Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32302e302f32342d3234203d3e20323637303931.roa
File:                     34352e3232392e32302e302f32342d3234203d3e20323637303931.roa (raw, json)
Hash identifier:          G4RWRbFzkiPtRpwuxbHytfYOPuZHnvzajHmAKaSv+pM=
Subject key identifier:   CB:64:33:4E:66:7E:BC:74:D1:C6:89:0C:F5:DA:84:32:25:A4:DF:45
Certificate issuer:       /CN=E533674BA5C26CC97186C54907220754478B1596
Certificate serial:       4985D0109D4CE52AB3C3C113E98ED70E09F3ED88
Authority key identifier: E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32302e302f32342d3234203d3e20323637303931.roa
Signing time:             Wed 31 Jul 2024 17:44:25 +0000
ROA not before:           Wed 31 Jul 2024 17:39:25 +0000
ROA not after:            Wed 30 Jul 2025 17:44:25 +0000
asID:                     267091
IP address blocks:        45.229.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl
                          rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 19:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:85:d0:10:9d:4c:e5:2a:b3:c3:c1:13:e9:8e:d7:0e:09:f3:ed:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E533674BA5C26CC97186C54907220754478B1596
        Validity
            Not Before: Jul 31 17:39:25 2024 GMT
            Not After : Jul 30 17:44:25 2025 GMT
        Subject: CN=CB64334E667EBC74D1C6890CF5DA843225A4DF45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:98:20:a3:81:e0:37:a9:91:c5:6d:2d:c5:
                    da:72:25:08:7a:00:92:0e:3a:c5:21:3c:38:5a:69:
                    ff:17:df:10:78:5f:c6:29:85:06:65:3e:d2:58:50:
                    62:c9:51:83:4f:8d:2b:d8:37:85:0c:de:f9:cf:d4:
                    56:4d:bb:4a:c2:94:a4:a4:55:5b:54:b1:8b:d9:65:
                    4c:19:7b:97:80:86:ba:9e:9e:8a:35:49:a6:1f:77:
                    8c:d8:01:ef:47:63:aa:cf:eb:a9:cd:be:aa:bc:a7:
                    5e:93:05:b0:3d:71:a5:39:f7:7b:46:74:ad:10:84:
                    8d:8c:5a:05:42:5d:99:5e:e6:c9:b2:bb:84:4f:16:
                    6d:6f:67:cb:68:0d:7d:50:46:f8:d5:f0:41:90:dc:
                    58:e7:30:19:dc:af:35:0f:70:bc:8e:38:0c:5d:56:
                    d4:8d:1f:4e:d9:a2:15:ca:46:07:c0:4a:76:5c:84:
                    2e:62:ba:06:94:f0:b6:ed:1a:54:6f:08:2c:06:4c:
                    b1:ed:3a:42:f6:eb:a6:8e:a1:8d:5b:c4:2a:e9:1d:
                    1e:b7:7d:9e:b0:ed:a3:3e:11:76:de:b7:8a:a5:d5:
                    7f:53:6e:97:f2:7f:62:8d:27:90:68:0f:71:cb:bf:
                    ff:21:49:b7:a3:8a:4b:46:4d:ab:48:e9:83:01:29:
                    42:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:64:33:4E:66:7E:BC:74:D1:C6:89:0C:F5:DA:84:32:25:A4:DF:45
            X509v3 Authority Key Identifier:
                keyid:E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32302e302f32342d3234203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:f4:f5:7f:36:20:62:a7:45:9d:b9:1d:bc:bf:6f:c5:35:3d:
         18:42:67:54:d6:28:c9:f3:0b:a4:75:68:a0:43:2c:c9:57:ad:
         5b:9b:8e:6d:db:31:0e:69:64:44:91:b1:b6:e8:ac:bf:f6:c6:
         10:c9:00:94:6d:4d:9a:11:65:83:7a:aa:65:9b:9a:25:d7:47:
         02:7e:20:9d:9f:2c:37:79:d1:d5:79:28:ec:c6:ff:c5:80:b6:
         32:17:b8:d4:a9:07:69:b1:aa:7d:98:7d:3c:60:29:40:63:ca:
         45:05:6f:e1:6e:7c:c3:3a:f7:6d:ef:a3:bf:e3:47:1d:43:b6:
         6b:01:78:54:9a:2b:1b:a7:41:ac:33:e6:92:c9:69:a6:52:64:
         4a:f0:77:7e:f2:87:2c:66:0e:8b:44:ce:5c:15:f3:e1:d2:d5:
         61:61:f2:e3:0d:cc:b6:81:26:5a:d7:c4:a2:bb:3b:8e:16:f7:
         a4:e6:83:10:d5:17:9c:4b:44:9c:19:f9:85:82:26:4c:f8:9f:
         01:1d:27:9b:6c:27:ba:5f:d9:93:d1:29:cd:84:ec:a3:b5:32:
         ff:83:29:29:fe:cb:7f:14:01:b1:e1:dc:57:fb:b8:2d:53:26:
         24:92:4d:82:b8:29:45:d9:ad:31:0d:b9:a4:4b:7a:2b:05:ad:
         42:98:b8:75
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSYXQEJ1M5Sqzw8ET6Y7XDgnz7YgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUzMzY3NEJBNUMyNkNDOTcxODZDNTQ5MDcyMjA3NTQ0
NzhCMTU5NjAeFw0yNDA3MzExNzM5MjVaFw0yNTA3MzAxNzQ0MjVaMDMxMTAvBgNV
BAMTKENCNjQzMzRFNjY3RUJDNzREMUM2ODkwQ0Y1REE4NDMyMjVBNERGNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh8Jggo4HgN6mRxW0txdpyJQh6
AJIOOsUhPDhaaf8X3xB4X8YphQZlPtJYUGLJUYNPjSvYN4UM3vnP1FZNu0rClKSk
VVtUsYvZZUwZe5eAhrqenoo1SaYfd4zYAe9HY6rP66nNvqq8p16TBbA9caU593tG
dK0QhI2MWgVCXZle5smyu4RPFm1vZ8toDX1QRvjV8EGQ3FjnMBncrzUPcLyOOAxd
VtSNH07ZohXKRgfASnZchC5iugaU8LbtGlRvCCwGTLHtOkL266aOoY1bxCrpHR63
fZ6w7aM+EXbet4ql1X9Tbpfyf2KNJ5BoD3HLv/8hSbejiktGTatI6YMBKUKvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUy2QzTmZ+vHTRxokM9dqEMiWk30UwHwYDVR0j
BBgwFoAU5TNnS6XCbMlxhsVJByIHVEeLFZYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGVCd3RQb2VkUGc5Nm5aNW80RmtxcVlwQjlObzhaem43VWVDOVBoOHFk
R1cvMS9FNTMzNjc0QkE1QzI2Q0M5NzE4NkM1NDkwNzIyMDc1NDQ3OEIxNTk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1MzM2NzRCQTVDMjZDQzk3
MTg2QzU0OTA3MjIwNzU0NDc4QjE1OTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhlQnd0UG9lZFBnOTZuWjVvNEZrcXFZcEI5Tm84WnpuN1VlQzlQaDhxZEdXLzEv
MzQzNTJlMzIzMjM5MmUzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzAzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeUUMA0GCSqGSIb3DQEBCwUAA4IBAQAc9PV/NiBi
p0WduR28v2/FNT0YQmdU1ijJ8wukdWigQyzJV61bm45t2zEOaWREkbG26Ky/9sYQ
yQCUbU2aEWWDeqplm5ol10cCfiCdnyw3edHVeSjsxv/FgLYyF7jUqQdpsap9mH08
YClAY8pFBW/hbnzDOvdt76O/40cdQ7ZrAXhUmisbp0GsM+aSyWmmUmRK8Hd+8ocs
Zg6LRM5cFfPh0tVhYfLjDcy2gSZa18SiuzuOFvek5oMQ1RecS0ScGfmFgiZM+J8B
HSebbCe6X9mT0SnNhOyjtTL/gykp/st/FAGx4dxX+7gtUyYkkk2CuClF2a0xDbmk
S3orBa1CmLh1
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:09 2025 by rpki-client