Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/1/34352e3137392e3235322e302f32342d3234203d3e20323733363634.roa
File:                     34352e3137392e3235322e302f32342d3234203d3e20323733363634.roa (raw, json)
Hash identifier:          UY7kpzvdoK5H+WyCZrLln0VhrsWyBtq+0d9/X2KoVaM=
Subject key identifier:   BA:1F:79:ED:E8:87:FC:A0:95:2E:E4:BC:A0:BE:0B:8F:B6:33:B9:D8
Certificate issuer:       /CN=0828022EEE25F9CBEBDFA747163E4895F108A427
Certificate serial:       27BC77F9E97D2632F26A8B5D02921952752A9BFC
Authority key identifier: 08:28:02:2E:EE:25:F9:CB:EB:DF:A7:47:16:3E:48:95:F1:08:A4:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0828022EEE25F9CBEBDFA747163E4895F108A427.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/1/34352e3137392e3235322e302f32342d3234203d3e20323733363634.roa
Signing time:             Thu 04 Apr 2024 16:43:19 +0000
ROA not before:           Thu 04 Apr 2024 16:38:19 +0000
ROA not after:            Thu 03 Apr 2025 16:43:19 +0000
asID:                     273664
IP address blocks:        45.179.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/1/0828022EEE25F9CBEBDFA747163E4895F108A427.crl
                          rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/1/0828022EEE25F9CBEBDFA747163E4895F108A427.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0828022EEE25F9CBEBDFA747163E4895F108A427.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bc:77:f9:e9:7d:26:32:f2:6a:8b:5d:02:92:19:52:75:2a:9b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0828022EEE25F9CBEBDFA747163E4895F108A427
        Validity
            Not Before: Apr  4 16:38:19 2024 GMT
            Not After : Apr  3 16:43:19 2025 GMT
        Subject: CN=BA1F79EDE887FCA0952EE4BCA0BE0B8FB633B9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a4:2a:de:a0:a4:12:d3:36:91:f7:07:25:56:
                    93:51:83:36:2c:4f:75:a0:f5:4f:77:f1:ea:79:0b:
                    cf:46:7f:a6:22:29:1c:f9:45:2e:14:d0:c2:8a:e1:
                    24:d2:31:6a:0a:f9:6f:d6:1f:a9:fa:b4:be:89:43:
                    5c:2b:cf:54:16:29:8d:dd:12:dd:93:04:5b:7b:19:
                    b4:8f:e5:79:e3:0a:d2:b2:00:c0:5e:c5:b3:0c:e7:
                    95:31:45:80:e1:fa:3c:a5:55:d7:7a:83:cc:e3:d7:
                    96:fa:35:66:d2:22:9d:20:ec:13:b8:e0:8a:7d:72:
                    1c:ab:07:43:38:fd:eb:11:6b:11:cf:4b:46:b5:1c:
                    2b:0b:00:ae:e4:9a:73:39:34:0c:c7:b5:6a:49:04:
                    50:78:fb:40:ba:ec:89:9a:14:23:db:0c:8f:5d:0e:
                    d0:45:90:35:19:35:9f:11:3a:7f:d6:12:1b:83:e2:
                    67:11:93:83:69:6c:da:1e:b8:ae:9a:8f:1a:a4:2f:
                    4c:c9:22:78:42:ea:a8:1b:be:d1:15:c7:b2:8e:0d:
                    c2:f3:44:23:a7:5c:1e:63:5e:b8:0a:1e:f3:93:35:
                    0d:96:25:1f:8e:88:57:4d:67:c6:f0:38:a4:2a:c2:
                    c9:6d:8f:7c:a7:44:5f:8b:1f:d4:d3:aa:dc:49:87:
                    05:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1F:79:ED:E8:87:FC:A0:95:2E:E4:BC:A0:BE:0B:8F:B6:33:B9:D8
            X509v3 Authority Key Identifier:
                keyid:08:28:02:2E:EE:25:F9:CB:EB:DF:A7:47:16:3E:48:95:F1:08:A4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/1/0828022EEE25F9CBEBDFA747163E4895F108A427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0828022EEE25F9CBEBDFA747163E4895F108A427.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/1/34352e3137392e3235322e302f32342d3234203d3e20323733363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:63:b7:8a:3f:6f:31:57:85:83:52:11:b0:4d:25:f8:a9:b9:
         ef:7f:36:84:2f:35:21:bb:24:72:de:b6:51:83:e8:4e:6b:02:
         af:26:e4:eb:eb:4f:b6:26:7b:28:94:f4:c4:82:44:33:c4:40:
         01:ee:f2:38:1a:f1:38:ef:47:55:83:04:7d:02:0c:c4:a2:5f:
         70:eb:91:d5:31:1e:fa:f3:b5:c0:d8:e2:6f:36:24:3a:0b:13:
         9d:3d:0f:d1:8e:0d:27:8e:c3:b9:37:1a:b4:e7:7e:24:66:7e:
         e3:c4:76:ab:0a:b0:46:dc:dc:2c:dd:74:9f:1e:77:27:17:7e:
         11:1a:0d:6e:b8:4f:7d:35:d6:33:97:43:3d:c4:7d:df:05:83:
         b5:07:38:87:f4:0a:28:0e:32:b5:cf:65:e8:23:09:41:69:b5:
         99:d9:47:1d:4d:30:12:05:6b:8c:b7:e3:e9:76:a6:a6:67:95:
         86:67:3d:6a:49:3a:4f:6a:dd:75:e6:91:fc:03:18:02:14:48:
         c2:1d:33:05:07:bf:62:d3:1c:db:fc:75:89:78:22:0a:34:6c:
         ec:84:16:48:63:50:6a:60:67:4e:65:8b:cb:57:2a:24:37:a2:
         e9:ae:af:b9:df:29:72:29:a3:c7:da:95:6f:cf:b0:36:9a:34:
         c4:91:63:da
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ7x3+el9JjLyaotdApIZUnUqm/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgyODAyMkVFRTI1RjlDQkVCREZBNzQ3MTYzRTQ4OTVG
MTA4QTQyNzAeFw0yNDA0MDQxNjM4MTlaFw0yNTA0MDMxNjQzMTlaMDMxMTAvBgNV
BAMTKEJBMUY3OUVERTg4N0ZDQTA5NTJFRTRCQ0EwQkUwQjhGQjYzM0I5RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvpCreoKQS0zaR9wclVpNRgzYs
T3Wg9U938ep5C89Gf6YiKRz5RS4U0MKK4STSMWoK+W/WH6n6tL6JQ1wrz1QWKY3d
Et2TBFt7GbSP5XnjCtKyAMBexbMM55UxRYDh+jylVdd6g8zj15b6NWbSIp0g7BO4
4Ip9chyrB0M4/esRaxHPS0a1HCsLAK7kmnM5NAzHtWpJBFB4+0C67ImaFCPbDI9d
DtBFkDUZNZ8ROn/WEhuD4mcRk4NpbNoeuK6ajxqkL0zJInhC6qgbvtEVx7KODcLz
RCOnXB5jXrgKHvOTNQ2WJR+OiFdNZ8bwOKQqwsltj3ynRF+LH9TTqtxJhwWbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuh957eiH/KCVLuS8oL4Lj7YzudgwHwYDVR0j
BBgwFoAUCCgCLu4l+cvr36dHFj5IlfEIpCcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWVMZnlYdzExNENlQTk5V0dSaHJhaThlMUc0NzdHV2FHUHdOOVJkOFFz
RnIvMS8wODI4MDIyRUVFMjVGOUNCRUJERkE3NDcxNjNFNDg5NUYxMDhBNDI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4MjgwMjJFRUUyNUY5Q0JF
QkRGQTc0NzE2M0U0ODk1RjEwOEE0MjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzllTGZ5WHcxMTRDZUE5OVdHUmhyYWk4ZTFHNDc3R1dhR1B3TjlSZDhRc0ZyLzEv
MzQzNTJlMzEzNzM5MmUzMjM1MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzMzNjM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAts/wwDQYJKoZIhvcNAQELBQADggEBACpjt4o/
bzFXhYNSEbBNJfipue9/NoQvNSG7JHLetlGD6E5rAq8m5OvrT7YmeyiU9MSCRDPE
QAHu8jga8TjvR1WDBH0CDMSiX3DrkdUxHvrztcDY4m82JDoLE509D9GODSeOw7k3
GrTnfiRmfuPEdqsKsEbc3CzddJ8edycXfhEaDW64T3011jOXQz3Efd8Fg7UHOIf0
CigOMrXPZegjCUFptZnZRx1NMBIFa4y34+l2pqZnlYZnPWpJOk9q3XXmkfwDGAIU
SMIdMwUHv2LTHNv8dYl4Igo0bOyEFkhjUGpgZ05li8tXKiQ3oumur7nfKXIpo8fa
lW/PsDaaNMSRY9o=
-----END CERTIFICATE-----
Generated at Sat Jun 1 07:07:24 2024 by rpki-client on console-ams.rpki-client.org