Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/1/34352e362e36342e302f32322d3234203d3e20323636313333.roa
File:                     34352e362e36342e302f32322d3234203d3e20323636313333.roa (raw, json)
Hash identifier:          7TkIS2yAegsTgPcdHo4XTMKfGFAs34p+qh8z606BMlM=
Subject key identifier:   ED:95:4A:7A:62:8F:AE:D3:C3:F3:44:92:F7:FF:F3:C5:4E:EB:C9:92
Certificate issuer:       /CN=E2DD7F71F2616B50D18488FA622A57D4C8428DF8
Certificate serial:       7D927B3AF519B6449293E52A98ED281C2A1B2B8E
Authority key identifier: E2:DD:7F:71:F2:61:6B:50:D1:84:88:FA:62:2A:57:D4:C8:42:8D:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2DD7F71F2616B50D18488FA622A57D4C8428DF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/1/34352e362e36342e302f32322d3234203d3e20323636313333.roa
Signing time:             Wed 03 Apr 2024 23:48:13 +0000
ROA not before:           Wed 03 Apr 2024 23:43:13 +0000
ROA not after:            Wed 02 Apr 2025 23:48:13 +0000
asID:                     266133
IP address blocks:        45.6.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/1/E2DD7F71F2616B50D18488FA622A57D4C8428DF8.crl
                          rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/1/E2DD7F71F2616B50D18488FA622A57D4C8428DF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2DD7F71F2616B50D18488FA622A57D4C8428DF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 19:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:92:7b:3a:f5:19:b6:44:92:93:e5:2a:98:ed:28:1c:2a:1b:2b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2DD7F71F2616B50D18488FA622A57D4C8428DF8
        Validity
            Not Before: Apr  3 23:43:13 2024 GMT
            Not After : Apr  2 23:48:13 2025 GMT
        Subject: CN=ED954A7A628FAED3C3F34492F7FFF3C54EEBC992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e6:1c:37:ae:98:de:fe:68:b0:2e:b5:fd:6c:
                    61:2e:f4:f8:80:40:89:87:8c:b1:2a:9e:4d:0b:af:
                    24:96:65:ea:f8:c0:9b:5d:4f:75:93:2f:80:01:eb:
                    26:51:d5:c3:bc:44:27:de:35:52:69:ab:74:dc:67:
                    e7:78:82:07:45:ed:68:cc:9f:e0:ee:69:bf:ed:1f:
                    ee:67:d0:94:37:82:a0:c0:91:fb:05:27:ab:ef:33:
                    63:22:82:75:65:5b:6a:6a:8f:91:93:a1:df:99:f7:
                    7a:04:b6:8b:cc:65:2f:05:e8:5b:4f:9a:18:24:e6:
                    22:2b:ed:55:98:4e:90:3b:27:d1:94:9d:b6:15:94:
                    ce:c1:7d:79:e4:e6:b2:53:1a:da:61:72:3c:66:00:
                    30:f8:33:63:23:f3:25:78:aa:e5:8e:8d:c8:78:06:
                    a5:34:45:e7:ea:d4:d7:94:3d:2a:b7:54:e1:45:2e:
                    df:78:f4:96:ec:cd:f4:fe:6b:87:46:9e:64:c0:ee:
                    83:1e:75:30:3a:f8:3f:e3:ad:9c:ce:6e:d8:d1:e2:
                    44:7b:f6:a0:7b:18:db:4a:d5:3d:73:86:5b:ed:a4:
                    5b:f9:1e:ce:28:e6:e8:94:c8:bd:14:cf:25:f7:1c:
                    2c:5e:17:4c:4c:50:5e:d6:e8:4f:d3:2c:5b:c9:80:
                    74:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:95:4A:7A:62:8F:AE:D3:C3:F3:44:92:F7:FF:F3:C5:4E:EB:C9:92
            X509v3 Authority Key Identifier:
                keyid:E2:DD:7F:71:F2:61:6B:50:D1:84:88:FA:62:2A:57:D4:C8:42:8D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/1/E2DD7F71F2616B50D18488FA622A57D4C8428DF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2DD7F71F2616B50D18488FA622A57D4C8428DF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/1/34352e362e36342e302f32322d3234203d3e20323636313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:c5:55:42:8d:49:1e:2c:4e:97:5f:52:3c:4c:bd:8c:e4:67:
         ed:f7:f5:e0:e7:6e:3a:2d:d8:d2:20:fa:09:4a:44:a5:dd:be:
         fc:fb:50:80:de:ba:c2:54:4a:c6:13:8f:5c:ab:4f:a9:35:68:
         92:8f:39:7a:76:0d:9f:9d:84:a2:bf:03:58:b6:c0:a4:28:f2:
         4d:c6:ff:da:44:ba:a4:ae:95:73:3b:08:2a:79:93:0b:42:55:
         ec:a6:fc:9a:95:1b:d7:ec:01:37:22:a0:81:2b:23:24:d1:65:
         0f:ea:e4:24:5b:3d:46:05:a2:38:08:49:91:9f:1e:16:9b:67:
         82:10:01:6b:6d:95:5e:7b:d2:41:ac:6c:a9:91:23:77:d1:1c:
         34:27:cb:7f:3d:0f:63:57:e7:60:cf:88:19:de:22:fe:82:4f:
         75:4a:95:27:6a:9a:89:3b:bd:27:67:b8:91:8a:80:06:05:a0:
         11:3a:0e:e2:40:04:c6:ef:ac:e0:68:13:dd:d0:06:e2:f3:f8:
         9c:70:0c:9b:86:ed:67:74:cf:d8:07:e9:ca:00:7f:2f:77:30:
         42:e6:0f:fe:db:68:1d:59:f5:8f:47:a8:aa:af:33:26:59:6a:
         37:a3:23:fe:92:12:5c:da:91:a6:45:48:be:26:2f:63:d8:46:
         fa:25:36:b7
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUfZJ7OvUZtkSSk+UqmO0oHCobK44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJERDdGNzFGMjYxNkI1MEQxODQ4OEZBNjIyQTU3RDRD
ODQyOERGODAeFw0yNDA0MDMyMzQzMTNaFw0yNTA0MDIyMzQ4MTNaMDMxMTAvBgNV
BAMTKEVEOTU0QTdBNjI4RkFFRDNDM0YzNDQ5MkY3RkZGM0M1NEVFQkM5OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5hw3rpje/miwLrX9bGEu9PiA
QImHjLEqnk0LrySWZer4wJtdT3WTL4AB6yZR1cO8RCfeNVJpq3TcZ+d4ggdF7WjM
n+Duab/tH+5n0JQ3gqDAkfsFJ6vvM2MignVlW2pqj5GTod+Z93oEtovMZS8F6FtP
mhgk5iIr7VWYTpA7J9GUnbYVlM7BfXnk5rJTGtphcjxmADD4M2Mj8yV4quWOjch4
BqU0Refq1NeUPSq3VOFFLt949JbszfT+a4dGnmTA7oMedTA6+D/jrZzObtjR4kR7
9qB7GNtK1T1zhlvtpFv5Hs4o5uiUyL0UzyX3HCxeF0xMUF7W6E/TLFvJgHS9AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU7ZVKemKPrtPD80SS9//zxU7ryZIwHwYDVR0j
BBgwFoAU4t1/cfJha1DRhIj6YipX1MhCjfgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2FZVjc0eVhxN3J5N3BEZ3RYMVd5Y3FwUFNIRWtvSzJ1V1JZWTZHZDIx
VGMvMS9FMkREN0Y3MUYyNjE2QjUwRDE4NDg4RkE2MjJBNTdENEM4NDI4REY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyREQ3RjcxRjI2MTZCNTBE
MTg0ODhGQTYyMkE1N0Q0Qzg0MjhERjguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdhWVY3NHlYcTdyeTdwRGd0WDFXeWNxcFBTSEVrb0sydVdSWVk2R2QyMVRjLzEv
MzQzNTJlMzYyZTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzMTMz
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBkAwDQYJKoZIhvcNAQELBQADggEBAJPFVUKNSR4sTpdf
UjxMvYzkZ+339eDnbjot2NIg+glKRKXdvvz7UIDeusJUSsYTj1yrT6k1aJKPOXp2
DZ+dhKK/A1i2wKQo8k3G/9pEuqSulXM7CCp5kwtCVeym/JqVG9fsATcioIErIyTR
ZQ/q5CRbPUYFojgISZGfHhabZ4IQAWttlV570kGsbKmRI3fRHDQny389D2NX52DP
iBneIv6CT3VKlSdqmok7vSdnuJGKgAYFoBE6DuJABMbvrOBoE93QBuLz+JxwDJuG
7Wd0z9gH6coAfy93MELmD/7baB1Z9Y9HqKqvMyZZajejI/6SElzakaZFSL4mL2PY
RvolNrc=
-----END CERTIFICATE-----
Generated at Fri Sep 27 21:11:02 2024 by rpki-client on console-ams.rpki-client.org