Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/34352e362e3234312e302f32342d3234203d3e20323634333836.roa
File:                     34352e362e3234312e302f32342d3234203d3e20323634333836.roa (raw, json)
Hash identifier:          HVuZzCVCuNOSIzep4Z7PTNRXpI7/gkLoeOGMutIkhyU=
Subject key identifier:   FE:53:A4:50:19:73:02:36:CF:64:3F:A7:49:5E:B4:B8:41:65:24:C7
Certificate issuer:       /CN=CC038C42F33B3D558931769A27D97E3412751117
Certificate serial:       4862425AE25DCFF182BC3B7808AFBF4E63FD44D9
Authority key identifier: CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/34352e362e3234312e302f32342d3234203d3e20323634333836.roa
Signing time:             Wed 07 Aug 2024 14:55:32 +0000
ROA not before:           Wed 07 Aug 2024 14:50:32 +0000
ROA not after:            Wed 06 Aug 2025 14:55:32 +0000
asID:                     264386
IP address blocks:        45.6.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl
                          rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:62:42:5a:e2:5d:cf:f1:82:bc:3b:78:08:af:bf:4e:63:fd:44:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC038C42F33B3D558931769A27D97E3412751117
        Validity
            Not Before: Aug  7 14:50:32 2024 GMT
            Not After : Aug  6 14:55:32 2025 GMT
        Subject: CN=FE53A45019730236CF643FA7495EB4B8416524C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:d3:d3:4c:c4:64:09:ca:0c:ad:30:45:d0:
                    75:74:e4:90:63:61:95:38:b5:7b:89:fe:07:7e:82:
                    8c:bb:c2:30:11:f5:d5:ea:6a:0d:24:83:0c:d7:b5:
                    e9:52:fe:6d:fe:7a:a3:88:ce:cf:aa:89:ba:80:6d:
                    66:39:18:1e:f8:65:12:28:9b:89:44:66:88:1c:e8:
                    f5:68:aa:f5:e1:94:6b:56:a8:3e:8d:4e:b2:f1:8c:
                    f2:2e:59:da:86:a4:60:8e:b6:fc:d4:e8:c9:68:01:
                    77:fb:2a:9a:9b:32:27:82:f3:c7:a6:94:8d:6f:e0:
                    ef:0e:12:5a:23:47:00:f5:e5:11:fd:38:7a:0d:ed:
                    9a:db:24:29:86:aa:31:e5:ba:4b:3c:16:23:e6:8d:
                    18:19:a1:e5:6e:ba:59:a2:7f:a5:5a:39:65:44:4a:
                    83:1e:6b:b4:17:bc:2d:50:13:76:c3:8f:f2:18:70:
                    72:d3:4d:23:6e:56:37:48:e6:af:40:f3:fa:31:11:
                    e7:76:2b:e2:07:b9:6f:af:4b:cf:4b:ca:e9:b6:69:
                    38:83:53:8b:c5:e0:8b:d1:3e:7b:04:b3:ea:19:4a:
                    fb:23:39:e9:4c:68:99:1e:05:dd:9d:6e:ee:1c:8d:
                    19:d3:58:1c:bb:83:a1:f2:2b:d4:7f:e6:fb:62:50:
                    93:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:53:A4:50:19:73:02:36:CF:64:3F:A7:49:5E:B4:B8:41:65:24:C7
            X509v3 Authority Key Identifier:
                keyid:CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/34352e362e3234312e302f32342d3234203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:b4:73:7d:ae:b9:a4:79:54:6e:f2:61:c5:cc:1f:3b:66:b9:
         9c:04:38:67:42:d2:68:9b:cf:dc:08:fb:20:50:0d:9a:c1:51:
         12:07:84:32:a5:71:03:79:b1:41:2b:d1:0e:d8:61:97:0d:e2:
         d8:86:d9:02:7b:44:6b:66:32:62:82:c2:f2:17:9f:d7:76:15:
         d3:cb:d9:a7:9b:8e:78:d2:ff:f6:dd:55:93:5b:b8:1b:9f:e1:
         ec:fc:2a:dd:0f:de:d5:32:6d:9b:7b:52:35:9e:51:26:50:33:
         92:a6:e2:62:72:f9:86:16:78:9b:65:a0:89:89:88:66:3b:c6:
         4d:23:6c:57:d3:b5:c5:62:db:71:50:93:05:68:bf:a8:87:12:
         6f:f1:c4:42:ea:4f:54:f0:1d:c1:2f:fa:4f:a8:a0:6a:f6:c7:
         16:3d:14:f9:48:cc:d1:fa:85:87:5e:e7:49:15:62:8e:14:7a:
         f3:05:46:5f:1e:6d:8c:52:1f:eb:6b:0f:bf:0d:0d:3c:b6:47:
         c3:78:6f:54:11:f2:d3:8e:a1:4d:d2:c6:7f:86:c4:fe:25:eb:
         97:ad:c3:a0:60:f2:ce:8e:33:06:2e:7e:0a:63:bf:35:a3:bc:
         40:77:b0:6b:ac:18:09:bf:a4:8c:18:cb:05:11:91:14:86:da:
         b7:f5:f5:f0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUSGJCWuJdz/GCvDt4CK+/TmP9RNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MwMzhDNDJGMzNCM0Q1NTg5MzE3NjlBMjdEOTdFMzQx
Mjc1MTExNzAeFw0yNDA4MDcxNDUwMzJaFw0yNTA4MDYxNDU1MzJaMDMxMTAvBgNV
BAMTKEZFNTNBNDUwMTk3MzAyMzZDRjY0M0ZBNzQ5NUVCNEI4NDE2NTI0QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9tPTTMRkCcoMrTBF0HV05JBj
YZU4tXuJ/gd+goy7wjAR9dXqag0kgwzXtelS/m3+eqOIzs+qibqAbWY5GB74ZRIo
m4lEZogc6PVoqvXhlGtWqD6NTrLxjPIuWdqGpGCOtvzU6MloAXf7KpqbMieC88em
lI1v4O8OElojRwD15RH9OHoN7ZrbJCmGqjHluks8FiPmjRgZoeVuulmif6VaOWVE
SoMea7QXvC1QE3bDj/IYcHLTTSNuVjdI5q9A8/oxEed2K+IHuW+vS89Lyum2aTiD
U4vF4IvRPnsEs+oZSvsjOelMaJkeBd2dbu4cjRnTWBy7g6HyK9R/5vtiUJNlAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU/lOkUBlzAjbPZD+nSV60uEFlJMcwHwYDVR0j
BBgwFoAUzAOMQvM7PVWJMXaaJ9l+NBJ1ERcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREMySGtxUkJ0WlFQRnFuR3JNRmtEWkxCNTJVMXd5RGs4aER6ZUFlbkx6
amIvMS9DQzAzOEM0MkYzM0IzRDU1ODkzMTc2OUEyN0Q5N0UzNDEyNzUxMTE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDMDM4QzQyRjMzQjNENTU4
OTMxNzY5QTI3RDk3RTM0MTI3NTExMTcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RDMkhrcVJCdFpRUEZxbkdyTUZrRFpMQjUyVTF3eURrOGhEemVBZW5MempiLzEv
MzQzNTJlMzYyZTMyMzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNDMz
MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0G8TANBgkqhkiG9w0BAQsFAAOCAQEAS7Rzfa65pHlU
bvJhxcwfO2a5nAQ4Z0LSaJvP3Aj7IFANmsFREgeEMqVxA3mxQSvRDthhlw3i2IbZ
AntEa2YyYoLC8hef13YV08vZp5uOeNL/9t1Vk1u4G5/h7Pwq3Q/e1TJtm3tSNZ5R
JlAzkqbiYnL5hhZ4m2WgiYmIZjvGTSNsV9O1xWLbcVCTBWi/qIcSb/HEQupPVPAd
wS/6T6igavbHFj0U+UjM0fqFh17nSRVijhR68wVGXx5tjFIf62sPvw0NPLZHw3hv
VBHy046hTdLGf4bE/iXrl63DoGDyzo4zBi5+CmO/NaO8QHewa6wYCb+kjBjLBRGR
FIbat/X18A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:37 2024 by rpki-client on console-ams.rpki-client.org