Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/34352e352e3137362e302f32342d3234203d3e20323636313934.roa
File:                     34352e352e3137362e302f32342d3234203d3e20323636313934.roa (raw, json)
Hash identifier:          Org5N8ckJv20Fk5bS8T0TsWK8b2pHR4CXt38PXnd1Ac=
Subject key identifier:   69:D6:8D:44:F5:98:CE:9A:47:F1:A5:AA:F9:90:30:EC:D7:2D:AF:AB
Certificate issuer:       /CN=E20FE1CCBE80AAE124576B86D72030B55ED1A3AB
Certificate serial:       72D62327C22459E9FC36EC1BF7CB0138EE712CF2
Authority key identifier: E2:0F:E1:CC:BE:80:AA:E1:24:57:6B:86:D7:20:30:B5:5E:D1:A3:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20FE1CCBE80AAE124576B86D72030B55ED1A3AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/34352e352e3137362e302f32342d3234203d3e20323636313934.roa
Signing time:             Mon 20 May 2024 21:09:25 +0000
ROA not before:           Mon 20 May 2024 21:04:25 +0000
ROA not after:            Mon 19 May 2025 21:09:25 +0000
asID:                     266194
IP address blocks:        45.5.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/E20FE1CCBE80AAE124576B86D72030B55ED1A3AB.crl
                          rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/E20FE1CCBE80AAE124576B86D72030B55ED1A3AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20FE1CCBE80AAE124576B86D72030B55ED1A3AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d6:23:27:c2:24:59:e9:fc:36:ec:1b:f7:cb:01:38:ee:71:2c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E20FE1CCBE80AAE124576B86D72030B55ED1A3AB
        Validity
            Not Before: May 20 21:04:25 2024 GMT
            Not After : May 19 21:09:25 2025 GMT
        Subject: CN=69D68D44F598CE9A47F1A5AAF99030ECD72DAFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:86:5b:f0:b6:93:fe:19:0b:c9:f0:3f:b4:
                    37:55:cd:ce:d9:99:86:09:0c:42:27:96:bf:f9:c7:
                    59:d5:f5:45:00:73:e2:56:a7:ac:50:3d:0e:e3:4e:
                    55:2d:9c:15:29:c7:8c:2a:a0:b4:ff:15:1f:bc:bc:
                    20:8f:26:bf:28:a0:2b:0a:56:97:2f:2a:a7:f4:bb:
                    7c:4e:e1:f9:f9:e7:da:f7:37:04:1b:6e:f9:c6:5b:
                    7a:38:45:84:7c:95:83:69:12:7f:3a:e0:0d:8f:d4:
                    48:bb:2a:68:38:5f:69:e4:51:71:0f:0e:c0:5a:bc:
                    bf:c0:19:0a:07:de:80:51:f9:9b:bc:61:eb:f5:ca:
                    c3:c9:c2:42:54:6c:b1:06:54:68:13:0d:93:72:4c:
                    2a:4b:e5:cc:d1:8c:0d:fa:a4:b4:45:8c:06:4b:f5:
                    96:b3:07:72:d4:c9:0f:2e:ec:b3:4b:4a:a8:59:80:
                    d8:d6:eb:59:48:71:a6:9a:18:9d:55:8a:9a:1c:e7:
                    2c:20:49:ed:2d:75:4a:08:1f:be:03:75:63:c7:32:
                    fc:49:b8:18:a2:0c:6c:0a:17:47:ef:07:96:92:10:
                    70:e7:ed:ef:9b:fb:a0:e5:e7:b0:08:78:17:0d:00:
                    a4:ec:13:70:1e:e7:8b:a8:82:17:d1:96:ba:41:c3:
                    3a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D6:8D:44:F5:98:CE:9A:47:F1:A5:AA:F9:90:30:EC:D7:2D:AF:AB
            X509v3 Authority Key Identifier:
                keyid:E2:0F:E1:CC:BE:80:AA:E1:24:57:6B:86:D7:20:30:B5:5E:D1:A3:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/E20FE1CCBE80AAE124576B86D72030B55ED1A3AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20FE1CCBE80AAE124576B86D72030B55ED1A3AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/34352e352e3137362e302f32342d3234203d3e20323636313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:77:aa:e7:cc:32:f3:47:b1:4b:bf:9f:c7:bb:ab:61:bc:c6:
         dc:e0:d3:f8:90:07:d9:89:3e:dc:f1:81:82:c8:c7:36:97:af:
         f6:c1:95:23:b3:20:3d:20:56:4b:1b:a2:f0:6f:52:ee:fc:e0:
         42:b6:97:e5:86:fb:50:be:34:b3:fa:3e:1b:68:6f:6c:55:3f:
         17:98:b4:95:68:b9:1c:f9:6e:cc:fe:2e:39:4a:9e:32:98:75:
         10:1f:80:d7:8b:fe:36:4c:db:cf:6b:53:8b:9f:ee:15:76:dc:
         5a:b7:7f:fd:0b:6a:d8:01:49:0f:32:3b:34:15:a5:28:c0:dc:
         8f:0d:5f:59:fd:13:d4:47:27:3e:cf:98:1f:21:54:f6:1b:5b:
         92:bd:ef:c2:71:35:1e:6f:b5:1c:0c:d5:2d:b6:20:a1:f9:03:
         9a:5f:b8:88:36:01:79:3e:cb:ec:47:0e:7b:34:ed:14:14:ef:
         96:61:be:7b:d4:a0:fd:d6:b2:70:72:5e:c5:81:d6:e1:bf:6d:
         aa:b4:49:3c:46:74:63:56:53:80:31:5e:4f:87:c3:63:ec:b9:
         3b:10:04:4f:54:17:57:77:32:49:e1:95:46:42:90:dc:4a:ab:
         a9:26:52:cb:29:c9:d1:f3:c6:a0:b0:c2:62:c0:42:53:80:e1:
         9c:7d:59:38
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUctYjJ8IkWen8Nuwb98sBOO5xLPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTIwRkUxQ0NCRTgwQUFFMTI0NTc2Qjg2RDcyMDMwQjU1
RUQxQTNBQjAeFw0yNDA1MjAyMTA0MjVaFw0yNTA1MTkyMTA5MjVaMDMxMTAvBgNV
BAMTKDY5RDY4RDQ0RjU5OENFOUE0N0YxQTVBQUY5OTAzMEVDRDcyREFGQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExYZb8LaT/hkLyfA/tDdVzc7Z
mYYJDEInlr/5x1nV9UUAc+JWp6xQPQ7jTlUtnBUpx4wqoLT/FR+8vCCPJr8ooCsK
VpcvKqf0u3xO4fn559r3NwQbbvnGW3o4RYR8lYNpEn864A2P1Ei7Kmg4X2nkUXEP
DsBavL/AGQoH3oBR+Zu8Yev1ysPJwkJUbLEGVGgTDZNyTCpL5czRjA36pLRFjAZL
9ZazB3LUyQ8u7LNLSqhZgNjW61lIcaaaGJ1Vipoc5ywgSe0tdUoIH74DdWPHMvxJ
uBiiDGwKF0fvB5aSEHDn7e+b+6Dl57AIeBcNAKTsE3Ae54uoghfRlrpBwzrNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUadaNRPWYzppH8aWq+ZAw7Nctr6swHwYDVR0j
BBgwFoAU4g/hzL6AquEkV2uG1yAwtV7Ro6swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm9Ha2Y2YzFUN2tUN3ZLY1Z6b0d1cEhiOVBaWUs0azZUQzQ1THlTekJ3
VTQvMC9FMjBGRTFDQ0JFODBBQUUxMjQ1NzZCODZENzIwMzBCNTVFRDFBM0FCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyMEZFMUNDQkU4MEFBRTEy
NDU3NkI4NkQ3MjAzMEI1NUVEMUEzQUIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JvR2tmNmMxVDdrVDd2S2NWem9HdXBIYjlQWllLNGs2VEM0NUx5U3pCd1U0LzAv
MzQzNTJlMzUyZTMxMzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjMx
MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0FsDANBgkqhkiG9w0BAQsFAAOCAQEAHHeq58wy80ex
S7+fx7urYbzG3ODT+JAH2Yk+3PGBgsjHNpev9sGVI7MgPSBWSxui8G9S7vzgQraX
5Yb7UL40s/o+G2hvbFU/F5i0lWi5HPluzP4uOUqeMph1EB+A14v+Nkzbz2tTi5/u
FXbcWrd//Qtq2AFJDzI7NBWlKMDcjw1fWf0T1EcnPs+YHyFU9htbkr3vwnE1Hm+1
HAzVLbYgofkDml+4iDYBeT7L7EcOezTtFBTvlmG+e9Sg/daycHJexYHW4b9tqrRJ
PEZ0Y1ZTgDFeT4fDY+y5OxAET1QXV3cySeGVRkKQ3EqrqSZSyynJ0fPGoLDCYsBC
U4DhnH1ZOA==
-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:46 2024 by rpki-client on console-ams.rpki-client.org