Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37372e302f32342d3234203d3e20323638383930.roa
File:                     34352e3137352e37372e302f32342d3234203d3e20323638383930.roa (raw, json)
Hash identifier:          a/ecAOhWvqBm+s1UCaSbtTSLFr6bxnhh5HSLFj69I64=
Subject key identifier:   A8:19:B6:DA:6E:1B:58:33:5E:07:8D:82:6E:56:8C:F7:19:39:C0:80
Certificate issuer:       /CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
Certificate serial:       3661CB52898219A76BA3ECB2CE7C34E0D72E83F4
Authority key identifier: A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37372e302f32342d3234203d3e20323638383930.roa
Signing time:             Tue 09 Apr 2024 19:50:04 +0000
ROA not before:           Tue 09 Apr 2024 19:45:04 +0000
ROA not after:            Tue 08 Apr 2025 19:50:04 +0000
asID:                     268890
IP address blocks:        45.175.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.crl
                          rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:61:cb:52:89:82:19:a7:6b:a3:ec:b2:ce:7c:34:e0:d7:2e:83:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
        Validity
            Not Before: Apr  9 19:45:04 2024 GMT
            Not After : Apr  8 19:50:04 2025 GMT
        Subject: CN=A819B6DA6E1B58335E078D826E568CF71939C080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2e:8e:08:8e:7b:e2:5f:ee:a3:f6:2a:c6:74:
                    67:83:0e:17:ef:d0:14:76:0f:86:74:98:e2:4a:63:
                    8a:8e:6f:de:30:58:40:77:57:21:c2:19:e3:a1:c3:
                    43:09:cd:83:70:d6:2b:48:97:fe:fa:d9:d5:a1:3c:
                    98:46:0f:a7:dc:3a:fa:f5:cb:36:26:c5:c2:d0:b0:
                    59:69:40:02:7b:63:ee:fa:b5:01:a6:1d:40:aa:2a:
                    57:af:38:c8:15:83:5f:94:3e:31:74:52:eb:a3:f0:
                    55:3a:f1:f6:5a:11:19:86:91:62:7d:ed:9f:0e:b4:
                    13:f8:a3:0a:47:81:f2:c5:27:eb:dd:ef:80:3c:07:
                    5c:cc:c7:ba:1b:73:65:8f:d9:33:30:df:69:aa:18:
                    27:26:19:f4:c6:e7:02:35:d0:8c:96:4d:8e:5b:9e:
                    64:b3:cf:cc:8e:32:3c:5f:ec:8e:e5:4e:03:79:b0:
                    88:0e:35:fe:32:d9:26:85:2d:fc:c0:31:d9:a6:27:
                    f2:ee:c4:8b:1b:cb:ab:16:64:36:7a:af:82:13:66:
                    09:5a:5f:97:e8:f3:ef:a7:bb:0d:4b:0c:dc:0c:e0:
                    7c:6f:97:85:1c:02:8f:1e:b3:f0:60:15:90:f1:15:
                    11:c8:91:98:a5:21:0f:ce:4a:91:18:7b:2b:0b:02:
                    c9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:19:B6:DA:6E:1B:58:33:5E:07:8D:82:6E:56:8C:F7:19:39:C0:80
            X509v3 Authority Key Identifier:
                keyid:A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37372e302f32342d3234203d3e20323638383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:7b:92:ab:07:d7:e5:45:eb:e8:3f:1f:b8:31:92:19:92:f1:
         2e:53:71:98:31:95:9a:37:71:82:69:5e:64:c1:2f:f9:53:b6:
         d7:65:3c:f4:c6:48:e3:f1:a2:d1:4c:a1:e8:fe:3d:22:e0:d6:
         be:7d:ee:2e:fa:7f:86:13:ca:10:71:e8:9b:eb:b4:80:42:19:
         89:9d:54:26:61:8a:db:fa:99:f7:d2:32:71:84:c6:a7:9b:e2:
         42:3a:e7:12:49:5f:9f:8e:25:c9:2c:61:4e:c7:c3:fe:dc:fd:
         ab:3a:b1:03:0d:b7:ca:04:8f:a7:b9:89:71:7b:a8:9a:90:4f:
         16:18:41:98:75:e5:1c:af:9a:a6:89:14:b7:96:6b:0f:33:65:
         8f:cf:66:c2:13:fa:9d:eb:d0:64:71:04:c9:62:b6:e4:82:1c:
         7e:bc:6f:7b:fe:e4:a0:c1:e1:58:e5:a2:03:ad:05:53:cc:3b:
         26:83:c2:88:df:fb:e4:2f:dd:2c:8d:e3:35:27:50:c9:64:f1:
         3a:68:80:f5:11:58:42:f8:73:6e:fa:f0:8e:58:60:fe:1f:42:
         4c:de:c8:10:d0:9d:4a:56:da:89:16:e3:61:40:6a:9b:8d:fc:
         d9:21:29:d7:6c:2c:d3:c6:bc:95:4c:03:cd:a8:d4:e4:88:dc:
         7d:11:93:b2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNmHLUomCGadro+yyznw04Ncug/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU2NkU2NDA2QzVCNzJEQzc2RkI0RkFENzNCOUYxMDNG
OTlEMzdFRTAeFw0yNDA0MDkxOTQ1MDRaFw0yNTA0MDgxOTUwMDRaMDMxMTAvBgNV
BAMTKEE4MTlCNkRBNkUxQjU4MzM1RTA3OEQ4MjZFNTY4Q0Y3MTkzOUMwODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLo4IjnviX+6j9irGdGeDDhfv
0BR2D4Z0mOJKY4qOb94wWEB3VyHCGeOhw0MJzYNw1itIl/762dWhPJhGD6fcOvr1
yzYmxcLQsFlpQAJ7Y+76tQGmHUCqKlevOMgVg1+UPjF0Uuuj8FU68fZaERmGkWJ9
7Z8OtBP4owpHgfLFJ+vd74A8B1zMx7obc2WP2TMw32mqGCcmGfTG5wI10IyWTY5b
nmSzz8yOMjxf7I7lTgN5sIgONf4y2SaFLfzAMdmmJ/LuxIsby6sWZDZ6r4ITZgla
X5fo8++nuw1LDNwM4Hxvl4UcAo8es/BgFZDxFRHIkZilIQ/OSpEYeysLAsl3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqBm22m4bWDNeB42CblaM9xk5wIAwHwYDVR0j
BBgwFoAUpWbmQGxbctx2+0+tc7nxA/mdN+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3JmVm9KNWg2TDJDc0FXcWFZdDUzOEVXOHN5SlFVN2RQb0tWZW9tcGI0
REcvMC9BNTY2RTY0MDZDNUI3MkRDNzZGQjRGQUQ3M0I5RjEwM0Y5OUQzN0VFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NjZFNjQwNkM1QjcyREM3
NkZCNEZBRDczQjlGMTAzRjk5RDM3RUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NyZlZvSjVoNkwyQ3NBV3FhWXQ1MzhFVzhzeUpRVTdkUG9LVmVvbXBiNERHLzAv
MzQzNTJlMzEzNzM1MmUzNzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzgzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALa9NMA0GCSqGSIb3DQEBCwUAA4IBAQBTe5KrB9fl
RevoPx+4MZIZkvEuU3GYMZWaN3GCaV5kwS/5U7bXZTz0xkjj8aLRTKHo/j0i4Na+
fe4u+n+GE8oQceib67SAQhmJnVQmYYrb+pn30jJxhManm+JCOucSSV+fjiXJLGFO
x8P+3P2rOrEDDbfKBI+nuYlxe6iakE8WGEGYdeUcr5qmiRS3lmsPM2WPz2bCE/qd
69BkcQTJYrbkghx+vG97/uSgweFY5aIDrQVTzDsmg8KI3/vkL90sjeM1J1DJZPE6
aID1EVhC+HNu+vCOWGD+H0JM3sgQ0J1KVtqJFuNhQGqbjfzZISnXbCzTxryVTAPN
qNTkiNx9EZOy
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:42 2024 by rpki-client on console-ams.rpki-client.org