Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/34352e3233302e3134342e302f32322d3234203d3e20323637313633.roa
File:                     34352e3233302e3134342e302f32322d3234203d3e20323637313633.roa (raw, json)
Hash identifier:          7rauemeKXSKs/TEohqahiVSMKLGqKnPkvAqvUgpKfO4=
Subject key identifier:   6A:F2:CD:7B:1A:5A:CB:F9:34:2E:AA:F5:51:9C:AC:D8:6A:0A:BA:0F
Certificate issuer:       /CN=2ED5E473D72A6D301514B818C3D2A94A5E387474
Certificate serial:       1941655392CEB15EA2A74DE28F75CF4636220938
Authority key identifier: 2E:D5:E4:73:D7:2A:6D:30:15:14:B8:18:C3:D2:A9:4A:5E:38:74:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/34352e3233302e3134342e302f32322d3234203d3e20323637313633.roa
Signing time:             Thu 04 Apr 2024 19:19:07 +0000
ROA not before:           Thu 04 Apr 2024 19:14:07 +0000
ROA not after:            Thu 03 Apr 2025 19:19:07 +0000
asID:                     267163
IP address blocks:        45.230.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.crl
                          rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:41:65:53:92:ce:b1:5e:a2:a7:4d:e2:8f:75:cf:46:36:22:09:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED5E473D72A6D301514B818C3D2A94A5E387474
        Validity
            Not Before: Apr  4 19:14:07 2024 GMT
            Not After : Apr  3 19:19:07 2025 GMT
        Subject: CN=6AF2CD7B1A5ACBF9342EAAF5519CACD86A0ABA0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ef:54:9b:dc:52:76:5b:85:d7:fa:ad:19:b7:
                    b6:a7:ef:68:fe:e0:d6:e9:90:66:fd:02:cb:71:a2:
                    7d:d7:d4:cf:b9:94:62:65:20:e1:87:45:7c:34:5f:
                    4f:ca:ef:63:4d:32:95:cf:fd:66:e8:c9:85:a8:9f:
                    98:4a:c3:7e:65:fe:03:bc:54:43:81:33:5c:d1:37:
                    d4:31:6c:db:11:a7:1a:e2:bd:35:74:83:c5:7d:c4:
                    e7:29:53:aa:7d:3d:83:58:64:94:a0:2e:11:1e:db:
                    39:89:43:63:80:a5:6d:04:2a:8d:60:3e:bc:b4:b5:
                    a6:e6:72:b1:6d:d2:9b:d4:fb:0e:e2:27:18:cb:05:
                    3b:31:01:51:54:44:13:bb:f7:7c:20:7f:50:fd:81:
                    4b:45:e1:02:3e:ef:b6:00:64:af:51:1f:a9:5d:cb:
                    4f:f5:e0:d0:c4:27:c7:93:5c:be:f0:e8:ef:55:cb:
                    de:ef:8a:7c:cd:a4:86:97:27:ed:c8:06:34:83:aa:
                    68:37:63:43:be:d8:d2:80:0e:0a:e9:3a:f0:ab:7e:
                    7a:25:2c:b8:8f:97:69:7f:43:19:50:b7:32:b8:b8:
                    97:50:4b:53:69:80:ce:11:8f:ab:42:c2:04:03:e7:
                    4b:6f:60:8d:4f:68:c7:82:6e:15:3b:89:16:ae:b6:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F2:CD:7B:1A:5A:CB:F9:34:2E:AA:F5:51:9C:AC:D8:6A:0A:BA:0F
            X509v3 Authority Key Identifier:
                keyid:2E:D5:E4:73:D7:2A:6D:30:15:14:B8:18:C3:D2:A9:4A:5E:38:74:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/34352e3233302e3134342e302f32322d3234203d3e20323637313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:ab:0d:86:87:fa:6b:27:f7:ba:35:bf:35:ec:4b:a9:ac:4d:
         44:91:c4:61:84:1a:d9:20:d6:95:e3:12:0f:a2:f6:af:be:cb:
         5c:60:03:4b:8e:b4:39:70:0b:26:51:60:82:21:67:38:60:c5:
         6e:3f:4f:dd:54:9f:a8:ba:59:c9:d4:e9:79:51:e8:2c:46:b4:
         56:0e:7f:c2:ca:85:0a:bb:b7:72:e9:70:ca:ee:f0:84:ec:61:
         00:db:4c:fe:05:d8:67:86:54:c3:eb:c9:e7:b2:98:ea:d6:7f:
         0d:f4:10:81:dc:f9:80:59:55:35:e1:61:fa:b1:65:c1:4b:53:
         07:46:12:d7:6a:b2:2f:c0:47:97:da:30:f0:a3:c3:ba:6e:79:
         3a:4b:da:8d:9a:08:ec:c2:f1:a8:f9:d3:56:7b:b1:ea:2d:a7:
         82:b1:18:3b:12:1b:c6:51:4e:0e:b9:05:5f:62:65:c0:8d:59:
         98:6a:11:eb:be:4c:c3:ea:17:f4:c9:86:c4:64:54:b4:2f:ef:
         00:e5:ae:4a:5f:34:39:35:1d:cc:be:d7:f4:31:50:44:9a:46:
         bd:62:e2:28:c0:3f:34:f7:83:7a:75:5c:62:2a:3d:4d:4f:e7:
         e5:6c:58:c0:9f:9b:ac:d6:f5:67:d3:02:49:97:88:f3:6e:a8:
         97:dc:a8:32
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGUFlU5LOsV6ip03ij3XPRjYiCTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVENUU0NzNENzJBNkQzMDE1MTRCODE4QzNEMkE5NEE1
RTM4NzQ3NDAeFw0yNDA0MDQxOTE0MDdaFw0yNTA0MDMxOTE5MDdaMDMxMTAvBgNV
BAMTKDZBRjJDRDdCMUE1QUNCRjkzNDJFQUFGNTUxOUNBQ0Q4NkEwQUJBMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc71Sb3FJ2W4XX+q0Zt7an72j+
4NbpkGb9Astxon3X1M+5lGJlIOGHRXw0X0/K72NNMpXP/WboyYWon5hKw35l/gO8
VEOBM1zRN9QxbNsRpxrivTV0g8V9xOcpU6p9PYNYZJSgLhEe2zmJQ2OApW0EKo1g
Pry0tabmcrFt0pvU+w7iJxjLBTsxAVFURBO793wgf1D9gUtF4QI+77YAZK9RH6ld
y0/14NDEJ8eTXL7w6O9Vy97vinzNpIaXJ+3IBjSDqmg3Y0O+2NKADgrpOvCrfnol
LLiPl2l/QxlQtzK4uJdQS1NpgM4Rj6tCwgQD50tvYI1PaMeCbhU7iRautjFBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUavLNexpay/k0Lqr1UZys2GoKug8wHwYDVR0j
BBgwFoAULtXkc9cqbTAVFLgYw9KpSl44dHQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUxXY1JVald4UXptQ1FMU1prbmhaUU5mU1BQblQySERxNlJqY3NDeDN3
cU0vMS8yRUQ1RTQ3M0Q3MkE2RDMwMTUxNEI4MThDM0QyQTk0QTVFMzg3NDc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFRDVFNDczRDcyQTZEMzAx
NTE0QjgxOEMzRDJBOTRBNUUzODc0NzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FMV2NSVWpXeFF6bUNRTFNaa25oWlFOZlNQUG5UMkhEcTZSamNzQ3gzd3FNLzEv
MzQzNTJlMzIzMzMwMmUzMTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMTM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt5pAwDQYJKoZIhvcNAQELBQADggEBAH6rDYaH
+msn97o1vzXsS6msTUSRxGGEGtkg1pXjEg+i9q++y1xgA0uOtDlwCyZRYIIhZzhg
xW4/T91Un6i6WcnU6XlR6CxGtFYOf8LKhQq7t3LpcMru8ITsYQDbTP4F2GeGVMPr
yeeymOrWfw30EIHc+YBZVTXhYfqxZcFLUwdGEtdqsi/AR5faMPCjw7pueTpL2o2a
COzC8aj501Z7seotp4KxGDsSG8ZRTg65BV9iZcCNWZhqEeu+TMPqF/TJhsRkVLQv
7wDlrkpfNDk1Hcy+1/QxUESaRr1i4ijAPzT3g3p1XGIqPU1P5+VsWMCfm6zW9WfT
AkmXiPNuqJfcqDI=
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:34 2024 by rpki-client on console-ams.rpki-client.org