Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/34352e37302e31362e302f32322d3234203d3e20323637353433.roa
File:                     34352e37302e31362e302f32322d3234203d3e20323637353433.roa (raw, json)
Hash identifier:          LNTBiLjoYLMfdc2mgzqN/E0VinkfRc2nX4o6PRpKE+o=
Subject key identifier:   AD:13:84:8D:02:E7:1A:56:A3:9A:F5:32:3A:A4:C0:A2:AF:A4:F2:74
Certificate issuer:       /CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
Certificate serial:       2AEA3D353FFE618A04C67BDC4C86417AD4D1A08B
Authority key identifier: 33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/34352e37302e31362e302f32322d3234203d3e20323637353433.roa
Signing time:             Thu 04 Apr 2024 03:59:41 +0000
ROA not before:           Thu 04 Apr 2024 03:54:41 +0000
ROA not after:            Thu 03 Apr 2025 03:59:41 +0000
asID:                     267543
IP address blocks:        45.70.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl
                          rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ea:3d:35:3f:fe:61:8a:04:c6:7b:dc:4c:86:41:7a:d4:d1:a0:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
        Validity
            Not Before: Apr  4 03:54:41 2024 GMT
            Not After : Apr  3 03:59:41 2025 GMT
        Subject: CN=AD13848D02E71A56A39AF5323AA4C0A2AFA4F274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:06:14:6e:5c:ee:4c:e3:4d:56:19:f6:d5:b2:
                    18:12:54:42:e7:e8:13:1a:b9:bf:39:10:a1:4d:0f:
                    d0:3f:2c:09:44:a8:d3:1e:1e:73:4f:10:03:1d:b5:
                    a0:a4:87:71:73:72:71:8e:f1:14:bf:b5:13:cd:23:
                    d5:2b:96:5b:77:bc:f6:fd:be:86:cb:3b:37:9b:56:
                    97:58:fe:bd:7d:7b:5a:f5:e2:c6:33:f4:27:de:96:
                    71:06:79:0b:ec:a3:2d:1e:e1:4f:b9:34:6c:e4:53:
                    d6:6d:11:eb:ac:b6:7b:77:0d:78:64:84:8b:be:69:
                    91:ea:6b:62:ce:9b:75:e4:2a:e4:74:cf:05:ef:50:
                    d7:a3:23:c2:df:ec:40:51:93:57:52:57:09:ce:4f:
                    38:ce:31:48:9c:61:17:fc:7f:bc:21:85:83:56:74:
                    08:3b:4e:b9:2c:d5:7d:a5:73:2f:b9:b4:f7:8a:56:
                    36:c2:a3:e7:de:9e:80:31:1c:2d:cc:e1:1d:28:79:
                    70:25:aa:48:c1:e4:17:74:44:41:fe:a3:55:32:e1:
                    a5:e7:54:01:e2:c8:a8:8d:94:86:14:ed:cb:36:dd:
                    99:35:c7:24:ec:25:c6:97:3f:ae:a7:b5:b8:30:b3:
                    dc:75:e6:6c:32:1a:e7:f6:ba:af:0e:80:96:df:c8:
                    0b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:13:84:8D:02:E7:1A:56:A3:9A:F5:32:3A:A4:C0:A2:AF:A4:F2:74
            X509v3 Authority Key Identifier:
                keyid:33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/34352e37302e31362e302f32322d3234203d3e20323637353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:c0:4e:c9:df:f3:89:9d:6a:4e:ac:31:49:63:5f:a9:cf:b9:
         7f:66:6c:0d:35:0d:cb:84:57:50:41:6f:5c:35:ee:7a:0c:fa:
         c4:f4:d7:f7:3e:7c:4c:a7:fe:23:fe:04:4d:f0:23:1b:22:34:
         48:17:e8:75:63:ed:f3:87:5c:84:89:86:18:4f:7e:1f:ad:ae:
         d0:0c:e9:09:f2:93:a4:62:78:3f:4d:24:90:86:78:a9:ba:0a:
         1e:9b:a3:03:0b:38:65:1f:c0:4b:b4:b8:52:b2:50:9a:cc:8b:
         6a:04:bd:22:b4:f0:79:cf:84:55:d0:64:4e:26:f9:d3:66:99:
         81:e4:33:b6:aa:65:11:79:51:95:e8:d2:2f:93:4a:24:bb:92:
         df:49:09:b6:7a:13:84:53:87:92:e9:d9:97:8a:9d:5b:22:09:
         a4:09:61:1b:5c:d7:65:0d:6f:4d:6e:c0:b2:36:ef:39:42:f8:
         31:0e:73:c2:59:1e:6a:1b:8f:51:93:89:6a:6e:3e:9a:6c:20:
         9c:df:f9:a3:b4:90:0a:3a:1f:bb:42:c6:99:bc:a4:33:b2:af:
         ee:f7:47:1f:90:dc:9d:cf:be:5c:17:03:46:59:37:c8:04:25:
         42:ed:7c:2c:ac:34:21:a3:4c:77:4b:94:e6:7f:c2:ff:f0:fd:
         e4:c1:a7:9f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKuo9NT/+YYoExnvcTIZBetTRoIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNFQUExQUNBM0E2OTc4QUVDMkQyREY0RDI5RUI0QjM1
OUIzRjY5QjAeFw0yNDA0MDQwMzU0NDFaFw0yNTA0MDMwMzU5NDFaMDMxMTAvBgNV
BAMTKEFEMTM4NDhEMDJFNzFBNTZBMzlBRjUzMjNBQTRDMEEyQUZBNEYyNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BhRuXO5M401WGfbVshgSVELn
6BMaub85EKFND9A/LAlEqNMeHnNPEAMdtaCkh3FzcnGO8RS/tRPNI9Urllt3vPb9
vobLOzebVpdY/r19e1r14sYz9CfelnEGeQvsoy0e4U+5NGzkU9ZtEeustnt3DXhk
hIu+aZHqa2LOm3XkKuR0zwXvUNejI8Lf7EBRk1dSVwnOTzjOMUicYRf8f7whhYNW
dAg7Trks1X2lcy+5tPeKVjbCo+fenoAxHC3M4R0oeXAlqkjB5Bd0REH+o1Uy4aXn
VAHiyKiNlIYU7cs23Zk1xyTsJcaXP66ntbgws9x15mwyGuf2uq8OgJbfyAuzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUrROEjQLnGlajmvUyOqTAoq+k8nQwHwYDVR0j
BBgwFoAUM+qhrKOml4rsLS300p60s1mz9pswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFhYUm41TkVNMjdKZ3hZcFV3ek1Eelhjc1ZKWHdCd2VYVVd1NDJTTGpp
TWMvMS8zM0VBQTFBQ0EzQTY5NzhBRUMyRDJERjREMjlFQjRCMzU5QjNGNjlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRUFBMUFDQTNBNjk3OEFF
QzJEMkRGNEQyOUVCNEIzNTlCM0Y2OUIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RYWFJuNU5FTTI3Smd4WXBVd3pNRHpYY3NWSlh3QndlWFVXdTQyU0xqaU1jLzEv
MzQzNTJlMzczMDJlMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzM1
MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi1GEDANBgkqhkiG9w0BAQsFAAOCAQEAfsBOyd/ziZ1q
TqwxSWNfqc+5f2ZsDTUNy4RXUEFvXDXuegz6xPTX9z58TKf+I/4ETfAjGyI0SBfo
dWPt84dchImGGE9+H62u0AzpCfKTpGJ4P00kkIZ4qboKHpujAws4ZR/AS7S4UrJQ
msyLagS9IrTwec+EVdBkTib502aZgeQztqplEXlRlejSL5NKJLuS30kJtnoThFOH
kunZl4qdWyIJpAlhG1zXZQ1vTW7AsjbvOUL4MQ5zwlkeahuPUZOJam4+mmwgnN/5
o7SQCjofu0LGmbykM7Kv7vdHH5Dcnc++XBcDRlk3yAQlQu18LKw0IaNMd0uU5n/C
//D95MGnnw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:10 2024 by rpki-client on console-ams.rpki-client.org