Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32302e302f32322d3232203d3e20323637303931.roa
File:                     34352e3232392e32302e302f32322d3232203d3e20323637303931.roa (raw, json)
Hash identifier:          PmZa6XWW8N0henoxOZeBx1dJrefChIYpP++Fbka1nSU=
Subject key identifier:   E7:46:14:57:46:8C:0A:DF:9B:50:F5:BB:43:AB:88:C1:84:E5:73:70
Certificate issuer:       /CN=E533674BA5C26CC97186C54907220754478B1596
Certificate serial:       2ECB69D69AEB6771AEC1DE55339AF7FCB682F907
Authority key identifier: E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32302e302f32322d3232203d3e20323637303931.roa
Signing time:             Wed 31 Jul 2024 17:44:22 +0000
ROA not before:           Wed 31 Jul 2024 17:39:22 +0000
ROA not after:            Wed 30 Jul 2025 17:44:22 +0000
asID:                     267091
IP address blocks:        45.229.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl
                          rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:cb:69:d6:9a:eb:67:71:ae:c1:de:55:33:9a:f7:fc:b6:82:f9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E533674BA5C26CC97186C54907220754478B1596
        Validity
            Not Before: Jul 31 17:39:22 2024 GMT
            Not After : Jul 30 17:44:22 2025 GMT
        Subject: CN=E7461457468C0ADF9B50F5BB43AB88C184E57370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:de:db:aa:98:73:dc:96:89:42:e7:a6:15:28:
                    16:17:63:83:43:1e:6e:93:d7:88:90:67:d0:80:b3:
                    4f:9d:da:cb:38:b4:ba:aa:78:51:69:b4:91:6f:d2:
                    11:5f:95:4e:c6:d0:ba:6d:8e:ac:09:2b:f8:41:b8:
                    9e:ef:12:a1:a6:c0:ec:84:78:38:e5:71:7b:8a:e1:
                    5e:9c:54:18:07:be:d2:04:00:99:62:45:5d:2f:c6:
                    36:43:cb:29:4e:30:07:53:0e:bf:b8:2a:d3:a8:b3:
                    ea:3f:40:51:2d:9d:3f:79:15:ff:69:63:78:88:6c:
                    c9:15:af:5f:92:0c:71:0b:40:63:8b:61:10:54:db:
                    9f:fd:fd:c2:91:dc:9a:d3:db:1b:9a:94:52:c3:18:
                    b5:08:e6:74:70:dc:66:a0:87:bd:3a:5f:62:c5:e9:
                    84:df:be:56:7f:78:47:c6:ba:ba:e2:fc:2a:b2:05:
                    16:bc:7d:3c:5a:14:2f:dd:ef:e4:ee:1b:e0:5b:18:
                    b5:a0:7e:e9:42:3b:22:27:10:b1:9c:e5:ca:e1:7c:
                    ba:53:e4:60:47:4b:cf:ff:f9:ea:79:bc:92:b3:50:
                    31:4e:23:27:72:37:8a:5c:2c:ab:9b:dd:0c:55:32:
                    28:2d:dc:88:78:ce:fe:eb:a2:06:ba:e1:45:12:60:
                    79:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:46:14:57:46:8C:0A:DF:9B:50:F5:BB:43:AB:88:C1:84:E5:73:70
            X509v3 Authority Key Identifier:
                keyid:E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32302e302f32322d3232203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:cc:1a:b7:6e:31:c7:d6:43:49:4e:3c:f4:3d:27:63:1b:88:
         54:9d:0d:1a:5e:20:6e:ea:a4:87:f6:f8:dc:fd:ec:7e:98:3c:
         e3:8b:ac:2a:f5:74:c2:a6:ae:2d:b6:29:14:a6:04:8a:88:dc:
         ea:ef:e3:89:37:64:3a:58:22:fb:a6:79:63:61:08:5d:b0:6b:
         47:34:73:14:23:7b:a6:c0:ee:2f:a1:c3:85:79:0e:60:9c:cb:
         93:ac:68:d6:bb:63:56:5d:50:81:7f:a4:db:05:fd:ac:bd:06:
         dc:b7:45:78:24:0c:ee:82:a8:17:c2:ac:45:a3:50:20:32:69:
         d3:ae:66:70:07:93:1e:82:75:48:0a:e0:0f:86:da:5c:bb:f5:
         4d:27:6f:16:60:eb:4f:af:e7:ea:2f:24:74:38:79:18:91:be:
         7c:e1:86:d9:a7:3d:d5:14:5c:ac:a5:d7:01:7d:1a:bc:7f:f4:
         fa:b5:17:44:f0:3b:5f:b6:15:ef:9d:46:a7:a2:37:83:16:e4:
         01:bf:ba:cc:aa:ea:ef:01:0c:d6:7a:21:7e:d4:c3:75:c0:4e:
         e8:83:b3:8f:fb:52:91:06:b9:c7:08:c9:28:c4:73:ee:e9:60:
         0f:44:91:61:b4:a9:9f:4c:39:86:c6:09:f4:ae:fb:f6:72:5b:
         10:66:74:12
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULstp1prrZ3Guwd5VM5r3/LaC+QcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUzMzY3NEJBNUMyNkNDOTcxODZDNTQ5MDcyMjA3NTQ0
NzhCMTU5NjAeFw0yNDA3MzExNzM5MjJaFw0yNTA3MzAxNzQ0MjJaMDMxMTAvBgNV
BAMTKEU3NDYxNDU3NDY4QzBBREY5QjUwRjVCQjQzQUI4OEMxODRFNTczNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG3tuqmHPclolC56YVKBYXY4ND
Hm6T14iQZ9CAs0+d2ss4tLqqeFFptJFv0hFflU7G0LptjqwJK/hBuJ7vEqGmwOyE
eDjlcXuK4V6cVBgHvtIEAJliRV0vxjZDyylOMAdTDr+4KtOos+o/QFEtnT95Ff9p
Y3iIbMkVr1+SDHELQGOLYRBU25/9/cKR3JrT2xualFLDGLUI5nRw3Gagh706X2LF
6YTfvlZ/eEfGurri/CqyBRa8fTxaFC/d7+TuG+BbGLWgfulCOyInELGc5crhfLpT
5GBHS8//+ep5vJKzUDFOIydyN4pcLKub3QxVMigt3Ih4zv7roga64UUSYHmPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU50YUV0aMCt+bUPW7Q6uIwYTlc3AwHwYDVR0j
BBgwFoAU5TNnS6XCbMlxhsVJByIHVEeLFZYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGVCd3RQb2VkUGc5Nm5aNW80RmtxcVlwQjlObzhaem43VWVDOVBoOHFk
R1cvMS9FNTMzNjc0QkE1QzI2Q0M5NzE4NkM1NDkwNzIyMDc1NDQ3OEIxNTk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1MzM2NzRCQTVDMjZDQzk3
MTg2QzU0OTA3MjIwNzU0NDc4QjE1OTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhlQnd0UG9lZFBnOTZuWjVvNEZrcXFZcEI5Tm84WnpuN1VlQzlQaDhxZEdXLzEv
MzQzNTJlMzIzMjM5MmUzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3
MzAzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeUUMA0GCSqGSIb3DQEBCwUAA4IBAQC7zBq3bjHH
1kNJTjz0PSdjG4hUnQ0aXiBu6qSH9vjc/ex+mDzji6wq9XTCpq4ttikUpgSKiNzq
7+OJN2Q6WCL7pnljYQhdsGtHNHMUI3umwO4vocOFeQ5gnMuTrGjWu2NWXVCBf6Tb
Bf2svQbct0V4JAzugqgXwqxFo1AgMmnTrmZwB5MegnVICuAPhtpcu/VNJ28WYOtP
r+fqLyR0OHkYkb584YbZpz3VFFyspdcBfRq8f/T6tRdE8DtfthXvnUanojeDFuQB
v7rMqurvAQzWeiF+1MN1wE7og7OP+1KRBrnHCMkoxHPu6WAPRJFhtKmfTDmGxgn0
rvv2clsQZnQS
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:54 2024 by rpki-client on console-fra.rpki-client.org