Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/1/34352e352e3234342e302f32322d3332203d3e20323636313130.roa
File:                     34352e352e3234342e302f32322d3332203d3e20323636313130.roa (raw, json)
Hash identifier:          E8GrfSdKvG9UhaWHP83Wh6BWzX260OJ1ekTUyGNng6o=
Subject key identifier:   EE:33:66:9E:DA:96:F1:D6:5A:1B:A5:C5:0A:E8:6C:75:35:05:FA:9D
Certificate issuer:       /CN=D7B29FE22448C466FA548AB1B46F365EE0112D4E
Certificate serial:       4C390B53F316C640A9B1F427F4636BEB36F5DFF7
Authority key identifier: D7:B2:9F:E2:24:48:C4:66:FA:54:8A:B1:B4:6F:36:5E:E0:11:2D:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B29FE22448C466FA548AB1B46F365EE0112D4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/1/34352e352e3234342e302f32322d3332203d3e20323636313130.roa
Signing time:             Thu 04 Apr 2024 17:44:25 +0000
ROA not before:           Thu 04 Apr 2024 17:39:25 +0000
ROA not after:            Thu 03 Apr 2025 17:44:25 +0000
asID:                     266110
IP address blocks:        45.5.244.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/1/D7B29FE22448C466FA548AB1B46F365EE0112D4E.crl
                          rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/1/D7B29FE22448C466FA548AB1B46F365EE0112D4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B29FE22448C466FA548AB1B46F365EE0112D4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:39:0b:53:f3:16:c6:40:a9:b1:f4:27:f4:63:6b:eb:36:f5:df:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7B29FE22448C466FA548AB1B46F365EE0112D4E
        Validity
            Not Before: Apr  4 17:39:25 2024 GMT
            Not After : Apr  3 17:44:25 2025 GMT
        Subject: CN=EE33669EDA96F1D65A1BA5C50AE86C753505FA9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:6d:47:a0:5f:6b:07:3a:38:0e:13:8e:cb:
                    6d:43:d0:a9:76:9c:5a:eb:5c:0b:da:de:cf:67:f0:
                    9b:29:5a:ff:2f:16:ba:97:d3:30:02:3d:a3:3d:cb:
                    1c:6f:99:cb:fe:7c:26:47:98:35:bc:f0:6a:89:d8:
                    4e:c9:78:b1:71:87:cf:d4:88:05:89:5c:dc:05:5e:
                    ea:fa:81:e7:18:ea:22:a3:2c:53:92:08:96:22:76:
                    39:fe:52:5f:09:2a:5e:c6:ea:4e:65:7a:4e:93:d2:
                    dd:24:04:fc:2e:af:53:50:8d:53:25:29:aa:9b:73:
                    8e:e4:87:50:80:b1:35:10:6f:10:db:34:25:43:20:
                    2c:49:a9:02:db:fb:68:d4:a4:b1:32:78:13:36:ee:
                    7e:5f:40:61:a4:24:22:8c:68:bf:a6:97:c0:8f:13:
                    92:e1:24:57:41:48:34:4f:ed:1f:e5:77:0f:19:1e:
                    1b:fc:88:87:a6:72:99:75:5a:56:41:1b:ec:91:60:
                    4f:e2:39:af:5d:e5:e1:81:1e:d2:2e:a0:b0:1f:78:
                    c1:c9:bb:31:11:ec:f2:dc:78:7d:b6:6e:6e:aa:56:
                    0e:ab:83:f3:1b:b8:27:78:c9:59:c2:e5:f0:3a:08:
                    b1:d6:85:2d:26:fa:25:7b:fb:70:cc:d5:03:da:b2:
                    9f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:33:66:9E:DA:96:F1:D6:5A:1B:A5:C5:0A:E8:6C:75:35:05:FA:9D
            X509v3 Authority Key Identifier:
                keyid:D7:B2:9F:E2:24:48:C4:66:FA:54:8A:B1:B4:6F:36:5E:E0:11:2D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/1/D7B29FE22448C466FA548AB1B46F365EE0112D4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B29FE22448C466FA548AB1B46F365EE0112D4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/1/34352e352e3234342e302f32322d3332203d3e20323636313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:72:4f:83:4a:97:6e:f1:2a:5d:a1:ea:a7:79:72:7b:d2:1a:
         21:e3:4a:10:a8:df:e2:7d:52:96:e1:af:96:70:ad:72:11:95:
         f8:15:5f:f7:a2:43:52:6b:fc:7b:af:5a:45:a7:1e:b9:49:17:
         36:34:09:c7:a2:6c:0d:9b:31:ef:4a:09:c1:ca:ad:61:b0:5b:
         43:10:c2:b1:f3:48:06:d7:43:bd:16:6c:2d:d6:9e:5a:80:d9:
         d9:40:12:64:37:48:85:cf:0b:0f:db:77:ba:9f:34:b0:62:7d:
         3c:0e:49:57:76:a2:86:c8:c3:d7:f2:cb:46:a8:cf:df:9e:7e:
         1f:6b:ce:17:e0:f6:9f:cb:c1:04:dc:4f:7f:4e:e3:c1:41:95:
         e8:a1:5c:72:03:31:0f:a4:52:b9:d2:36:6c:c5:36:9a:b4:e7:
         eb:b4:9b:27:cf:0a:76:b0:cb:7e:3b:86:8b:e5:64:b9:92:70:
         0e:7e:d3:a8:dc:38:e5:6e:af:3b:d5:c1:e1:65:41:b9:41:1e:
         1c:89:6a:d7:f5:f4:a9:b7:31:81:47:42:de:9a:79:fd:a0:2e:
         f0:4e:62:b7:4d:7a:4d:01:91:47:0a:36:2f:dc:bf:84:e7:1e:
         14:1d:1c:1d:58:52:40:1c:c8:24:cf:83:57:56:6a:3f:14:d7:
         db:f9:e5:23
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTDkLU/MWxkCpsfQn9GNr6zb13/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdCMjlGRTIyNDQ4QzQ2NkZBNTQ4QUIxQjQ2RjM2NUVF
MDExMkQ0RTAeFw0yNDA0MDQxNzM5MjVaFw0yNTA0MDMxNzQ0MjVaMDMxMTAvBgNV
BAMTKEVFMzM2NjlFREE5NkYxRDY1QTFCQTVDNTBBRTg2Qzc1MzUwNUZBOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEW1HoF9rBzo4DhOOy21D0Kl2
nFrrXAva3s9n8JspWv8vFrqX0zACPaM9yxxvmcv+fCZHmDW88GqJ2E7JeLFxh8/U
iAWJXNwFXur6gecY6iKjLFOSCJYidjn+Ul8JKl7G6k5lek6T0t0kBPwur1NQjVMl
Kaqbc47kh1CAsTUQbxDbNCVDICxJqQLb+2jUpLEyeBM27n5fQGGkJCKMaL+ml8CP
E5LhJFdBSDRP7R/ldw8ZHhv8iIemcpl1WlZBG+yRYE/iOa9d5eGBHtIuoLAfeMHJ
uzER7PLceH22bm6qVg6rg/MbuCd4yVnC5fA6CLHWhS0m+iV7+3DM1QPasp9HAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU7jNmntqW8dZaG6XFCuhsdTUF+p0wHwYDVR0j
BBgwFoAU17Kf4iRIxGb6VIqxtG82XuARLU4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGZ2RUVzSFkxclNEbTdHdnl6ZVVqYlVXYkRINzMyd3NncXVUYkVDN0Zu
a0cvMS9EN0IyOUZFMjI0NDhDNDY2RkE1NDhBQjFCNDZGMzY1RUUwMTEyRDRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3QjI5RkUyMjQ0OEM0NjZG
QTU0OEFCMUI0NkYzNjVFRTAxMTJENEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RmdkVFc0hZMXJTRG03R3Z5emVVamJVV2JESDczMndzZ3F1VGJFQzdGbmtHLzEv
MzQzNTJlMzUyZTMyMzQzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjMx
MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0F9DANBgkqhkiG9w0BAQsFAAOCAQEAdXJPg0qXbvEq
XaHqp3lye9IaIeNKEKjf4n1SluGvlnCtchGV+BVf96JDUmv8e69aRaceuUkXNjQJ
x6JsDZsx70oJwcqtYbBbQxDCsfNIBtdDvRZsLdaeWoDZ2UASZDdIhc8LD9t3up80
sGJ9PA5JV3aihsjD1/LLRqjP355+H2vOF+D2n8vBBNxPf07jwUGV6KFccgMxD6RS
udI2bMU2mrTn67SbJ88KdrDLfjuGi+VkuZJwDn7TqNw45W6vO9XB4WVBuUEeHIlq
1/X0qbcxgUdC3pp5/aAu8E5it016TQGRRwo2L9y/hOceFB0cHVhSQBzIJM+DV1Zq
PxTX2/nlIw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:36 2024 by rpki-client on console-fra.rpki-client.org