Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/34352e3138342e3134302e302f32322d3234203d3e20323639333430.roa
File:                     34352e3138342e3134302e302f32322d3234203d3e20323639333430.roa (raw, json)
Hash identifier:          QbXhL8r2aYQe2hlKXtBNKLhK5qNfrXvWbaY96T27F+U=
Subject key identifier:   90:E0:E3:24:38:56:FB:E8:20:9C:AF:79:37:AF:17:33:46:BE:31:D9
Certificate issuer:       /CN=4E865237E426925D454145603E8DE8C3ABC12D0F
Certificate serial:       0E531C27DCF9B0B71B2E33797149B79698D6F404
Authority key identifier: 4E:86:52:37:E4:26:92:5D:45:41:45:60:3E:8D:E8:C3:AB:C1:2D:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E865237E426925D454145603E8DE8C3ABC12D0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/34352e3138342e3134302e302f32322d3234203d3e20323639333430.roa
Signing time:             Wed 10 Apr 2024 12:10:17 +0000
ROA not before:           Wed 10 Apr 2024 12:05:17 +0000
ROA not after:            Wed 09 Apr 2025 12:10:17 +0000
asID:                     269340
IP address blocks:        45.184.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.crl
                          rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E865237E426925D454145603E8DE8C3ABC12D0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:53:1c:27:dc:f9:b0:b7:1b:2e:33:79:71:49:b7:96:98:d6:f4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E865237E426925D454145603E8DE8C3ABC12D0F
        Validity
            Not Before: Apr 10 12:05:17 2024 GMT
            Not After : Apr  9 12:10:17 2025 GMT
        Subject: CN=90E0E3243856FBE8209CAF7937AF173346BE31D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:91:a8:8e:27:d2:ee:c9:18:28:a4:58:42:
                    d2:4a:47:cf:b2:a7:57:29:6f:53:3a:40:c6:1a:de:
                    6d:e4:02:20:38:52:98:8a:92:29:0e:0e:14:b8:e0:
                    f1:1f:7a:f7:86:9e:dd:a4:f9:66:93:d0:26:e3:19:
                    0b:d9:8d:0b:28:f5:80:ac:b1:07:d4:b8:bf:39:9d:
                    3f:77:2f:8f:ed:b3:47:15:aa:9c:a1:4f:71:1f:93:
                    b9:f2:e6:e9:bf:3a:af:09:7d:f5:04:7b:39:f6:85:
                    d6:e4:5e:2c:95:d6:d4:0a:b0:90:2f:83:b8:ae:d5:
                    e6:56:c2:6f:97:59:7d:78:5f:9c:5c:0d:0e:b5:e3:
                    c6:6c:86:a7:58:4b:52:38:c7:75:a7:7f:a0:66:da:
                    d2:6c:a2:6c:73:c1:74:80:71:6d:17:48:c8:34:25:
                    96:4f:cf:c0:66:9d:15:ac:06:ee:b5:34:4c:e9:80:
                    e5:27:6e:95:df:70:86:ea:4c:58:80:64:36:f9:b9:
                    ce:a4:95:4f:76:33:9a:9c:1b:36:d6:34:13:29:e0:
                    12:f6:4e:3d:51:e8:54:09:41:f9:c8:b1:84:21:13:
                    e5:f7:98:bd:af:fc:f4:9c:3a:d2:11:94:e2:12:cb:
                    47:62:f1:2c:9c:b7:16:5d:d8:fc:1c:67:b0:8e:76:
                    d8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E0:E3:24:38:56:FB:E8:20:9C:AF:79:37:AF:17:33:46:BE:31:D9
            X509v3 Authority Key Identifier:
                keyid:4E:86:52:37:E4:26:92:5D:45:41:45:60:3E:8D:E8:C3:AB:C1:2D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E865237E426925D454145603E8DE8C3ABC12D0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/34352e3138342e3134302e302f32322d3234203d3e20323639333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:74:21:b6:51:88:0d:26:4a:81:1d:98:ef:43:fd:8f:ef:75:
         83:25:06:b4:8c:da:0a:1b:39:50:41:e9:cc:af:26:3b:43:e0:
         fe:fa:9a:43:8b:83:e4:57:2c:de:ec:47:83:4e:f9:5d:6e:66:
         f4:a0:87:3e:dc:1e:b7:ee:9d:c4:b5:8f:b0:21:a5:b7:10:dc:
         14:35:4d:fc:8b:7e:af:6b:b2:0f:5b:52:9e:c2:17:fd:96:32:
         49:49:05:a2:a7:db:81:fe:8e:2f:f5:db:72:87:fe:53:6d:35:
         80:b3:80:5d:f1:13:62:67:21:ab:8d:5e:04:8c:e9:e9:e4:79:
         73:d3:27:b9:1b:dc:29:fd:22:f9:62:15:3b:9e:5c:98:64:4b:
         f9:d9:10:d0:eb:5b:f4:14:0f:c2:d5:5a:b9:6b:64:70:70:de:
         59:2a:af:a3:d6:3b:d5:d5:e8:a2:4a:cf:48:05:46:53:04:1a:
         ae:fd:bd:c5:8d:f7:00:54:09:9a:2a:24:85:d0:92:36:cd:5f:
         88:4a:06:2e:dc:dc:9b:7c:73:ac:50:d8:34:a2:4d:d9:fe:ca:
         be:ae:af:53:96:f0:86:44:94:23:0d:59:81:9b:df:00:9c:88:
         2e:8d:52:90:4f:ff:dd:2b:f5:5b:00:dc:b9:54:35:a8:54:bf:
         46:a7:1f:20
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDlMcJ9z5sLcbLjN5cUm3lpjW9AQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU4NjUyMzdFNDI2OTI1RDQ1NDE0NTYwM0U4REU4QzNB
QkMxMkQwRjAeFw0yNDA0MTAxMjA1MTdaFw0yNTA0MDkxMjEwMTdaMDMxMTAvBgNV
BAMTKDkwRTBFMzI0Mzg1NkZCRTgyMDlDQUY3OTM3QUYxNzMzNDZCRTMxRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUZGojifS7skYKKRYQtJKR8+y
p1cpb1M6QMYa3m3kAiA4UpiKkikODhS44PEfeveGnt2k+WaT0CbjGQvZjQso9YCs
sQfUuL85nT93L4/ts0cVqpyhT3Efk7ny5um/Oq8JffUEezn2hdbkXiyV1tQKsJAv
g7iu1eZWwm+XWX14X5xcDQ6148ZshqdYS1I4x3Wnf6Bm2tJsomxzwXSAcW0XSMg0
JZZPz8BmnRWsBu61NEzpgOUnbpXfcIbqTFiAZDb5uc6klU92M5qcGzbWNBMp4BL2
Tj1R6FQJQfnIsYQhE+X3mL2v/PScOtIRlOISy0di8SyctxZd2PwcZ7COdtgVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkODjJDhW++ggnK95N68XM0a+MdkwHwYDVR0j
BBgwFoAUToZSN+Qmkl1FQUVgPo3ow6vBLQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWpnVGY1QWJXNVBSS2l6MllGNHBMWjlMR1VyNnplM29iZmpwMTRxelFL
TmcvMC80RTg2NTIzN0U0MjY5MjVENDU0MTQ1NjAzRThERThDM0FCQzEyRDBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFODY1MjM3RTQyNjkyNUQ0
NTQxNDU2MDNFOERFOEMzQUJDMTJEMEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqZ1RmNUFiVzVQUktpejJZRjRwTFo5TEdVcjZ6ZTNvYmZqcDE0cXpRS05nLzAv
MzQzNTJlMzEzODM0MmUzMTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMzM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItuIwwDQYJKoZIhvcNAQELBQADggEBAMN0IbZR
iA0mSoEdmO9D/Y/vdYMlBrSM2gobOVBB6cyvJjtD4P76mkOLg+RXLN7sR4NO+V1u
ZvSghz7cHrfuncS1j7AhpbcQ3BQ1TfyLfq9rsg9bUp7CF/2WMklJBaKn24H+ji/1
23KH/lNtNYCzgF3xE2JnIauNXgSM6enkeXPTJ7kb3Cn9IvliFTueXJhkS/nZENDr
W/QUD8LVWrlrZHBw3lkqr6PWO9XV6KJKz0gFRlMEGq79vcWN9wBUCZoqJIXQkjbN
X4hKBi7c3Jt8c6xQ2DSiTdn+yr6ur1OW8IZElCMNWYGb3wCciC6NUpBP/90r9VsA
3LlUNahUv0anHyA=
-----END CERTIFICATE-----
Generated at Sat Sep 28 05:42:26 2024 by rpki-client on console-fra.rpki-client.org