Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          y3Y6sim4Zg0fIjknHki4Tz7uLLxBX/RiOslSjADwYvY=
Subject key identifier:   6B:F0:6E:A5:DC:D4:6E:2F:05:D2:2F:79:6B:C8:77:A5:2A:17:09:BC
Certificate issuer:       /CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
Certificate serial:       2EF068698D2136F5A4BB3C78698125FC4042FCB6
Authority key identifier: CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa
Signing time:             Fri 08 Nov 2024 14:24:09 +0000
ROA not before:           Fri 08 Nov 2024 14:19:09 +0000
ROA not after:            Fri 07 Nov 2025 14:24:09 +0000
asID:                     267027
IP address blocks:        45.227.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.crl
                          rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f0:68:69:8d:21:36:f5:a4:bb:3c:78:69:81:25:fc:40:42:fc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
        Validity
            Not Before: Nov  8 14:19:09 2024 GMT
            Not After : Nov  7 14:24:09 2025 GMT
        Subject: CN=6BF06EA5DCD46E2F05D22F796BC877A52A1709BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:07:25:61:9d:dc:d6:04:04:b3:6c:61:75:
                    80:ff:79:81:07:7d:f9:f4:fc:96:5f:d2:cc:d5:18:
                    6f:d1:07:47:54:d9:cb:13:ac:12:2e:8e:31:ad:e1:
                    78:f1:a1:30:fd:ad:46:eb:16:1d:07:90:e0:ee:be:
                    17:53:f2:09:22:e5:ea:a6:aa:b3:ce:15:28:cb:d8:
                    fd:32:e6:eb:c1:9a:23:71:e3:99:28:1a:8f:a4:51:
                    52:c2:bf:0b:f1:fa:93:57:1b:dc:82:66:00:38:ae:
                    6d:a8:05:37:57:5b:74:fd:d7:b3:2b:e7:90:3b:36:
                    5f:74:c4:9d:a0:e1:62:79:16:8f:d4:1d:2b:50:29:
                    ac:8c:ad:d2:2a:f5:a5:cc:e7:6b:26:3e:5e:26:ce:
                    f3:10:cd:3d:93:7b:2d:62:d0:f9:5b:c1:7d:52:73:
                    fc:3b:4d:c9:6a:1a:d3:14:e7:19:51:2e:5e:0e:7c:
                    80:b0:7f:80:3d:c7:1b:e5:6a:8f:8e:25:e6:38:4c:
                    64:6b:95:8f:bc:63:df:cb:c9:9e:b9:d1:6c:a3:f3:
                    c6:5d:cb:3d:eb:0d:9f:ac:ac:60:2f:da:bd:d8:9c:
                    df:77:39:82:b2:ec:ad:e7:d6:97:ce:b8:fc:fc:51:
                    79:7f:5e:57:9f:cf:9d:58:d5:f5:ea:69:ab:3e:aa:
                    77:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F0:6E:A5:DC:D4:6E:2F:05:D2:2F:79:6B:C8:77:A5:2A:17:09:BC
            X509v3 Authority Key Identifier:
                keyid:CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:29:a0:21:f0:06:e6:cd:74:0a:b6:27:a7:7f:f0:99:7a:e5:
         05:f9:9e:29:cc:72:c4:c9:75:c9:67:18:e0:fa:38:b8:1c:d9:
         d6:d6:c6:a3:3d:be:bb:39:aa:b8:f5:68:d0:ef:88:99:77:23:
         19:f9:76:e9:9a:f7:30:d9:c9:47:74:0d:6d:97:24:86:63:ac:
         6d:50:82:0e:f1:70:70:92:c0:8a:26:20:f8:7b:66:2c:15:62:
         e7:40:33:03:cb:f7:e1:a8:43:59:35:06:6f:e9:3c:66:7b:52:
         c2:d5:ed:e4:9e:04:ab:a3:78:d3:9e:4d:28:fe:0a:98:97:5a:
         c2:87:b5:ad:e4:00:80:43:5c:5a:29:ff:5f:9d:bc:62:3f:c7:
         e4:58:2b:2a:40:ed:ec:f3:09:ef:8f:30:ea:ac:fe:93:be:e5:
         3a:40:32:cc:d0:15:99:98:2c:c3:2c:a3:d2:2e:3b:00:2d:84:
         c2:7a:54:f0:a2:6d:86:97:ee:77:f5:f1:4d:f8:e4:bf:bc:6f:
         25:f5:a2:44:cc:44:77:04:c4:a6:73:e6:d6:a4:d3:46:43:22:
         d0:d1:2e:6a:3b:b6:ac:ab:ca:18:41:23:87:bb:b9:18:76:ed:
         df:51:90:87:dd:c4:c3:47:6d:b4:0e:28:c6:2d:aa:a6:79:8d:
         cc:c8:56:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULvBoaY0hNvWkuzx4aYEl/EBC/LYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M4MUJDMDUyRjI0NTFCQUMxNkZBNDIyNTREMTY4NkUw
Rjk3QkU3QjAeFw0yNDExMDgxNDE5MDlaFw0yNTExMDcxNDI0MDlaMDMxMTAvBgNV
BAMTKDZCRjA2RUE1RENENDZFMkYwNUQyMkY3OTZCQzg3N0E1MkExNzA5QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChnwclYZ3c1gQEs2xhdYD/eYEH
ffn0/JZf0szVGG/RB0dU2csTrBIujjGt4XjxoTD9rUbrFh0HkODuvhdT8gki5eqm
qrPOFSjL2P0y5uvBmiNx45koGo+kUVLCvwvx+pNXG9yCZgA4rm2oBTdXW3T917Mr
55A7Nl90xJ2g4WJ5Fo/UHStQKayMrdIq9aXM52smPl4mzvMQzT2Tey1i0PlbwX1S
c/w7TclqGtMU5xlRLl4OfICwf4A9xxvlao+OJeY4TGRrlY+8Y9/LyZ650Wyj88Zd
yz3rDZ+srGAv2r3YnN93OYKy7K3n1pfOuPz8UXl/Xlefz51Y1fXqaas+qneXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUa/BupdzUbi8F0i95a8h3pSoXCbwwHwYDVR0j
BBgwFoAUzIG8BS8kUbrBb6QiVNFobg+XvnswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RFpxZ0xxWVBvdEVjZUJzbWNTNlNlTWR3cHlxWFZ1YWhodnJhV3RK
WXovMC9DQzgxQkMwNTJGMjQ1MUJBQzE2RkE0MjI1NEQxNjg2RTBGOTdCRTdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDODFCQzA1MkYyNDUxQkFD
MTZGQTQyMjU0RDE2ODZFMEY5N0JFN0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURacWdMcVlQb3RFY2VCc21jUzZTZU1kd3B5cVhWdWFoaHZyYVd0Sll6LzAv
MzQzNTJlMzIzMjM3MmUzMTM2MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMDMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt46kwDQYJKoZIhvcNAQELBQADggEBAK0poCHw
BubNdAq2J6d/8Jl65QX5ninMcsTJdclnGOD6OLgc2dbWxqM9vrs5qrj1aNDviJl3
Ixn5duma9zDZyUd0DW2XJIZjrG1Qgg7xcHCSwIomIPh7ZiwVYudAMwPL9+GoQ1k1
Bm/pPGZ7UsLV7eSeBKujeNOeTSj+CpiXWsKHta3kAIBDXFop/1+dvGI/x+RYKypA
7ezzCe+PMOqs/pO+5TpAMszQFZmYLMMso9IuOwAthMJ6VPCibYaX7nf18U345L+8
byX1okTMRHcExKZz5tak00ZDItDRLmo7tqyryhhBI4e7uRh27d9RkIfdxMNHbbQO
KMYtqqZ5jczIVok=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:09 2024 by rpki-client on console-ams.rpki-client.org