Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/34352e352e31362e302f32322d3234203d3e20323636303833.roa
File:                     34352e352e31362e302f32322d3234203d3e20323636303833.roa (raw, json)
Hash identifier:          5O8guCh9K45wv1QRFDbmIEi1X1htgOnYcyV2uS2H7ho=
Subject key identifier:   AE:03:16:85:CC:12:70:23:C8:2F:2B:24:9C:64:50:C5:5F:8A:CF:32
Certificate issuer:       /CN=87A87992D41AF8237F09E4D559791775A6B6EA10
Certificate serial:       499351191931E3A1B2E45F50385AA02787DD51CA
Authority key identifier: 87:A8:79:92:D4:1A:F8:23:7F:09:E4:D5:59:79:17:75:A6:B6:EA:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A87992D41AF8237F09E4D559791775A6B6EA10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/34352e352e31362e302f32322d3234203d3e20323636303833.roa
Signing time:             Thu 04 Apr 2024 22:45:24 +0000
ROA not before:           Thu 04 Apr 2024 22:40:24 +0000
ROA not after:            Thu 03 Apr 2025 22:45:24 +0000
asID:                     266083
IP address blocks:        45.5.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/87A87992D41AF8237F09E4D559791775A6B6EA10.crl
                          rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/87A87992D41AF8237F09E4D559791775A6B6EA10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A87992D41AF8237F09E4D559791775A6B6EA10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:93:51:19:19:31:e3:a1:b2:e4:5f:50:38:5a:a0:27:87:dd:51:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A87992D41AF8237F09E4D559791775A6B6EA10
        Validity
            Not Before: Apr  4 22:40:24 2024 GMT
            Not After : Apr  3 22:45:24 2025 GMT
        Subject: CN=AE031685CC127023C82F2B249C6450C55F8ACF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:b4:b5:d6:b6:80:be:b3:1a:cc:a3:96:8f:
                    6d:fe:d1:7b:c4:cc:4e:05:2c:dc:dc:6e:9b:75:95:
                    0f:9b:16:b8:26:b7:47:44:07:5e:cf:69:24:31:8b:
                    a8:46:c3:89:3a:9c:b8:ff:f1:2a:c9:69:10:c0:98:
                    75:5e:d6:56:61:4e:cb:a2:32:d7:c7:dd:46:37:4f:
                    52:dc:f0:78:49:21:2f:58:ed:02:bb:f3:36:dc:f1:
                    97:42:00:d1:85:dc:09:1f:91:30:51:63:09:87:d3:
                    94:17:76:22:db:b9:cb:c8:c7:46:20:b6:a4:09:20:
                    55:7a:78:11:9b:5e:78:2c:b4:44:f2:39:2c:9b:91:
                    b8:96:35:a3:e9:f7:f6:02:bc:4b:85:dc:03:7c:4b:
                    48:2a:81:b5:d6:4f:36:6e:9c:9c:ea:1c:a2:9f:d3:
                    79:6b:29:fe:03:c1:59:1a:14:84:a9:a0:09:1b:13:
                    94:cd:61:a0:fd:f7:e7:9f:e9:3b:1c:c5:d9:f8:1f:
                    d9:27:ef:e5:f8:1e:8b:bc:50:1b:6f:cd:2e:50:6c:
                    d9:f8:6a:64:a4:e3:91:85:ee:4c:63:77:1e:3d:db:
                    cf:34:34:ee:08:c3:ca:46:29:38:cb:94:db:37:11:
                    64:23:99:d8:5b:8f:48:98:81:0c:a6:49:3f:73:82:
                    70:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:03:16:85:CC:12:70:23:C8:2F:2B:24:9C:64:50:C5:5F:8A:CF:32
            X509v3 Authority Key Identifier:
                keyid:87:A8:79:92:D4:1A:F8:23:7F:09:E4:D5:59:79:17:75:A6:B6:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/87A87992D41AF8237F09E4D559791775A6B6EA10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A87992D41AF8237F09E4D559791775A6B6EA10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/34352e352e31362e302f32322d3234203d3e20323636303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:b7:9b:40:2f:ac:ab:9f:6b:98:43:2d:17:26:65:0b:20:5c:
         0f:f6:3f:fe:8f:12:40:ee:9d:76:9f:b6:09:32:6f:db:16:47:
         30:4c:c2:28:6a:42:b2:d2:9d:32:ea:e9:3a:27:d1:4c:64:28:
         42:61:d9:3b:1e:6e:8e:58:69:f9:a3:27:fa:95:05:7b:dd:a9:
         87:19:2f:3e:2e:25:d9:5a:82:36:93:80:e6:46:b7:31:58:68:
         58:57:f7:3c:a8:70:1a:30:a2:cf:11:1e:03:8f:ac:06:48:8b:
         3c:f0:29:96:99:e9:04:f1:14:2e:84:fb:51:5c:1b:eb:a4:c3:
         db:07:c8:88:e0:cf:fb:60:ae:13:75:ec:38:fb:a3:a5:1c:b9:
         64:09:b1:c7:ef:04:48:4e:c6:c0:37:4f:09:d3:fb:ac:d3:b8:
         cc:24:12:05:bb:2c:b8:88:8c:dd:47:55:12:5a:b3:c0:7b:b0:
         48:af:46:7e:c4:4a:66:3d:2c:91:8a:cf:4d:f3:8e:0a:7e:11:
         74:8b:b5:c5:51:50:f1:fe:74:6d:b4:e4:f6:bf:f1:45:36:c7:
         0b:fe:ac:3a:e0:23:2c:a3:63:a3:ca:7e:4a:d4:94:f1:90:69:
         b4:2d:a5:89:e2:8d:09:5b:e5:91:78:5e:b9:cf:01:56:5c:21:
         70:73:35:1e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUSZNRGRkx46Gy5F9QOFqgJ4fdUcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdBODc5OTJENDFBRjgyMzdGMDlFNEQ1NTk3OTE3NzVB
NkI2RUExMDAeFw0yNDA0MDQyMjQwMjRaFw0yNTA0MDMyMjQ1MjRaMDMxMTAvBgNV
BAMTKEFFMDMxNjg1Q0MxMjcwMjNDODJGMkIyNDlDNjQ1MEM1NUY4QUNGMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArbS11raAvrMazKOWj23+0XvE
zE4FLNzcbpt1lQ+bFrgmt0dEB17PaSQxi6hGw4k6nLj/8SrJaRDAmHVe1lZhTsui
MtfH3UY3T1Lc8HhJIS9Y7QK78zbc8ZdCANGF3AkfkTBRYwmH05QXdiLbucvIx0Yg
tqQJIFV6eBGbXngstETyOSybkbiWNaPp9/YCvEuF3AN8S0gqgbXWTzZunJzqHKKf
03lrKf4DwVkaFISpoAkbE5TNYaD99+ef6Tscxdn4H9kn7+X4Hou8UBtvzS5QbNn4
amSk45GF7kxjdx492880NO4Iw8pGKTjLlNs3EWQjmdhbj0iYgQymST9zgnBhAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUrgMWhcwScCPILysknGRQxV+KzzIwHwYDVR0j
BBgwFoAUh6h5ktQa+CN/CeTVWXkXdaa26hAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzUya0NKa1E2Nkx4ZmhlWjdtd2lkTUdLZlNnV3VSbUpMSkdoSEs5QWU1
SkwvMS84N0E4Nzk5MkQ0MUFGODIzN0YwOUU0RDU1OTc5MTc3NUE2QjZFQTEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QTg3OTkyRDQxQUY4MjM3
RjA5RTRENTU5NzkxNzc1QTZCNkVBMTAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc1MmtDSmtRNjZMeGZoZVo3bXdpZE1HS2ZTZ1d1Um1KTEpHaEhLOUFlNUpMLzEv
MzQzNTJlMzUyZTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzMDM4
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBRAwDQYJKoZIhvcNAQELBQADggEBAE63m0AvrKufa5hD
LRcmZQsgXA/2P/6PEkDunXaftgkyb9sWRzBMwihqQrLSnTLq6Ton0UxkKEJh2Tse
bo5YafmjJ/qVBXvdqYcZLz4uJdlagjaTgOZGtzFYaFhX9zyocBowos8RHgOPrAZI
izzwKZaZ6QTxFC6E+1FcG+ukw9sHyIjgz/tgrhN17Dj7o6UcuWQJscfvBEhOxsA3
TwnT+6zTuMwkEgW7LLiIjN1HVRJas8B7sEivRn7ESmY9LJGKz03zjgp+EXSLtcVR
UPH+dG205Pa/8UU2xwv+rDrgIyyjY6PKfkrUlPGQabQtpYnijQlb5ZF4XrnPAVZc
IXBzNR4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:16 2024 by rpki-client on console-fra.rpki-client.org