Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa
File:                     34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa (raw, json)
Hash identifier:          HMj/b7GSirdwC8KoQsxaa0im08mcfva7LZasUBL8jK0=
Subject key identifier:   D1:B9:01:93:36:CB:15:D2:B0:35:A1:30:C5:CC:BB:64:B0:84:79:E2
Certificate issuer:       /CN=478E2899036889EA4A713455340EF1FCB5B880A7
Certificate serial:       7655002F9DE5BC3881C66E2B97A39DAEA29C7C8E
Authority key identifier: 47:8E:28:99:03:68:89:EA:4A:71:34:55:34:0E:F1:FC:B5:B8:80:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478E2899036889EA4A713455340EF1FCB5B880A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa
Signing time:             Thu 18 Apr 2024 13:37:37 +0000
ROA not before:           Thu 18 Apr 2024 13:32:37 +0000
ROA not after:            Thu 17 Apr 2025 13:37:37 +0000
asID:                     267669
IP address blocks:        45.224.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/478E2899036889EA4A713455340EF1FCB5B880A7.crl
                          rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/478E2899036889EA4A713455340EF1FCB5B880A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478E2899036889EA4A713455340EF1FCB5B880A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:55:00:2f:9d:e5:bc:38:81:c6:6e:2b:97:a3:9d:ae:a2:9c:7c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478E2899036889EA4A713455340EF1FCB5B880A7
        Validity
            Not Before: Apr 18 13:32:37 2024 GMT
            Not After : Apr 17 13:37:37 2025 GMT
        Subject: CN=D1B9019336CB15D2B035A130C5CCBB64B08479E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:75:2b:8c:bb:09:25:47:8a:49:9e:0e:60:ca:
                    66:b2:74:b8:5a:e8:eb:56:c0:eb:62:79:a1:46:25:
                    5f:40:f8:7d:3c:b3:14:e7:4d:57:85:87:dc:51:88:
                    df:ad:5c:b3:af:37:42:f7:7f:bb:7a:8e:cd:a4:7b:
                    49:11:d3:fb:c7:5f:7f:4d:42:51:53:ce:4d:42:e0:
                    e1:b0:de:09:94:12:de:bb:79:7b:36:d1:78:f7:47:
                    fb:0b:01:ba:da:f1:f1:32:0b:fb:6b:c9:78:ca:d1:
                    ee:7a:d9:f8:96:f2:3a:03:1b:83:5d:29:ff:ae:1c:
                    1a:da:80:81:72:b7:2a:dc:b5:37:cb:7e:4c:3f:ea:
                    66:ce:9d:28:ba:5f:cf:2a:25:a6:d6:24:df:45:ce:
                    66:b4:8d:40:3d:6c:f8:30:31:ba:a4:32:cd:54:16:
                    b8:56:1e:a9:47:45:f6:d7:08:4b:72:54:f0:00:9f:
                    2d:df:2b:ce:5f:13:3f:ea:9a:cb:40:15:4a:02:0a:
                    0c:31:2c:2e:a1:c8:db:23:f8:b9:b4:33:81:a7:61:
                    e2:b6:a6:c3:a8:2c:36:28:75:db:ae:75:e2:33:29:
                    14:db:f9:31:e9:a4:c2:ed:4c:77:6f:5f:27:63:fd:
                    5b:d3:65:fc:30:2d:0d:d1:97:66:1d:e2:82:6f:15:
                    b7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B9:01:93:36:CB:15:D2:B0:35:A1:30:C5:CC:BB:64:B0:84:79:E2
            X509v3 Authority Key Identifier:
                keyid:47:8E:28:99:03:68:89:EA:4A:71:34:55:34:0E:F1:FC:B5:B8:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/478E2899036889EA4A713455340EF1FCB5B880A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478E2899036889EA4A713455340EF1FCB5B880A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:41:66:19:4b:53:2f:9b:cd:6e:3a:6c:b2:a9:ce:e8:2b:6b:
         af:d6:82:b9:b3:93:42:97:2f:7b:cb:08:3e:68:21:ed:08:b1:
         3d:44:c4:ad:f1:ee:9c:ac:61:09:89:ec:9d:54:9e:71:10:89:
         82:c9:7a:2c:05:1f:49:0a:a0:35:3c:1f:13:ac:f4:84:0f:36:
         a4:a7:11:c6:75:96:0a:94:de:f8:f9:d1:53:2f:50:eb:47:d9:
         14:a7:a5:f0:f4:fa:30:34:57:1d:db:de:1e:29:df:e3:9d:fc:
         a5:92:d1:13:d0:3f:6a:e6:66:71:d5:e1:f6:ac:75:8d:9a:16:
         e1:5e:f1:7c:3f:66:e3:3a:bd:00:ae:15:63:b9:10:05:4a:98:
         54:cf:49:fb:f5:bb:11:39:8a:35:a2:c5:c1:9f:35:de:a8:fa:
         c1:d0:b1:9f:db:a8:7f:f8:4c:32:15:dc:29:44:ee:cd:4b:e9:
         f3:68:e4:0b:a2:bc:0c:f3:43:77:3f:7a:47:26:60:b4:c4:ea:
         01:51:4b:eb:92:93:bc:9d:66:b1:d0:83:58:29:6a:9c:2b:04:
         a4:b7:01:ba:83:f7:2e:77:0d:e0:af:27:b9:e1:f4:37:ff:11:
         b4:03:85:a6:38:0e:9a:68:66:b1:5a:cb:7e:2e:29:03:63:9a:
         d4:bc:4a:66
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdlUAL53lvDiBxm4rl6OdrqKcfI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc4RTI4OTkwMzY4ODlFQTRBNzEzNDU1MzQwRUYxRkNC
NUI4ODBBNzAeFw0yNDA0MTgxMzMyMzdaFw0yNTA0MTcxMzM3MzdaMDMxMTAvBgNV
BAMTKEQxQjkwMTkzMzZDQjE1RDJCMDM1QTEzMEM1Q0NCQjY0QjA4NDc5RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcdSuMuwklR4pJng5gymaydLha
6OtWwOtieaFGJV9A+H08sxTnTVeFh9xRiN+tXLOvN0L3f7t6js2ke0kR0/vHX39N
QlFTzk1C4OGw3gmUEt67eXs20Xj3R/sLAbra8fEyC/tryXjK0e562fiW8joDG4Nd
Kf+uHBragIFytyrctTfLfkw/6mbOnSi6X88qJabWJN9Fzma0jUA9bPgwMbqkMs1U
FrhWHqlHRfbXCEtyVPAAny3fK85fEz/qmstAFUoCCgwxLC6hyNsj+Lm0M4GnYeK2
psOoLDYodduudeIzKRTb+THppMLtTHdvXydj/VvTZfwwLQ3Rl2Yd4oJvFbd1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0bkBkzbLFdKwNaEwxcy7ZLCEeeIwHwYDVR0j
BBgwFoAUR44omQNoiepKcTRVNA7x/LW4gKcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3NCNlk1OWNpWUoyOHFaZWYzN1hDYkpqZDVxcWdwdFFSd3hrdUR3Mnpp
b3UvMC80NzhFMjg5OTAzNjg4OUVBNEE3MTM0NTUzNDBFRjFGQ0I1Qjg4MEE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3OEUyODk5MDM2ODg5RUE0
QTcxMzQ1NTM0MEVGMUZDQjVCODgwQTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NzQjZZNTljaVlKMjhxWmVmMzdYQ2JKamQ1cXFncHRRUnd4a3VEdzJ6aW91LzAv
MzQzNTJlMzIzMjM0MmUzMTM5MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczNjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4MAwDQYJKoZIhvcNAQELBQADggEBABhBZhlL
Uy+bzW46bLKpzugra6/Wgrmzk0KXL3vLCD5oIe0IsT1ExK3x7pysYQmJ7J1UnnEQ
iYLJeiwFH0kKoDU8HxOs9IQPNqSnEcZ1lgqU3vj50VMvUOtH2RSnpfD0+jA0Vx3b
3h4p3+Od/KWS0RPQP2rmZnHV4fasdY2aFuFe8Xw/ZuM6vQCuFWO5EAVKmFTPSfv1
uxE5ijWixcGfNd6o+sHQsZ/bqH/4TDIV3ClE7s1L6fNo5AuivAzzQ3c/ekcmYLTE
6gFRS+uSk7ydZrHQg1gpapwrBKS3AbqD9y53DeCvJ7nh9Df/EbQDhaY4DppoZrFa
y34uKQNjmtS8SmY=
-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:43 2024 by rpki-client on console-fra.rpki-client.org