Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/1/34352e3233372e33312e302f32342d3234203d3e20323638323633.roa
File:                     34352e3233372e33312e302f32342d3234203d3e20323638323633.roa (raw, json)
Hash identifier:          3IfJQmv3Ubc8kFJWbbhPqk26tfSfpQsi2xIG4WPkhsc=
Subject key identifier:   C8:60:28:F3:FB:8B:61:14:B5:CA:8D:86:48:5F:36:A8:0A:05:81:1E
Certificate issuer:       /CN=C41C6680EE5BD7E7919B2A3D1D849805DB132937
Certificate serial:       0712CCA58C653AA535640A8EE36D0ECE9C4D5F7B
Authority key identifier: C4:1C:66:80:EE:5B:D7:E7:91:9B:2A:3D:1D:84:98:05:DB:13:29:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C41C6680EE5BD7E7919B2A3D1D849805DB132937.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/1/34352e3233372e33312e302f32342d3234203d3e20323638323633.roa
Signing time:             Tue 21 May 2024 01:44:21 +0000
ROA not before:           Tue 21 May 2024 01:39:21 +0000
ROA not after:            Tue 20 May 2025 01:44:21 +0000
asID:                     268263
IP address blocks:        45.237.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/1/C41C6680EE5BD7E7919B2A3D1D849805DB132937.crl
                          rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/1/C41C6680EE5BD7E7919B2A3D1D849805DB132937.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C41C6680EE5BD7E7919B2A3D1D849805DB132937.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:12:cc:a5:8c:65:3a:a5:35:64:0a:8e:e3:6d:0e:ce:9c:4d:5f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C41C6680EE5BD7E7919B2A3D1D849805DB132937
        Validity
            Not Before: May 21 01:39:21 2024 GMT
            Not After : May 20 01:44:21 2025 GMT
        Subject: CN=C86028F3FB8B6114B5CA8D86485F36A80A05811E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5e:69:3a:ae:4d:66:ea:7b:6a:f4:38:61:16:
                    53:95:ee:05:c6:90:89:39:ae:78:1c:1e:ff:88:12:
                    22:cd:b5:15:ee:be:c1:8c:e8:94:ed:cf:23:8b:8b:
                    73:6d:c4:64:f7:92:c6:56:2e:03:1e:d3:cd:20:c8:
                    d9:c7:cb:49:2b:a2:09:d5:be:bc:b1:cf:94:fc:5a:
                    62:dd:c9:86:06:03:83:1e:7a:3a:a8:12:21:3a:96:
                    cb:39:6b:e5:f3:e1:ce:b0:ba:d4:47:f2:05:20:cd:
                    95:6b:7f:dc:81:41:94:d1:58:2e:4f:ba:7c:38:66:
                    f5:ab:4c:dd:d4:d1:84:f3:3f:68:ee:a0:bc:1a:1d:
                    35:c8:3e:35:39:40:e7:25:80:1f:42:ed:f9:d2:e8:
                    43:bf:81:a4:da:22:3f:f2:90:c8:8a:12:18:62:0f:
                    42:cd:bb:c5:a1:0c:2d:d3:dc:20:8c:5d:88:43:07:
                    2a:51:51:f2:a6:d4:89:a8:79:a5:15:3e:dc:ac:ed:
                    19:de:67:c2:1e:9f:7a:b8:39:76:07:7c:da:35:36:
                    6e:d8:92:97:66:78:58:96:6f:92:7b:f7:20:12:6f:
                    b5:f9:ce:ff:43:a4:05:ab:7e:96:c5:4f:69:f1:f5:
                    99:65:c2:23:dd:71:ec:75:60:27:7a:3b:7b:41:fd:
                    10:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:60:28:F3:FB:8B:61:14:B5:CA:8D:86:48:5F:36:A8:0A:05:81:1E
            X509v3 Authority Key Identifier:
                keyid:C4:1C:66:80:EE:5B:D7:E7:91:9B:2A:3D:1D:84:98:05:DB:13:29:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/1/C41C6680EE5BD7E7919B2A3D1D849805DB132937.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C41C6680EE5BD7E7919B2A3D1D849805DB132937.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/1/34352e3233372e33312e302f32342d3234203d3e20323638323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:de:33:c3:b9:c8:5e:eb:ff:87:3e:36:9b:53:a5:a6:49:62:
         ce:4b:ac:04:1e:86:d8:92:54:4e:b7:26:ee:0f:c5:fc:ad:46:
         1f:52:18:d8:a5:b5:fb:22:7a:79:54:7f:b2:16:10:56:72:41:
         23:99:52:f2:ac:3c:83:f8:8e:06:a9:5c:2a:18:62:6e:f3:3f:
         5c:75:cf:0c:95:b3:56:49:94:62:60:37:e5:a0:c8:d1:64:bb:
         c8:8a:bf:85:90:bb:57:b2:2a:f1:76:6b:a9:57:28:0d:bd:53:
         51:ee:55:40:f5:3a:70:c0:b2:26:44:d7:5d:1f:19:9d:24:1f:
         27:2c:29:96:46:f7:3c:95:09:e4:af:10:8c:3f:08:69:47:33:
         2c:f5:c2:30:85:2a:84:c9:b5:3b:46:53:5e:f3:7f:99:07:61:
         7f:6e:d8:7a:42:b6:70:84:ed:3b:d8:be:e2:25:73:d9:49:cd:
         22:1e:62:8d:5a:6b:be:3e:0c:02:f8:ef:43:7e:97:a9:f9:81:
         00:2f:3a:03:dc:32:dc:6d:7d:10:7b:8e:d1:43:79:63:9c:ab:
         b1:00:25:f4:d9:02:84:f5:14:2e:17:ac:f1:80:6e:03:28:84:
         6c:8e:c7:5b:3d:96:bd:cd:7f:9d:87:92:60:1e:bd:8e:53:b4:
         40:11:9c:54
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBxLMpYxlOqU1ZAqO420OzpxNX3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQxQzY2ODBFRTVCRDdFNzkxOUIyQTNEMUQ4NDk4MDVE
QjEzMjkzNzAeFw0yNDA1MjEwMTM5MjFaFw0yNTA1MjAwMTQ0MjFaMDMxMTAvBgNV
BAMTKEM4NjAyOEYzRkI4QjYxMTRCNUNBOEQ4NjQ4NUYzNkE4MEEwNTgxMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVXmk6rk1m6ntq9DhhFlOV7gXG
kIk5rngcHv+IEiLNtRXuvsGM6JTtzyOLi3NtxGT3ksZWLgMe080gyNnHy0krognV
vryxz5T8WmLdyYYGA4MeejqoEiE6lss5a+Xz4c6wutRH8gUgzZVrf9yBQZTRWC5P
unw4ZvWrTN3U0YTzP2juoLwaHTXIPjU5QOclgB9C7fnS6EO/gaTaIj/ykMiKEhhi
D0LNu8WhDC3T3CCMXYhDBypRUfKm1ImoeaUVPtys7RneZ8Ien3q4OXYHfNo1Nm7Y
kpdmeFiWb5J79yASb7X5zv9DpAWrfpbFT2nx9ZllwiPdcex1YCd6O3tB/RCPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyGAo8/uLYRS1yo2GSF82qAoFgR4wHwYDVR0j
BBgwFoAUxBxmgO5b1+eRmyo9HYSYBdsTKTcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXBDTGNZS3hVUVlqNFN0bUJrR05QZjF4OU1BdndhazVmeUVvb3JON25j
UUwvMS9DNDFDNjY4MEVFNUJEN0U3OTE5QjJBM0QxRDg0OTgwNURCMTMyOTM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0MUM2NjgwRUU1QkQ3RTc5
MTlCMkEzRDFEODQ5ODA1REIxMzI5MzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVwQ0xjWUt4VVFZajRTdG1Ca0dOUGYxeDlNQXZ3YWs1ZnlFb29yTjduY1FMLzEv
MzQzNTJlMzIzMzM3MmUzMzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzIzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALe0fMA0GCSqGSIb3DQEBCwUAA4IBAQBm3jPDuche
6/+HPjabU6WmSWLOS6wEHobYklROtybuD8X8rUYfUhjYpbX7Inp5VH+yFhBWckEj
mVLyrDyD+I4GqVwqGGJu8z9cdc8MlbNWSZRiYDfloMjRZLvIir+FkLtXsirxdmup
VygNvVNR7lVA9TpwwLImRNddHxmdJB8nLCmWRvc8lQnkrxCMPwhpRzMs9cIwhSqE
ybU7RlNe83+ZB2F/bth6QrZwhO072L7iJXPZSc0iHmKNWmu+PgwC+O9Dfpep+YEA
LzoD3DLcbX0Qe47RQ3ljnKuxACX02QKE9RQuF6zxgG4DKIRsjsdbPZa9zX+dh5Jg
Hr2OU7RAEZxU
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:51 2024 by rpki-client on console-fra.rpki-client.org