Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/34352e37302e3233322e302f32322d3234203d3e20323632323732.roa
File:                     34352e37302e3233322e302f32322d3234203d3e20323632323732.roa (raw, json)
Hash identifier:          Shfo8qx8g9K86TTznvyaG8rLsILeUcMdI5NrPXTy5YQ=
Subject key identifier:   BA:D5:CA:27:89:FC:D4:6B:C7:64:87:A1:C9:74:C3:D4:70:EB:85:85
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       05B05C7294258D0E7BE13BD1CABF67AA567F6932
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/34352e37302e3233322e302f32322d3234203d3e20323632323732.roa
Signing time:             Mon 25 Nov 2024 17:04:13 +0000
ROA not before:           Mon 25 Nov 2024 16:59:13 +0000
ROA not after:            Mon 24 Nov 2025 17:04:13 +0000
asID:                     262272
IP address blocks:        45.70.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b0:5c:72:94:25:8d:0e:7b:e1:3b:d1:ca:bf:67:aa:56:7f:69:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:13 2024 GMT
            Not After : Nov 24 17:04:13 2025 GMT
        Subject: CN=BAD5CA2789FCD46BC76487A1C974C3D470EB8585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e2:29:06:e2:97:e7:ac:5f:98:fb:59:55:70:
                    7b:40:bf:ff:b7:a3:ed:21:7a:8c:85:f5:fb:23:19:
                    a2:dc:ba:bd:9c:2c:47:6f:c4:0c:f8:3b:0e:73:db:
                    9d:b6:89:e5:3e:5f:4c:05:16:cd:fc:f5:0c:58:dd:
                    63:9c:e1:1c:84:bc:10:3e:9f:78:34:ec:f7:9a:90:
                    bd:68:11:8a:a5:5e:30:89:8a:b8:ff:cd:a9:05:e2:
                    41:96:19:46:fd:89:ca:94:c4:bb:3c:d2:75:91:dc:
                    31:f5:d8:8c:db:ce:61:78:75:43:b2:64:9d:06:f9:
                    4e:54:39:93:c5:57:8d:12:6e:3b:c7:31:ce:c1:0d:
                    bf:72:8f:7c:73:2c:2e:59:63:bc:ea:5a:42:6b:0b:
                    28:6a:93:19:a9:27:80:ba:4d:2b:9b:3e:66:30:f7:
                    65:06:04:38:3f:73:24:ed:67:82:6f:1f:71:13:5b:
                    36:03:b2:a6:2e:7f:35:3c:4c:c8:3f:84:9e:79:83:
                    1d:4d:76:fa:99:07:02:f4:be:77:d6:3c:cf:a1:bf:
                    14:40:4c:5d:2b:be:1a:39:61:4c:7f:67:4c:16:c2:
                    61:b3:1d:c0:5d:46:b9:5a:15:2d:96:98:10:f2:73:
                    fc:4e:b5:cf:03:39:50:5a:7f:e9:f4:3c:13:7f:2c:
                    48:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D5:CA:27:89:FC:D4:6B:C7:64:87:A1:C9:74:C3:D4:70:EB:85:85
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/34352e37302e3233322e302f32322d3234203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:03:19:22:e8:d1:e9:1b:73:e4:32:7d:aa:15:b6:23:38:49:
         61:b7:e6:79:7a:0a:f9:ae:94:aa:99:e3:2d:78:34:6c:6b:dd:
         f4:85:e7:9c:d0:df:ff:a1:da:68:3b:40:81:99:50:81:e7:c3:
         49:f9:2f:81:35:64:ad:43:53:fe:cc:21:73:de:15:1e:07:bb:
         03:b6:9a:01:0b:02:e8:d3:c2:1e:ab:be:f7:39:3a:ae:9c:4d:
         1c:df:c7:b7:91:69:0d:e9:84:4f:72:26:f7:b5:51:49:5c:b1:
         41:11:2a:23:0d:82:de:d7:46:43:2f:d1:86:c7:53:81:24:3c:
         29:cf:dc:c4:d2:29:d3:5c:ff:ec:2d:fe:95:6c:ac:f6:0a:36:
         c9:93:30:98:2d:92:01:cc:3a:90:0f:f4:90:90:41:00:c5:3f:
         eb:05:fe:94:4d:09:b2:91:52:19:2e:29:74:41:29:e1:f8:f7:
         8f:52:f5:7b:2c:bd:06:83:8f:5d:22:11:71:16:f4:a6:ae:93:
         2e:16:d1:62:f1:cb:b5:0e:8d:d8:1e:14:33:bc:0b:64:6b:48:
         36:f9:fc:6f:e5:d1:a2:72:01:dc:86:7e:20:60:5d:b8:24:a1:
         bb:25:33:de:20:c7:f6:fa:5d:05:63:33:fd:0b:0a:3d:85:26:
         d6:65:2e:83
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBbBccpQljQ574TvRyr9nqlZ/aTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0MTM5MjcwMDFFMjlGNEQxOEEwQzBGQ0UxQzQ2Nzky
NEVBMUI2QjAeFw0yNDExMjUxNjU5MTNaFw0yNTExMjQxNzA0MTNaMDMxMTAvBgNV
BAMTKEJBRDVDQTI3ODlGQ0Q0NkJDNzY0ODdBMUM5NzRDM0Q0NzBFQjg1ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO4ikG4pfnrF+Y+1lVcHtAv/+3
o+0heoyF9fsjGaLcur2cLEdvxAz4Ow5z2522ieU+X0wFFs389QxY3WOc4RyEvBA+
n3g07PeakL1oEYqlXjCJirj/zakF4kGWGUb9icqUxLs80nWR3DH12IzbzmF4dUOy
ZJ0G+U5UOZPFV40SbjvHMc7BDb9yj3xzLC5ZY7zqWkJrCyhqkxmpJ4C6TSubPmYw
92UGBDg/cyTtZ4JvH3ETWzYDsqYufzU8TMg/hJ55gx1NdvqZBwL0vnfWPM+hvxRA
TF0rvho5YUx/Z0wWwmGzHcBdRrlaFS2WmBDyc/xOtc8DOVBaf+n0PBN/LEh5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUutXKJ4n81GvHZIehyXTD1HDrhYUwHwYDVR0j
BBgwFoAUukE5JwAeKfTRigwPzhxGeSTqG2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMy9CQTQxMzkyNzAwMUUyOUY0RDE4QTBDMEZDRTFDNDY3OTI0RUExQjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNDEzOTI3MDAxRTI5RjRE
MThBMEMwRkNFMUM0Njc5MjRFQTFCNkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzMv
MzQzNTJlMzczMDJlMzIzMzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzIzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUboMA0GCSqGSIb3DQEBCwUAA4IBAQC1Axki6NHp
G3PkMn2qFbYjOElht+Z5egr5rpSqmeMteDRsa930heec0N//odpoO0CBmVCB58NJ
+S+BNWStQ1P+zCFz3hUeB7sDtpoBCwLo08Ieq773OTqunE0c38e3kWkN6YRPcib3
tVFJXLFBESojDYLe10ZDL9GGx1OBJDwpz9zE0inTXP/sLf6VbKz2CjbJkzCYLZIB
zDqQD/SQkEEAxT/rBf6UTQmykVIZLil0QSnh+PePUvV7LL0Gg49dIhFxFvSmrpMu
FtFi8cu1Do3YHhQzvAtka0g2+fxv5dGicgHchn4gYF24JKG7JTPeIMf2+l0FYzP9
Cwo9hSbWZS6D
-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org