa:3a:5d:1c:31:97:b7:02:5f:76:2b:4b:
         b9:cb:0f:0b:d0:80:de:45:2d:d0:6c:72:e0:08:8e:af:17:ed:
         9a:ab:29:65:6c:fb:ec:81:8e:24:db:3b:14:88:d9:1a:74:5f:
         c1:7c:12:02:f6:00:25:11:79:90:12:98:81:9d:32:4f:0f:87:
         64:ea:a0:03:2d:a1:2d:32:f1:23:d9:8b:2a:26:a8:68:7d:c7:
         a5:c2:65:ea:c5:27:a8:fe:6b:3a:9e:52:f7:7d:ed:cf:97:8e:
         6d:0c:a8:c6:7d:b9:a0:82:05:8b:02:f8:f4:71:40:31:22:18:
         4c:02:3d:a6:de:89:9b:7d:4f:81:bc:df:61:a6:2b:12:1c:19:
         f8:f8:c2:7b:29:e5:b5:f7:02:d6:8e:b9:91:a9:a6:d3:9f:07:
         bf:36:ee:a8:6f:9a:37:c4:26:ca:d6:70:ba:5d:6c:ca:b4:f2:
         b5:69:5d:ab:43:4a:a3:f0:74:bc:09:58:84:9d:29:da:98:e2:
         30:34:1e:45:92:a4:ad:bd:d9:67:92:18:6a:a6:98:bc:b2:48:
         db:95:f8:7b:b7:70:c6:48:62:8d:c5:23:53:65:2e:e4:5c:7f:
         62:1a:7e:a7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfUz6cXUgtF/fwuXYjD2lVvzhvFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ1MTY2QUQ0OUE4RENCQkY0Njc3QkVBQTJGQzhBNzNF
MkYwNjBBMjAeFw0yNDA0MDQwMjQ2MzZaFw0yNTA0MDMwMjUxMzZaMDMxMTAvBgNV
BAMTKDZFQ0RDRTU3MDE2NTUwRkI5RDI5OTI3MkFBNTEzNzNCRTU3QkU4NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLr5v7d+OCUHBtpHYKPkZsrn4W
0WpqRcRiQN7n9LSwJ5Xr42DTA9jMPOgrC4jkcyQvCu3dAtahlD4FjSZWHMg7EH1T
Qs4rhr3KYHXz4Q5eCK13a5zuwLMrm3q3GD5Oxw0Q4O/MsmUEP6I+eZVDALXkAtXC
Wq/pVrv274G46nmappcj3TWyqQVxIZXkeO60Pg9iEYgh/dW1z9fos0001q1H8qmh
z1v5VnBOp09plf9sVVKCoxDP1/mpD9dURdK/LApqN3oFVO4UcTH7pHrq4FL55gPm
PyhFTOKlEeuLFzvcoK9+6JH6cGQ59/w7UtB++zU6r/oJDrjX3JjwYCuUpnmZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbs3OVwFlUPudKZJyqlE3O+V76HMwHwYDVR0j
BBgwFoAU7VFmrUmo3Lv0Z3vqovyKc+LwYKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU13MmZiZ3pndzZoRk13alhiaURTUXlxVFFmTTR3bk1ZdzJCOUE1NEw1
TDgvMi9FRDUxNjZBRDQ5QThEQ0JCRjQ2NzdCRUFBMkZDOEE3M0UyRjA2MEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VENTE2NkFENDlBOERDQkJG
NDY3N0JFQUEyRkM4QTczRTJGMDYwQTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVNdzJmYmd6Z3c2aEZNd2pYYmlEU1F5cVRRZk00d25NWXcyQjlBNTRMNUw4LzIv
MzQzNTJlMzEzOTMwMmUzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzYzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLb4cMA0GCSqGSIb3DQEBCwUAA4IBAQABLH4RgID9
ZDn13AXUGHo6jAXa5pf4e5r6Ol0cMZe3Al92K0u5yw8L0IDeRS3QbHLgCI6vF+2a
qyllbPvsgY4k2zsUiNkadF/BfBIC9gAlEXmQEpiBnTJPD4dk6qADLaEtMvEj2Ysq
JqhofcelwmXqxSeo/ms6nlL3fe3Pl45tDKjGfbmgggWLAvj0cUAxIhhMAj2m3omb
fU+BvN9hpisSHBn4+MJ7KeW19wLWjrmRqabTnwe/Nu6ob5o3xCbK1nC6XWzKtPK1
aV2rQ0qj8HS8CViEnSnamOIwNB5FkqStvdlnkhhqppi8skjblfh7t3DGSGKNxSNT
ZS7kXH9iGn6n
-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:33 2024 by rpki-client on console-ams.rpki-client.org