Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/34352e3138382e3232342e302f32322d3332203d3e20323633303437.roa
File:                     34352e3138382e3232342e302f32322d3332203d3e20323633303437.roa (raw, json)
Hash identifier:          KP4szRjn6mw2M6714lGlTtsIPclNYGlxyguDdweLxnc=
Subject key identifier:   3C:24:07:14:E9:65:F1:67:04:1C:78:E9:4A:F4:F7:9C:B0:91:DF:30
Certificate issuer:       /CN=4E335352EA63CE855FDA3B777EA08D10359B7B71
Certificate serial:       14A5793F6D6A5922AB9CF520E9720C56F52B7566
Authority key identifier: 4E:33:53:52:EA:63:CE:85:5F:DA:3B:77:7E:A0:8D:10:35:9B:7B:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/34352e3138382e3232342e302f32322d3332203d3e20323633303437.roa
Signing time:             Thu 04 Apr 2024 18:15:45 +0000
ROA not before:           Thu 04 Apr 2024 18:10:45 +0000
ROA not after:            Thu 03 Apr 2025 18:15:45 +0000
asID:                     263047
IP address blocks:        45.188.224.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.crl
                          rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a5:79:3f:6d:6a:59:22:ab:9c:f5:20:e9:72:0c:56:f5:2b:75:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E335352EA63CE855FDA3B777EA08D10359B7B71
        Validity
            Not Before: Apr  4 18:10:45 2024 GMT
            Not After : Apr  3 18:15:45 2025 GMT
        Subject: CN=3C240714E965F167041C78E94AF4F79CB091DF30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8a:66:85:29:19:fb:05:26:2f:70:39:c3:34:
                    ab:c7:e4:db:dc:d1:44:4c:31:32:b5:7f:84:b9:3c:
                    67:67:83:4f:82:81:8e:a0:7e:3e:dc:c7:9f:3a:21:
                    eb:ae:d1:9c:fc:d5:70:5a:ee:73:45:5d:45:a6:79:
                    fa:c5:78:7c:23:c3:e0:2f:a7:4a:a8:c8:e8:f1:47:
                    f1:29:95:50:17:6d:fd:2a:16:92:70:e9:e8:59:56:
                    c4:27:30:91:a8:ea:f8:15:0c:03:3f:e9:7c:2b:a5:
                    05:da:ec:9a:d2:7f:37:79:89:29:73:5c:6e:b8:5c:
                    3f:ca:e9:8a:db:7a:0d:47:2e:fd:e7:10:29:00:b9:
                    f7:bf:34:11:4d:20:5b:33:4e:fe:21:08:c9:37:22:
                    76:42:55:04:9d:40:eb:21:2c:80:64:f4:55:f6:a7:
                    09:ab:5e:6d:61:a3:19:54:47:05:69:b6:07:86:08:
                    7f:ca:31:3a:b9:74:f3:43:9b:99:ce:a5:26:14:33:
                    87:9b:1d:85:a0:5f:5c:80:a6:5d:61:4e:7a:a7:a0:
                    a3:e3:82:08:8c:59:97:7c:17:7a:b5:37:96:7a:db:
                    81:02:75:c1:96:9a:be:cd:51:8d:8a:57:8f:93:12:
                    eb:24:5c:fb:3e:a4:b6:e0:e4:81:80:24:8c:0f:24:
                    32:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:24:07:14:E9:65:F1:67:04:1C:78:E9:4A:F4:F7:9C:B0:91:DF:30
            X509v3 Authority Key Identifier:
                keyid:4E:33:53:52:EA:63:CE:85:5F:DA:3B:77:7E:A0:8D:10:35:9B:7B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/34352e3138382e3232342e302f32322d3332203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:07:5f:0f:32:1c:29:ac:83:37:5c:8a:1f:6d:ae:05:b2:31:
         50:82:a9:08:40:c0:76:c4:36:16:bc:cf:e9:d7:91:32:77:23:
         83:33:b6:60:1a:bc:de:f8:51:4a:dc:0d:f1:c3:a9:fd:7b:1d:
         80:f8:99:d2:02:35:25:2f:ea:72:2d:f6:29:00:da:04:13:e5:
         00:31:8d:c8:a2:88:49:f1:eb:e2:28:37:26:dd:7e:c1:96:07:
         fc:9f:3a:b0:f4:ca:25:ab:1a:71:53:c1:67:12:59:2b:ee:43:
         1e:0e:b7:56:51:75:fc:74:e6:c5:16:ee:2b:3f:1c:36:a5:1f:
         f3:71:91:66:c5:c5:b0:50:bb:c7:9d:67:b9:b3:bf:45:5b:7e:
         04:3a:80:49:8c:17:22:42:56:cf:7f:69:b0:f7:b7:21:7a:6e:
         ce:09:6b:8d:4a:1f:21:03:ed:74:a1:b4:d7:14:59:76:cc:5a:
         f3:6a:ad:be:41:ed:c2:ed:24:bb:3a:66:32:1d:1e:7e:f0:b2:
         6a:38:92:0c:56:69:b6:73:8e:eb:4e:b1:dd:4a:c0:a6:0c:97:
         4c:35:c7:c4:3d:b8:13:48:02:e9:5a:d5:a5:75:f2:0f:6f:9a:
         31:f0:14:54:af:74:81:11:f7:a9:81:79:e1:0f:c0:aa:25:76:
         43:76:ad:01
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFKV5P21qWSKrnPUg6XIMVvUrdWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEUzMzUzNTJFQTYzQ0U4NTVGREEzQjc3N0VBMDhEMTAz
NTlCN0I3MTAeFw0yNDA0MDQxODEwNDVaFw0yNTA0MDMxODE1NDVaMDMxMTAvBgNV
BAMTKDNDMjQwNzE0RTk2NUYxNjcwNDFDNzhFOTRBRjRGNzlDQjA5MURGMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUimaFKRn7BSYvcDnDNKvH5Nvc
0URMMTK1f4S5PGdng0+CgY6gfj7cx586Ieuu0Zz81XBa7nNFXUWmefrFeHwjw+Av
p0qoyOjxR/EplVAXbf0qFpJw6ehZVsQnMJGo6vgVDAM/6XwrpQXa7JrSfzd5iSlz
XG64XD/K6Yrbeg1HLv3nECkAufe/NBFNIFszTv4hCMk3InZCVQSdQOshLIBk9FX2
pwmrXm1hoxlURwVptgeGCH/KMTq5dPNDm5nOpSYUM4ebHYWgX1yApl1hTnqnoKPj
ggiMWZd8F3q1N5Z624ECdcGWmr7NUY2KV4+TEuskXPs+pLbg5IGAJIwPJDLNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPCQHFOll8WcEHHjpSvT3nLCR3zAwHwYDVR0j
BBgwFoAUTjNTUupjzoVf2jt3fqCNEDWbe3EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlnYjc5RGhZMW95QW1zSFkzUXdpa2tuUUVCV2pDMUpXd3R0THhCRVM2
enUvMS80RTMzNTM1MkVBNjNDRTg1NUZEQTNCNzc3RUEwOEQxMDM1OUI3QjcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFMzM1MzUyRUE2M0NFODU1
RkRBM0I3NzdFQTA4RDEwMzU5QjdCNzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5Z2I3OURoWTFveUFtc0hZM1F3aWtrblFFQldqQzFKV3d0dEx4QkVTNnp1LzEv
MzQzNTJlMzEzODM4MmUzMjMyMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzMzMDM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItvOAwDQYJKoZIhvcNAQELBQADggEBAFoHXw8y
HCmsgzdcih9trgWyMVCCqQhAwHbENha8z+nXkTJ3I4MztmAavN74UUrcDfHDqf17
HYD4mdICNSUv6nIt9ikA2gQT5QAxjciiiEnx6+IoNybdfsGWB/yfOrD0yiWrGnFT
wWcSWSvuQx4Ot1ZRdfx05sUW7is/HDalH/NxkWbFxbBQu8edZ7mzv0VbfgQ6gEmM
FyJCVs9/abD3tyF6bs4Ja41KHyED7XShtNcUWXbMWvNqrb5B7cLtJLs6ZjIdHn7w
smo4kgxWabZzjutOsd1KwKYMl0w1x8Q9uBNIAula1aV18g9vmjHwFFSvdIER96mB
eeEPwKoldkN2rQE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:16 2024 by rpki-client on console-fra.rpki-client.org