Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/1/34352e3233312e38342e302f32322d3234203d3e20323637313839.roa
File:                     34352e3233312e38342e302f32322d3234203d3e20323637313839.roa (raw, json)
Hash identifier:          OlQB7kVHDnFj1JuY6wpzjBcAY1X+ft7JVYrS+SHBh/k=
Subject key identifier:   82:83:36:07:B5:72:7E:D8:0C:F2:30:DC:4D:4D:6F:D2:DD:3D:E3:03
Certificate issuer:       /CN=F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C
Certificate serial:       4697C7C7E4AB1F3EE91812FAFD53D3A0B9C6D445
Authority key identifier: F2:CB:48:A6:1A:AA:AB:5F:64:93:BE:9B:14:1A:93:5A:7B:0B:DD:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/1/34352e3233312e38342e302f32322d3234203d3e20323637313839.roa
Signing time:             Thu 04 Apr 2024 04:42:37 +0000
ROA not before:           Thu 04 Apr 2024 04:37:37 +0000
ROA not after:            Thu 03 Apr 2025 04:42:37 +0000
asID:                     267189
IP address blocks:        45.231.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/1/F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C.crl
                          rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/1/F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:97:c7:c7:e4:ab:1f:3e:e9:18:12:fa:fd:53:d3:a0:b9:c6:d4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C
        Validity
            Not Before: Apr  4 04:37:37 2024 GMT
            Not After : Apr  3 04:42:37 2025 GMT
        Subject: CN=82833607B5727ED80CF230DC4D4D6FD2DD3DE303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:1a:6e:f2:97:c3:37:dc:db:ff:d4:3a:f5:
                    84:e7:1b:59:94:f4:8f:9e:40:ca:ba:9e:78:68:e0:
                    5a:b7:2e:5d:ab:df:24:a3:80:76:4a:39:a1:7e:69:
                    80:de:5e:65:ae:06:99:9a:53:ae:32:5a:ba:09:a8:
                    ad:59:74:13:f1:ad:29:b8:73:d9:cf:bb:a9:76:16:
                    73:8a:70:56:bf:4b:e5:76:1e:1b:e3:bf:4c:f1:5c:
                    20:0e:df:2c:c6:0a:4f:70:2f:e6:4e:fa:0a:83:24:
                    c0:6b:81:be:75:f3:c9:bb:c0:a9:1d:02:a3:74:b5:
                    17:90:4f:d5:ab:c7:a8:6f:5b:25:4d:1f:c5:27:81:
                    36:c0:08:70:01:85:5b:28:29:16:65:9e:54:bd:af:
                    04:26:e4:e3:bb:31:8a:dc:0a:8d:2d:00:b4:6c:58:
                    1a:85:bd:6f:c5:3a:31:c1:b9:a8:5d:7e:fe:96:47:
                    fa:07:6e:e9:f5:bb:d6:f4:02:a1:26:b4:a1:c8:74:
                    97:f2:cd:9e:ba:ad:9b:5c:91:33:1a:a2:12:3a:b6:
                    bd:36:63:4b:3f:11:2f:c7:da:f6:0d:29:44:81:72:
                    b8:9d:08:e8:36:62:d5:fc:fc:ed:25:09:9f:9d:69:
                    32:71:03:dc:dd:59:65:aa:7f:00:c8:94:bd:7d:59:
                    cc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:83:36:07:B5:72:7E:D8:0C:F2:30:DC:4D:4D:6F:D2:DD:3D:E3:03
            X509v3 Authority Key Identifier:
                keyid:F2:CB:48:A6:1A:AA:AB:5F:64:93:BE:9B:14:1A:93:5A:7B:0B:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/1/F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/1/34352e3233312e38342e302f32322d3234203d3e20323637313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:37:eb:4e:3e:04:78:81:9a:0e:09:2c:7f:03:ab:66:c3:ac:
         17:ef:25:69:7b:48:0b:c8:de:29:fc:b7:97:0d:ef:00:4b:10:
         e4:c7:b9:4d:87:a7:cb:06:20:8e:a2:32:29:a9:b0:f6:39:5b:
         b6:aa:e1:7b:68:2f:da:34:20:d8:da:62:51:8f:09:00:de:db:
         d9:54:73:e4:89:f2:22:d3:a1:36:9d:70:6d:a8:78:c9:59:20:
         e8:16:a4:91:b6:15:2e:3a:0f:73:f8:31:6f:07:b1:40:ef:15:
         8d:d6:4f:1e:f5:0f:70:58:c4:d0:88:d8:0a:fb:19:55:45:45:
         c8:ae:82:cb:58:18:57:2f:d2:d6:96:43:15:92:dc:b6:51:39:
         b1:f9:de:c8:d7:88:a9:41:70:bb:67:5e:ce:d1:ce:4f:c5:ec:
         c4:5e:3e:9d:ad:07:07:a7:82:a0:60:aa:d0:8b:2a:b5:2d:ee:
         86:bc:91:6a:43:83:58:c8:b4:c5:59:72:80:e8:20:96:bd:81:
         67:47:1d:8d:c8:25:04:62:82:db:c0:99:b4:f6:79:7e:f2:47:
         9d:81:36:05:5f:a3:01:99:cf:39:c7:31:46:0e:3d:04:71:01:
         8d:a2:c5:9c:23:10:7f:65:f8:01:b2:7c:3f:73:8c:97:c2:40:
         59:ce:5b:a1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURpfHx+SrHz7pGBL6/VPToLnG1EUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDQjQ4QTYxQUFBQUI1RjY0OTNCRTlCMTQxQTkzNUE3
QjBCREQxQzAeFw0yNDA0MDQwNDM3MzdaFw0yNTA0MDMwNDQyMzdaMDMxMTAvBgNV
BAMTKDgyODMzNjA3QjU3MjdFRDgwQ0YyMzBEQzRENEQ2RkQyREQzREUzMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCszRpu8pfDN9zb/9Q69YTnG1mU
9I+eQMq6nnho4Fq3Ll2r3ySjgHZKOaF+aYDeXmWuBpmaU64yWroJqK1ZdBPxrSm4
c9nPu6l2FnOKcFa/S+V2Hhvjv0zxXCAO3yzGCk9wL+ZO+gqDJMBrgb5188m7wKkd
AqN0tReQT9Wrx6hvWyVNH8UngTbACHABhVsoKRZlnlS9rwQm5OO7MYrcCo0tALRs
WBqFvW/FOjHBuahdfv6WR/oHbun1u9b0AqEmtKHIdJfyzZ66rZtckTMaohI6tr02
Y0s/ES/H2vYNKUSBcridCOg2YtX8/O0lCZ+daTJxA9zdWWWqfwDIlL19WcwXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgoM2B7VyftgM8jDcTU1v0t094wMwHwYDVR0j
BBgwFoAU8stIphqqq19kk76bFBqTWnsL3RwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUVQS3hCWVNZU2hOd1F4TkpXNlY1cEtIMWtXM0pQb0FhR3dyc2FLNUN5
eEovMS9GMkNCNDhBNjFBQUFBQjVGNjQ5M0JFOUIxNDFBOTM1QTdCMEJERDFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyQ0I0OEE2MUFBQUFCNUY2
NDkzQkU5QjE0MUE5MzVBN0IwQkREMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FFUEt4QllTWVNoTndReE5KVzZWNXBLSDFrVzNKUG9BYUd3cnNhSzVDeXhKLzEv
MzQzNTJlMzIzMzMxMmUzODM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzEzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLedUMA0GCSqGSIb3DQEBCwUAA4IBAQCmN+tOPgR4
gZoOCSx/A6tmw6wX7yVpe0gLyN4p/LeXDe8ASxDkx7lNh6fLBiCOojIpqbD2OVu2
quF7aC/aNCDY2mJRjwkA3tvZVHPkifIi06E2nXBtqHjJWSDoFqSRthUuOg9z+DFv
B7FA7xWN1k8e9Q9wWMTQiNgK+xlVRUXIroLLWBhXL9LWlkMVkty2UTmx+d7I14ip
QXC7Z17O0c5PxezEXj6drQcHp4KgYKrQiyq1Le6GvJFqQ4NYyLTFWXKA6CCWvYFn
Rx2NyCUEYoLbwJm09nl+8kedgTYFX6MBmc85xzFGDj0EcQGNosWcIxB/ZfgBsnw/
c4yXwkBZzluh
-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:24 2024 by rpki-client on console-fra.rpki-client.org