Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/34352e3136302e3132362e302f32332d3233203d3e20323638343038.roa
File:                     34352e3136302e3132362e302f32332d3233203d3e20323638343038.roa (raw, json)
Hash identifier:          ZMwDHJ2nA+3mcBqg90cpIKhB4zhCYqV6Cx11XewgrBI=
Subject key identifier:   4C:EC:22:2F:48:8C:97:99:BF:EA:2F:FC:38:76:53:16:33:9A:10:EE
Certificate issuer:       /CN=35032C100F6D77D0004BCA943283FCAEF246335A
Certificate serial:       47BE63C5751E807C4460983625FB17324BEC7BAA
Authority key identifier: 35:03:2C:10:0F:6D:77:D0:00:4B:CA:94:32:83:FC:AE:F2:46:33:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35032C100F6D77D0004BCA943283FCAEF246335A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/34352e3136302e3132362e302f32332d3233203d3e20323638343038.roa
Signing time:             Thu 04 Apr 2024 22:42:16 +0000
ROA not before:           Thu 04 Apr 2024 22:37:16 +0000
ROA not after:            Thu 03 Apr 2025 22:42:16 +0000
asID:                     268408
IP address blocks:        45.160.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/35032C100F6D77D0004BCA943283FCAEF246335A.crl
                          rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/35032C100F6D77D0004BCA943283FCAEF246335A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35032C100F6D77D0004BCA943283FCAEF246335A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:be:63:c5:75:1e:80:7c:44:60:98:36:25:fb:17:32:4b:ec:7b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35032C100F6D77D0004BCA943283FCAEF246335A
        Validity
            Not Before: Apr  4 22:37:16 2024 GMT
            Not After : Apr  3 22:42:16 2025 GMT
        Subject: CN=4CEC222F488C9799BFEA2FFC38765316339A10EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:66:e6:ba:82:2c:fb:f0:47:d2:6a:cd:c1:39:
                    e9:db:3a:ca:f0:21:df:1d:d8:34:24:c1:14:d5:2f:
                    1a:fb:4f:16:1d:9c:2e:64:45:67:30:be:93:44:1d:
                    b1:70:fa:cf:ee:12:c2:c8:2f:82:cb:ed:b1:cf:6d:
                    f6:cd:ed:be:e0:1d:46:d5:20:dc:d6:73:60:d0:78:
                    de:b3:49:1a:5c:40:e2:02:72:c3:7b:34:e3:cb:98:
                    b2:8c:bc:23:68:70:a5:c5:55:f1:04:f1:c8:47:ef:
                    c0:c7:e6:fe:d8:67:56:fd:5a:03:5e:1f:0f:b4:b0:
                    68:6a:1e:f4:bb:ea:6a:27:fb:fc:85:52:16:bf:12:
                    10:8d:10:cc:c4:dd:97:c2:79:18:4d:44:15:5a:83:
                    fb:9a:ae:e0:12:69:05:7d:eb:58:ed:c1:3b:13:36:
                    ee:bb:1f:2b:09:e7:f7:11:44:14:ba:03:c2:54:e5:
                    2a:43:d0:15:5a:b8:37:f0:71:b5:83:6f:e2:cc:4e:
                    fc:d3:33:57:db:ec:b6:69:eb:ba:b7:6a:9e:a8:38:
                    65:47:a2:3e:90:a7:32:96:21:88:c9:9d:f3:13:81:
                    66:96:75:ec:0d:27:d4:62:28:03:be:4f:e5:a8:e0:
                    b0:f7:63:03:54:2c:2f:da:76:d5:1b:9c:97:79:b9:
                    68:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EC:22:2F:48:8C:97:99:BF:EA:2F:FC:38:76:53:16:33:9A:10:EE
            X509v3 Authority Key Identifier:
                keyid:35:03:2C:10:0F:6D:77:D0:00:4B:CA:94:32:83:FC:AE:F2:46:33:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/35032C100F6D77D0004BCA943283FCAEF246335A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35032C100F6D77D0004BCA943283FCAEF246335A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/34352e3136302e3132362e302f32332d3233203d3e20323638343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:51:5f:7b:c8:23:33:67:c3:dc:14:bf:d8:54:56:16:d8:cf:
         69:11:c9:d1:19:3f:2e:53:7b:36:de:c6:3d:2a:16:c2:08:0e:
         20:cd:80:f4:92:a2:4d:73:62:a8:54:75:01:d8:a0:c7:8a:3a:
         06:19:c7:f2:7a:00:2b:36:92:aa:27:8c:a1:e9:29:7b:61:f5:
         b3:47:3a:68:ae:ae:0a:c8:73:02:76:12:f8:40:96:b5:d5:62:
         04:10:66:65:f7:e5:a2:1e:e1:38:55:2b:36:37:da:a9:23:a0:
         e9:c4:7a:f8:6a:0f:23:73:0b:0a:54:bd:9c:ea:bf:f0:4c:fa:
         07:f5:30:f1:79:6c:98:73:37:90:92:c5:ad:7d:9c:63:fc:3b:
         dc:1e:5d:21:37:25:a5:8d:93:29:70:e5:ab:44:9b:00:26:fe:
         0e:12:67:8d:21:59:13:33:ba:9c:a8:d8:34:73:ae:4c:dc:b6:
         e5:5c:1b:dd:1c:3a:96:7e:a0:0b:26:55:fa:18:21:43:b2:79:
         36:8e:be:e8:3f:a2:9e:9c:0b:2e:55:a5:03:53:72:3c:2e:6d:
         32:47:c8:5a:dd:bc:98:01:be:34:0e:58:b4:db:77:0a:da:d6:
         b1:3d:5b:2f:05:a9:39:4d:ef:52:94:18:df:87:89:3a:89:9f:
         3e:38:f3:9f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUR75jxXUegHxEYJg2JfsXMkvse6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUwMzJDMTAwRjZENzdEMDAwNEJDQTk0MzI4M0ZDQUVG
MjQ2MzM1QTAeFw0yNDA0MDQyMjM3MTZaFw0yNTA0MDMyMjQyMTZaMDMxMTAvBgNV
BAMTKDRDRUMyMjJGNDg4Qzk3OTlCRkVBMkZGQzM4NzY1MzE2MzM5QTEwRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvZua6giz78EfSas3BOenbOsrw
Id8d2DQkwRTVLxr7TxYdnC5kRWcwvpNEHbFw+s/uEsLIL4LL7bHPbfbN7b7gHUbV
INzWc2DQeN6zSRpcQOICcsN7NOPLmLKMvCNocKXFVfEE8chH78DH5v7YZ1b9WgNe
Hw+0sGhqHvS76mon+/yFUha/EhCNEMzE3ZfCeRhNRBVag/uaruASaQV961jtwTsT
Nu67HysJ5/cRRBS6A8JU5SpD0BVauDfwcbWDb+LMTvzTM1fb7LZp67q3ap6oOGVH
oj6QpzKWIYjJnfMTgWaWdewNJ9RiKAO+T+Wo4LD3YwNULC/adtUbnJd5uWgnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTOwiL0iMl5m/6i/8OHZTFjOaEO4wHwYDVR0j
BBgwFoAUNQMsEA9td9AAS8qUMoP8rvJGM1owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVNld2t2NkJWSlVGelhIOWsyNVg1alczaWFYRHRaQVF4Z1V0dUd5RGlQ
UWsvMS8zNTAzMkMxMDBGNkQ3N0QwMDA0QkNBOTQzMjgzRkNBRUYyNDYzMzVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MDMyQzEwMEY2RDc3RDAw
MDRCQ0E5NDMyODNGQ0FFRjI0NjMzNUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVTZXdrdjZCVkpVRnpYSDlrMjVYNWpXM2lhWER0WkFReGdVdHVHeURpUFFrLzEv
MzQzNTJlMzEzNjMwMmUzMTMyMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNDMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtoH4wDQYJKoZIhvcNAQELBQADggEBAEJRX3vI
IzNnw9wUv9hUVhbYz2kRydEZPy5Tezbexj0qFsIIDiDNgPSSok1zYqhUdQHYoMeK
OgYZx/J6ACs2kqonjKHpKXth9bNHOmiurgrIcwJ2EvhAlrXVYgQQZmX35aIe4ThV
KzY32qkjoOnEevhqDyNzCwpUvZzqv/BM+gf1MPF5bJhzN5CSxa19nGP8O9weXSE3
JaWNkylw5atEmwAm/g4SZ40hWRMzupyo2DRzrkzctuVcG90cOpZ+oAsmVfoYIUOy
eTaOvug/op6cCy5VpQNTcjwubTJHyFrdvJgBvjQOWLTbdwra1rE9Wy8FqTlN71KU
GN+HiTqJnz44858=
-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:15 2024 by rpki-client on console-ams.rpki-client.org