Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/34352e3138362e38382e302f32322d3234203d3e20323639343137.roa
File:                     34352e3138362e38382e302f32322d3234203d3e20323639343137.roa (raw, json)
Hash identifier:          cFEHXKQLDZM1vgX6/1Nn+5w39BQu+tMMeWK3Wjfbm7c=
Subject key identifier:   5E:42:10:29:24:0E:92:50:40:8D:2E:62:D5:D0:0B:44:64:3B:C3:50
Certificate issuer:       /CN=582517B9105955B7B839FB60DC59AE677C6B4DED
Certificate serial:       247DFEEEC02833D1D1FF1D30F6FFF2062BB8DA25
Authority key identifier: 58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/34352e3138362e38382e302f32322d3234203d3e20323639343137.roa
Signing time:             Fri 05 Apr 2024 03:18:10 +0000
ROA not before:           Fri 05 Apr 2024 03:13:10 +0000
ROA not after:            Fri 04 Apr 2025 03:18:10 +0000
asID:                     269417
IP address blocks:        45.186.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl
                          rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7d:fe:ee:c0:28:33:d1:d1:ff:1d:30:f6:ff:f2:06:2b:b8:da:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582517B9105955B7B839FB60DC59AE677C6B4DED
        Validity
            Not Before: Apr  5 03:13:10 2024 GMT
            Not After : Apr  4 03:18:10 2025 GMT
        Subject: CN=5E421029240E9250408D2E62D5D00B44643BC350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:68:76:da:4c:b1:ff:cc:38:d9:c6:aa:9d:53:
                    f5:e5:7b:8f:1f:46:8a:b9:23:46:43:a7:d4:e5:54:
                    33:a2:c1:6d:a6:ce:7e:55:4e:18:c7:eb:b7:1c:0b:
                    fc:66:7e:31:d2:c5:e3:3e:97:65:a1:e7:0d:e3:5d:
                    df:5d:76:6f:ed:9d:b8:3b:5f:43:fd:fa:e2:b4:42:
                    68:dc:e8:38:ee:ff:b6:7d:a9:58:7f:62:16:39:82:
                    43:c6:6e:fd:4c:6a:6a:fd:0c:91:29:46:be:6d:62:
                    b0:40:c3:c4:57:a9:e3:f3:ef:7b:f0:ed:b5:9e:49:
                    bd:41:98:01:00:71:22:bb:61:c1:24:fc:1e:13:57:
                    49:66:52:db:df:3c:b1:55:8f:00:30:d3:7c:82:a4:
                    90:2d:60:49:a4:4b:a9:29:72:85:68:c6:54:47:6d:
                    3a:25:39:1b:69:3a:7d:04:4e:13:e4:e7:94:ab:cb:
                    c2:b3:13:21:d5:a8:50:32:59:96:d4:26:df:7e:1f:
                    38:a9:be:ca:0a:e2:0c:45:69:d7:1b:01:8c:d1:6b:
                    9e:bd:a7:7c:8f:3a:97:6d:74:4b:8c:09:30:60:9d:
                    df:58:31:bb:7e:a9:73:ba:94:9e:25:63:74:ab:d4:
                    b9:c8:39:9a:94:02:36:20:8e:7a:7c:7e:eb:f0:36:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:42:10:29:24:0E:92:50:40:8D:2E:62:D5:D0:0B:44:64:3B:C3:50
            X509v3 Authority Key Identifier:
                keyid:58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/34352e3138362e38382e302f32322d3234203d3e20323639343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:19:6c:ec:db:77:e6:8b:8e:de:97:a9:91:30:39:f0:e4:bb:
         cd:2c:98:5f:3e:1b:22:ff:7a:a9:be:57:6f:e8:8b:bd:a6:56:
         c3:82:c8:16:79:4e:68:ec:db:05:8e:73:db:5b:88:ae:ed:67:
         ea:0c:56:51:80:64:e5:ef:6b:c1:15:d8:5d:31:f3:fb:9e:16:
         a8:24:fd:fc:b1:9f:7f:32:ed:7b:8f:90:e1:a8:cd:78:b8:76:
         62:a3:1b:1e:fb:7d:63:3d:58:33:9b:4a:5e:69:33:99:f6:39:
         ae:6e:29:a1:c9:fa:35:00:64:d8:3a:6b:f7:70:5a:f5:0d:4b:
         ee:25:c1:34:d9:cb:7d:c9:32:32:f7:80:84:9b:29:55:51:76:
         8c:7d:ba:fc:dc:6a:c5:06:ca:3b:c3:8e:62:59:f3:2c:cf:76:
         0e:45:fb:4f:fc:02:26:56:9f:54:d8:a1:a3:6d:ca:40:4a:de:
         37:39:f9:0a:67:f3:d3:fd:6e:7d:e7:23:d5:83:9a:e8:06:ce:
         d4:5d:ac:8d:0a:5f:86:94:38:29:37:cb:d9:d5:bc:62:ff:a3:
         c8:be:10:0c:61:94:8c:00:4e:e1:33:aa:af:ec:e9:eb:0d:7d:
         0c:13:7b:fb:c5:f7:2d:7a:87:ac:b2:2d:aa:e5:7e:a2:c6:15:
         ef:3c:37:20
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJH3+7sAoM9HR/x0w9v/yBiu42iUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgyNTE3QjkxMDU5NTVCN0I4MzlGQjYwREM1OUFFNjc3
QzZCNERFRDAeFw0yNDA0MDUwMzEzMTBaFw0yNTA0MDQwMzE4MTBaMDMxMTAvBgNV
BAMTKDVFNDIxMDI5MjQwRTkyNTA0MDhEMkU2MkQ1RDAwQjQ0NjQzQkMzNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiaHbaTLH/zDjZxqqdU/Xle48f
Roq5I0ZDp9TlVDOiwW2mzn5VThjH67ccC/xmfjHSxeM+l2Wh5w3jXd9ddm/tnbg7
X0P9+uK0Qmjc6Dju/7Z9qVh/YhY5gkPGbv1Mamr9DJEpRr5tYrBAw8RXqePz73vw
7bWeSb1BmAEAcSK7YcEk/B4TV0lmUtvfPLFVjwAw03yCpJAtYEmkS6kpcoVoxlRH
bTolORtpOn0EThPk55Sry8KzEyHVqFAyWZbUJt9+HzipvsoK4gxFadcbAYzRa569
p3yPOpdtdEuMCTBgnd9YMbt+qXO6lJ4lY3Sr1LnIOZqUAjYgjnp8fuvwNqw3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXkIQKSQOklBAjS5i1dALRGQ7w1AwHwYDVR0j
BBgwFoAUWCUXuRBZVbe4Oftg3FmuZ3xrTe0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXJQNUdXR0pTNWhGUUs3ZjV2UVNIVmRRWmJOYWlKNFdrV3BBeG1iYmVx
NUQvMS81ODI1MTdCOTEwNTk1NUI3QjgzOUZCNjBEQzU5QUU2NzdDNkI0REVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4MjUxN0I5MTA1OTU1QjdC
ODM5RkI2MERDNTlBRTY3N0M2QjRERUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlyUDVHV0dKUzVoRlFLN2Y1dlFTSFZkUVpiTmFpSjRXa1dwQXhtYmJlcTVELzEv
MzQzNTJlMzEzODM2MmUzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzQzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbpYMA0GCSqGSIb3DQEBCwUAA4IBAQCpGWzs23fm
i47el6mRMDnw5LvNLJhfPhsi/3qpvldv6Iu9plbDgsgWeU5o7NsFjnPbW4iu7Wfq
DFZRgGTl72vBFdhdMfP7nhaoJP38sZ9/Mu17j5DhqM14uHZioxse+31jPVgzm0pe
aTOZ9jmubimhyfo1AGTYOmv3cFr1DUvuJcE02ct9yTIy94CEmylVUXaMfbr83GrF
Bso7w45iWfMsz3YORftP/AImVp9U2KGjbcpASt43OfkKZ/PT/W595yPVg5roBs7U
XayNCl+GlDgpN8vZ1bxi/6PIvhAMYZSMAE7hM6qv7OnrDX0ME3v7xfcteoessi2q
5X6ixhXvPDcg
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:35 2024 by rpki-client on console-fra.rpki-client.org