Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/3230302e3132332e3232342e302f32322d3234203d3e20323730323632.roa
File:                     3230302e3132332e3232342e302f32322d3234203d3e20323730323632.roa (raw, json)
Hash identifier:          Qhy2x/Gl5x4DlYMqujm0/VNpOYWgoW5A3T7EoZe82Ew=
Subject key identifier:   45:45:77:EA:CA:2E:23:F0:0A:FF:2A:06:A1:F6:0C:D8:61:55:61:32
Certificate issuer:       /CN=4604735AE146206BD46CAEA7DB01B25B210619DE
Certificate serial:       384293927F18309FB6A3D05251EFBA5A6898E981
Authority key identifier: 46:04:73:5A:E1:46:20:6B:D4:6C:AE:A7:DB:01:B2:5B:21:06:19:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4604735AE146206BD46CAEA7DB01B25B210619DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/3230302e3132332e3232342e302f32322d3234203d3e20323730323632.roa
Signing time:             Thu 18 Jul 2024 19:20:03 +0000
ROA not before:           Thu 18 Jul 2024 19:15:03 +0000
ROA not after:            Thu 17 Jul 2025 19:20:03 +0000
asID:                     270262
IP address blocks:        200.123.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.crl
                          rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4604735AE146206BD46CAEA7DB01B25B210619DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:42:93:92:7f:18:30:9f:b6:a3:d0:52:51:ef:ba:5a:68:98:e9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4604735AE146206BD46CAEA7DB01B25B210619DE
        Validity
            Not Before: Jul 18 19:15:03 2024 GMT
            Not After : Jul 17 19:20:03 2025 GMT
        Subject: CN=454577EACA2E23F00AFF2A06A1F60CD861556132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:9b:23:25:70:39:a0:24:c3:9f:64:a4:e3:
                    22:ff:74:61:36:82:82:bf:e5:7a:13:d9:ad:d8:d3:
                    8f:60:1e:33:4e:b0:08:5c:c4:37:4b:fe:34:55:36:
                    9e:a6:0d:84:ff:cd:36:dd:6f:1d:f6:61:f3:0c:40:
                    74:01:59:e9:ca:51:27:14:bc:5f:2d:a7:bd:ed:d0:
                    ae:4b:d0:c9:c0:f3:50:49:4a:88:ae:be:43:e9:8b:
                    ce:87:17:f2:9c:ff:67:ef:a7:b7:01:c5:c5:a5:93:
                    0d:51:20:26:f2:f5:db:88:c5:99:cd:a6:7a:29:df:
                    ea:0d:7a:6f:86:39:c5:d8:12:7d:35:af:c9:9f:5f:
                    03:05:6f:07:8c:9d:77:95:6c:5f:c5:cf:3c:42:89:
                    59:79:68:9f:2d:88:f0:73:0a:0f:17:be:08:92:eb:
                    86:60:f7:4a:7c:84:07:e3:6f:5a:da:92:db:71:88:
                    03:14:f7:e5:25:c0:9d:10:84:cd:b9:44:19:24:65:
                    84:75:44:3f:c0:1a:ee:6d:38:41:a0:20:f2:a3:fe:
                    b3:37:0e:ea:4a:51:1a:da:86:42:d1:b4:70:5c:63:
                    59:09:01:3a:37:ba:86:f1:d6:89:b7:ef:fd:31:28:
                    e3:f5:04:dc:02:6b:f4:04:1f:e6:80:77:27:1e:1e:
                    bf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:45:77:EA:CA:2E:23:F0:0A:FF:2A:06:A1:F6:0C:D8:61:55:61:32
            X509v3 Authority Key Identifier:
                keyid:46:04:73:5A:E1:46:20:6B:D4:6C:AE:A7:DB:01:B2:5B:21:06:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4604735AE146206BD46CAEA7DB01B25B210619DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/3230302e3132332e3232342e302f32322d3234203d3e20323730323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:c2:4e:8d:56:46:1b:72:cb:2b:2a:db:30:b3:54:32:c5:1c:
         56:f1:58:3a:75:bc:ee:d8:5e:4b:a8:e5:54:4b:14:4a:c3:a3:
         90:b0:38:fd:82:32:09:0d:84:0d:b5:a3:1f:ea:c3:14:42:78:
         43:e7:f2:ec:b6:ac:54:be:ba:4b:ea:43:e9:54:10:55:6f:28:
         32:a7:29:33:f3:e0:10:4f:73:84:b8:65:21:ad:df:09:0c:e9:
         0e:31:df:c0:e4:29:a8:bd:2b:1f:b2:b3:ae:42:b2:46:9d:83:
         f6:d4:c5:78:d6:7a:fd:65:ab:41:3d:79:ee:50:12:67:5e:94:
         ea:f3:3c:b4:2d:af:50:cd:e9:f0:38:14:ae:d1:e6:f8:58:e6:
         af:11:4c:07:59:ae:d7:38:0d:74:39:76:ee:4a:be:b5:63:f2:
         19:21:f5:ec:f3:f9:00:3d:53:66:79:12:75:78:b6:77:8e:79:
         eb:68:21:ae:d5:27:6a:0d:24:36:f4:f2:07:00:b3:a7:d8:d1:
         95:1c:49:21:ea:c8:83:1b:59:59:18:54:de:c9:c1:50:88:1f:
         9b:92:b7:9a:ac:16:63:fb:6a:87:f1:d4:bb:2f:30:75:91:65:
         35:4e:a3:cd:35:ce:ca:e0:63:16:d6:9a:51:c9:82:98:4c:96:
         6f:2f:95:dd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOEKTkn8YMJ+2o9BSUe+6WmiY6YEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYwNDczNUFFMTQ2MjA2QkQ0NkNBRUE3REIwMUIyNUIy
MTA2MTlERTAeFw0yNDA3MTgxOTE1MDNaFw0yNTA3MTcxOTIwMDNaMDMxMTAvBgNV
BAMTKDQ1NDU3N0VBQ0EyRTIzRjAwQUZGMkEwNkExRjYwQ0Q4NjE1NTYxMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwW5sjJXA5oCTDn2Sk4yL/dGE2
goK/5XoT2a3Y049gHjNOsAhcxDdL/jRVNp6mDYT/zTbdbx32YfMMQHQBWenKUScU
vF8tp73t0K5L0MnA81BJSoiuvkPpi86HF/Kc/2fvp7cBxcWlkw1RICby9duIxZnN
pnop3+oNem+GOcXYEn01r8mfXwMFbweMnXeVbF/FzzxCiVl5aJ8tiPBzCg8XvgiS
64Zg90p8hAfjb1rakttxiAMU9+UlwJ0QhM25RBkkZYR1RD/AGu5tOEGgIPKj/rM3
DupKURrahkLRtHBcY1kJATo3uobx1om37/0xKOP1BNwCa/QEH+aAdyceHr+FAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQURUV36souI/AK/yoGofYM2GFVYTIwHwYDVR0j
BBgwFoAURgRzWuFGIGvUbK6n2wGyWyEGGd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWJpWHM3cVJwbjlDTDRaUERFeVRzRloyQUR6YzRDekJGZG96aFoydndI
RXkvMC80NjA0NzM1QUUxNDYyMDZCRDQ2Q0FFQTdEQjAxQjI1QjIxMDYxOURFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2MDQ3MzVBRTE0NjIwNkJE
NDZDQUVBN0RCMDFCMjVCMjEwNjE5REUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzViaVhzN3FScG45Q0w0WlBERXlUc0ZaMkFEemM0Q3pCRmRvemhaMnZ3SEV5LzAv
MzIzMDMwMmUzMTMyMzMyZTMyMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDMyMzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsh74DANBgkqhkiG9w0BAQsFAAOCAQEAcMJO
jVZGG3LLKyrbMLNUMsUcVvFYOnW87theS6jlVEsUSsOjkLA4/YIyCQ2EDbWjH+rD
FEJ4Q+fy7LasVL66S+pD6VQQVW8oMqcpM/PgEE9zhLhlIa3fCQzpDjHfwOQpqL0r
H7KzrkKyRp2D9tTFeNZ6/WWrQT157lASZ16U6vM8tC2vUM3p8DgUrtHm+FjmrxFM
B1mu1zgNdDl27kq+tWPyGSH17PP5AD1TZnkSdXi2d45562ghrtUnag0kNvTyBwCz
p9jRlRxJIerIgxtZWRhU3snBUIgfm5K3mqwWY/tqh/HUuy8wdZFlNU6jzTXOyuBj
FtaaUcmCmEyWby+V3Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:33 2024 by rpki-client on console-fra.rpki-client.org