Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/34352e372e3139362e302f32322d3232203d3e20323636363038.roa
File:                     34352e372e3139362e302f32322d3232203d3e20323636363038.roa (raw, json)
Hash identifier:          sOiu3xtN3z67BCcBMSQ9mKVLe54hcOR8vXtwokaz8tI=
Subject key identifier:   D2:B1:C6:3E:5C:3B:81:7C:5B:29:E2:EE:96:16:F5:33:AF:BF:8E:2C
Certificate issuer:       /CN=B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A
Certificate serial:       52E42A65A59FBDC5CE83C2CE13F558E6C06811C9
Authority key identifier: B4:07:2D:8F:E8:FD:8E:8E:A5:D4:A2:6B:77:2D:A8:F8:C2:6D:E9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/34352e372e3139362e302f32322d3232203d3e20323636363038.roa
Signing time:             Thu 04 Apr 2024 01:36:26 +0000
ROA not before:           Thu 04 Apr 2024 01:31:26 +0000
ROA not after:            Thu 03 Apr 2025 01:36:26 +0000
asID:                     266608
IP address blocks:        45.7.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.crl
                          rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e4:2a:65:a5:9f:bd:c5:ce:83:c2:ce:13:f5:58:e6:c0:68:11:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A
        Validity
            Not Before: Apr  4 01:31:26 2024 GMT
            Not After : Apr  3 01:36:26 2025 GMT
        Subject: CN=D2B1C63E5C3B817C5B29E2EE9616F533AFBF8E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2c:b5:10:92:7d:b2:fd:0d:6d:0e:b0:2e:2b:
                    9f:a4:f2:ef:3a:20:28:55:99:47:bb:7e:85:5c:e1:
                    7e:fe:39:6a:6a:81:b5:b0:6c:d2:14:d4:15:39:79:
                    aa:f0:cc:a8:4e:5f:e7:66:1c:90:b7:31:07:ee:b4:
                    88:c3:3e:24:c9:4b:6b:e8:bd:6f:1c:d0:d8:2f:03:
                    ef:f8:b7:f3:3b:6a:a5:70:70:47:3c:35:cc:ff:4b:
                    04:40:62:17:cd:a0:7e:24:15:28:ae:c7:f1:5d:da:
                    6a:51:72:b4:ab:17:c4:2f:62:30:6e:bf:6b:71:5a:
                    8d:95:9f:71:36:b5:00:db:fe:a3:23:35:13:87:75:
                    f5:64:3b:a1:61:ad:21:28:5e:83:88:ab:20:64:ab:
                    1a:dc:8b:14:9d:81:75:9e:84:b5:04:d2:20:01:e5:
                    62:f2:04:66:1a:86:c1:c1:7e:2b:f0:0f:93:52:a0:
                    c5:66:4b:07:b2:ea:b7:26:72:a8:34:c1:34:37:37:
                    1d:5a:45:49:c5:fa:9d:20:b6:32:57:63:44:d1:9f:
                    37:73:69:38:2f:4d:5c:b7:0b:5f:00:e9:ed:c5:68:
                    da:57:30:7f:30:21:98:74:2f:5c:b2:65:f9:f2:03:
                    c2:42:fa:11:92:e2:17:e1:4e:a6:9f:72:6d:dc:3d:
                    47:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B1:C6:3E:5C:3B:81:7C:5B:29:E2:EE:96:16:F5:33:AF:BF:8E:2C
            X509v3 Authority Key Identifier:
                keyid:B4:07:2D:8F:E8:FD:8E:8E:A5:D4:A2:6B:77:2D:A8:F8:C2:6D:E9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/34352e372e3139362e302f32322d3232203d3e20323636363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:bf:29:85:8f:5f:89:51:ee:14:ec:14:16:a4:ec:f1:1f:d5:
         a4:4a:05:5c:e8:ca:8f:12:7d:65:be:c9:e8:48:6a:3e:03:57:
         c3:a4:74:54:28:e1:14:d4:29:2e:6f:08:39:e9:a7:8d:f1:4a:
         50:2a:e3:1b:d8:ef:4a:12:46:b8:bf:48:9a:c0:3f:0f:ec:cf:
         6f:3b:b1:4b:32:5c:fc:d2:11:d5:19:fa:52:f9:61:f4:c7:05:
         9e:f2:2c:9e:6d:db:11:c2:d4:9d:d7:e1:03:c6:ed:6c:bd:33:
         77:82:9b:b1:2f:c9:b0:dc:4a:39:03:b5:4e:fc:2d:3d:7d:f0:
         fe:d6:c2:c3:75:00:de:2a:2b:ba:ae:a1:48:6a:01:85:4f:20:
         8f:55:9d:4c:e5:23:48:a8:ba:0e:0e:59:0d:26:4d:50:b8:ff:
         24:32:09:44:f4:6f:3c:e5:0a:5d:7b:0c:ae:db:fe:e0:35:3f:
         75:6b:cc:9c:af:62:01:68:94:42:7a:8a:bf:c9:db:c8:dc:6d:
         79:0d:20:a1:60:dc:f3:1c:80:6a:78:3f:db:03:a9:88:68:10:
         75:cf:1f:35:9d:84:65:d4:40:b7:63:2b:cf:33:39:80:e0:62:
         d5:a8:5a:e5:f9:00:4f:2c:80:1c:42:ad:cf:3b:ac:40:74:bf:
         e5:9e:6c:e0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUUuQqZaWfvcXOg8LOE/VY5sBoEckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQwNzJEOEZFOEZEOEU4RUE1RDRBMjZCNzcyREE4RjhD
MjZERTk3QTAeFw0yNDA0MDQwMTMxMjZaFw0yNTA0MDMwMTM2MjZaMDMxMTAvBgNV
BAMTKEQyQjFDNjNFNUMzQjgxN0M1QjI5RTJFRTk2MTZGNTMzQUZCRjhFMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLLUQkn2y/Q1tDrAuK5+k8u86
IChVmUe7foVc4X7+OWpqgbWwbNIU1BU5earwzKhOX+dmHJC3MQfutIjDPiTJS2vo
vW8c0NgvA+/4t/M7aqVwcEc8Ncz/SwRAYhfNoH4kFSiux/Fd2mpRcrSrF8QvYjBu
v2txWo2Vn3E2tQDb/qMjNROHdfVkO6FhrSEoXoOIqyBkqxrcixSdgXWehLUE0iAB
5WLyBGYahsHBfivwD5NSoMVmSwey6rcmcqg0wTQ3Nx1aRUnF+p0gtjJXY0TRnzdz
aTgvTVy3C18A6e3FaNpXMH8wIZh0L1yyZfnyA8JC+hGS4hfhTqafcm3cPUetAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU0rHGPlw7gXxbKeLulhb1M6+/jiwwHwYDVR0j
BBgwFoAUtActj+j9jo6l1KJrdy2o+MJt6XowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVVqQ293NXAxNXBibXN1aTZRYWY2eEF3d3dyWkxabVc2akNLbW03N3dO
b3EvMS9CNDA3MkQ4RkU4RkQ4RThFQTVENEEyNkI3NzJEQThGOEMyNkRFOTdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0MDcyRDhGRThGRDhFOEVB
NUQ0QTI2Qjc3MkRBOEY4QzI2REU5N0EuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlVakNvdzVwMTVwYm1zdWk2UWFmNnhBd3d3clpMWm1XNmpDS21tNzd3Tm9xLzEv
MzQzNTJlMzcyZTMxMzkzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNjM2
MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0HxDANBgkqhkiG9w0BAQsFAAOCAQEAIL8phY9fiVHu
FOwUFqTs8R/VpEoFXOjKjxJ9Zb7J6EhqPgNXw6R0VCjhFNQpLm8IOemnjfFKUCrj
G9jvShJGuL9ImsA/D+zPbzuxSzJc/NIR1Rn6Uvlh9McFnvIsnm3bEcLUndfhA8bt
bL0zd4KbsS/JsNxKOQO1TvwtPX3w/tbCw3UA3ioruq6hSGoBhU8gj1WdTOUjSKi6
Dg5ZDSZNULj/JDIJRPRvPOUKXXsMrtv+4DU/dWvMnK9iAWiUQnqKv8nbyNxteQ0g
oWDc8xyAang/2wOpiGgQdc8fNZ2EZdRAt2MrzzM5gOBi1aha5fkATyyAHEKtzzus
QHS/5Z5s4A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:33 2024 by rpki-client on console-fra.rpki-client.org