Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/34352e372e3230302e302f32322d3234203d3e20323636363134.roa
File:                     34352e372e3230302e302f32322d3234203d3e20323636363134.roa (raw, json)
Hash identifier:          ZOMpNQQFAOvKLXhCdW+85iyzxpwZ11NO+4/XyI4bgpw=
Subject key identifier:   0C:B5:32:2B:B1:01:DC:A5:D1:58:48:66:2F:E4:B3:BB:4A:C1:AC:16
Certificate issuer:       /CN=C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498
Certificate serial:       2AAFAB392AC8B0C44D80B61ED44FDD1525F25F8C
Authority key identifier: C7:D8:F4:A5:EC:FE:5B:25:53:F6:AA:F2:A1:04:DD:C9:7F:20:54:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/34352e372e3230302e302f32322d3234203d3e20323636363134.roa
Signing time:             Thu 31 Oct 2024 20:38:59 +0000
ROA not before:           Thu 31 Oct 2024 20:33:59 +0000
ROA not after:            Thu 30 Oct 2025 20:38:59 +0000
asID:                     266614
IP address blocks:        45.7.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl
                          rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:af:ab:39:2a:c8:b0:c4:4d:80:b6:1e:d4:4f:dd:15:25:f2:5f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498
        Validity
            Not Before: Oct 31 20:33:59 2024 GMT
            Not After : Oct 30 20:38:59 2025 GMT
        Subject: CN=0CB5322BB101DCA5D15848662FE4B3BB4AC1AC16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2e:8b:f2:7f:c8:a7:47:69:c3:05:36:76:71:
                    8d:8a:0a:08:4a:0f:67:2e:95:36:78:3e:be:da:bf:
                    40:18:8f:87:dc:c1:67:13:ab:5c:40:46:dd:e6:d2:
                    79:d8:95:43:35:16:ee:d2:60:7a:cd:d7:00:d3:ab:
                    b9:53:99:8a:7f:72:46:ed:96:97:22:a4:fc:f4:83:
                    99:07:67:b6:56:3f:dc:06:d7:1d:a7:31:4c:55:9b:
                    94:e1:8c:14:69:76:7a:c8:94:6f:16:b0:ab:3b:a4:
                    1b:26:63:cd:e6:3b:cb:a1:64:a2:9d:3d:43:43:07:
                    7a:85:09:7f:32:ee:bb:e3:e5:36:8a:0e:0c:15:13:
                    be:86:64:f2:b3:93:8c:36:de:70:51:2c:5d:0f:4f:
                    5b:75:83:3b:85:7a:85:64:d7:6e:91:e1:16:dd:b4:
                    cd:6a:cf:c8:7a:d3:7a:af:26:f6:bd:dd:d2:d5:98:
                    55:42:28:7a:aa:c2:0c:a7:84:e7:b7:a6:48:7e:e9:
                    b8:05:d0:b2:dd:09:20:57:1f:e7:63:fa:87:e6:52:
                    7a:de:cd:0d:fe:d4:42:b9:fe:83:ba:ad:c7:96:07:
                    32:b4:b4:cd:c1:cf:e0:78:03:c6:8e:6f:e6:4c:7c:
                    76:d2:17:70:7e:b7:18:cc:e6:7c:7e:d2:15:62:95:
                    af:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B5:32:2B:B1:01:DC:A5:D1:58:48:66:2F:E4:B3:BB:4A:C1:AC:16
            X509v3 Authority Key Identifier:
                keyid:C7:D8:F4:A5:EC:FE:5B:25:53:F6:AA:F2:A1:04:DD:C9:7F:20:54:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/34352e372e3230302e302f32322d3234203d3e20323636363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:bf:1f:4b:7f:8b:74:64:60:e8:23:98:fb:b3:1f:72:64:4b:
         a2:d6:dd:62:84:ef:77:d5:16:9b:03:59:e2:27:33:ed:75:c9:
         4e:d8:8e:ce:f2:37:32:97:18:23:8a:5e:71:21:1b:26:dd:38:
         6d:75:fc:d8:ea:cb:84:61:14:73:27:d9:42:84:40:e4:4b:a1:
         4c:36:51:51:28:41:52:25:28:d5:c0:e2:b9:d4:32:92:2b:b1:
         ef:4d:fd:88:56:0a:e0:2c:a1:33:7c:01:ef:57:2f:ac:cc:1f:
         02:89:0e:17:da:7a:05:0f:dc:6e:75:cc:4f:9b:25:5a:2d:82:
         01:70:b4:75:47:a5:8d:8d:89:c3:18:49:26:1e:22:5b:e7:a5:
         c8:a0:88:d9:80:53:05:1e:bc:9f:fc:7c:2d:bd:f3:d6:82:be:
         2c:6f:54:19:5f:87:b8:f2:66:86:c6:c9:76:96:e2:88:ff:aa:
         27:54:01:e1:0b:95:d3:62:7d:78:c7:01:ad:54:1a:0c:b7:ff:
         39:e9:42:fc:82:a7:f6:6c:db:29:9e:65:28:5c:ce:30:14:83:
         ab:e7:1d:cf:d6:23:37:17:f7:16:5d:5c:86:73:cd:76:ba:12:
         05:8c:4b:db:45:95:37:4b:dd:3a:ef:e7:d8:3d:4c:a7:f0:a0:
         b7:9a:1b:1e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKq+rOSrIsMRNgLYe1E/dFSXyX4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzdEOEY0QTVFQ0ZFNUIyNTUzRjZBQUYyQTEwNEREQzk3
RjIwNTQ5ODAeFw0yNDEwMzEyMDMzNTlaFw0yNTEwMzAyMDM4NTlaMDMxMTAvBgNV
BAMTKDBDQjUzMjJCQjEwMURDQTVEMTU4NDg2NjJGRTRCM0JCNEFDMUFDMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Lovyf8inR2nDBTZ2cY2KCghK
D2culTZ4Pr7av0AYj4fcwWcTq1xARt3m0nnYlUM1Fu7SYHrN1wDTq7lTmYp/ckbt
lpcipPz0g5kHZ7ZWP9wG1x2nMUxVm5ThjBRpdnrIlG8WsKs7pBsmY83mO8uhZKKd
PUNDB3qFCX8y7rvj5TaKDgwVE76GZPKzk4w23nBRLF0PT1t1gzuFeoVk126R4Rbd
tM1qz8h603qvJva93dLVmFVCKHqqwgynhOe3pkh+6bgF0LLdCSBXH+dj+ofmUnre
zQ3+1EK5/oO6rceWBzK0tM3Bz+B4A8aOb+ZMfHbSF3B+txjM5nx+0hVila9LAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUDLUyK7EB3KXRWEhmL+Szu0rBrBYwHwYDVR0j
BBgwFoAUx9j0pez+WyVT9qryoQTdyX8gVJgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGNaaWNTZ2l2cDRSVlpvVm9yVFNNMW1lcm5Lcll4MVkxOFF5WjlScEtu
MlkvMC9DN0Q4RjRBNUVDRkU1QjI1NTNGNkFBRjJBMTA0RERDOTdGMjA1NDk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3RDhGNEE1RUNGRTVCMjU1
M0Y2QUFGMkExMDREREM5N0YyMDU0OTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhjWmljU2dpdnA0UlZab1ZvclRTTTFtZXJuS3JZeDFZMThReVo5UnBLbjJZLzAv
MzQzNTJlMzcyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM2
MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0HyDANBgkqhkiG9w0BAQsFAAOCAQEAAL8fS3+LdGRg
6COY+7MfcmRLotbdYoTvd9UWmwNZ4icz7XXJTtiOzvI3MpcYI4pecSEbJt04bXX8
2OrLhGEUcyfZQoRA5EuhTDZRUShBUiUo1cDiudQykiux7039iFYK4CyhM3wB71cv
rMwfAokOF9p6BQ/cbnXMT5slWi2CAXC0dUeljY2JwxhJJh4iW+elyKCI2YBTBR68
n/x8Lb3z1oK+LG9UGV+HuPJmhsbJdpbiiP+qJ1QB4QuV02J9eMcBrVQaDLf/OelC
/IKn9mzbKZ5lKFzOMBSDq+cdz9YjNxf3Fl1chnPNdroSBYxL20WVN0vdOu/n2D1M
p/Cgt5obHg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:06 2024 by rpki-client on console-ams.rpki-client.org