Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235342e302f32332d3233203d3e20323636393532.roa
File:                     34352e3232352e3235342e302f32332d3233203d3e20323636393532.roa (raw, json)
Hash identifier:          0IHDRoLLwOG0XApUQ0519HZN1oaYwAa1rjwZ1v9DkR4=
Subject key identifier:   36:4B:7F:F4:97:CD:F1:F0:02:AC:22:18:46:92:ED:50:3C:B4:62:09
Certificate issuer:       /CN=F8017B5E805C4A715B0DA978F817ABB4B74EEB52
Certificate serial:       308658E33E6BECC77F7831B230169E9F0C0E008D
Authority key identifier: F8:01:7B:5E:80:5C:4A:71:5B:0D:A9:78:F8:17:AB:B4:B7:4E:EB:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235342e302f32332d3233203d3e20323636393532.roa
Signing time:             Mon 08 Apr 2024 16:22:39 +0000
ROA not before:           Mon 08 Apr 2024 16:17:39 +0000
ROA not after:            Mon 07 Apr 2025 16:22:39 +0000
asID:                     266952
IP address blocks:        45.225.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.crl
                          rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:86:58:e3:3e:6b:ec:c7:7f:78:31:b2:30:16:9e:9f:0c:0e:00:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8017B5E805C4A715B0DA978F817ABB4B74EEB52
        Validity
            Not Before: Apr  8 16:17:39 2024 GMT
            Not After : Apr  7 16:22:39 2025 GMT
        Subject: CN=364B7FF497CDF1F002AC22184692ED503CB46209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:03:e3:87:0c:b7:b0:c0:5f:a7:75:52:f4:
                    12:c1:46:f6:c5:db:01:5d:0d:13:d6:c6:f8:b2:47:
                    3f:a4:5e:7d:ec:2f:7d:db:f0:aa:56:0c:43:57:b1:
                    99:94:34:48:15:92:58:a7:f4:66:f4:8c:7e:b2:d4:
                    cf:cf:4c:bd:e5:53:a0:d1:1e:99:f9:ec:95:ed:a6:
                    f6:74:c8:40:34:1a:d4:56:cd:c1:66:87:f5:b4:d3:
                    79:9d:d3:59:62:f9:37:74:9c:8f:39:c4:3b:25:31:
                    57:b3:05:2e:43:7c:e1:f3:c2:20:fe:d7:f8:70:70:
                    92:ef:39:bc:09:ce:64:d1:9f:53:b5:3b:de:9b:1f:
                    91:74:b7:a5:0e:01:e1:f1:95:31:af:39:77:e9:40:
                    c4:08:b6:3b:3f:c8:5f:da:20:2f:e0:0d:fb:91:f2:
                    05:5e:98:72:0e:b8:7c:0d:7f:1b:6e:0c:fc:01:9d:
                    30:8b:74:de:4e:92:09:13:19:8b:47:94:4d:8c:d1:
                    ff:ad:e0:48:7e:ae:a6:e5:40:14:9e:ba:00:01:4f:
                    dd:10:3c:c7:eb:16:b7:d3:96:25:c6:90:c6:0c:e4:
                    6f:69:11:c5:bd:d2:bc:f0:33:b0:1e:f3:fd:16:0c:
                    7e:6f:84:fb:1e:a4:60:a2:7c:2d:a0:64:2d:a6:5a:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4B:7F:F4:97:CD:F1:F0:02:AC:22:18:46:92:ED:50:3C:B4:62:09
            X509v3 Authority Key Identifier:
                keyid:F8:01:7B:5E:80:5C:4A:71:5B:0D:A9:78:F8:17:AB:B4:B7:4E:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235342e302f32332d3233203d3e20323636393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:67:bd:3d:9c:a3:96:22:43:4f:b7:33:6e:b3:01:74:0a:74:
         ca:5e:74:0e:32:39:f8:b6:b3:45:df:9a:4c:89:49:f1:9f:35:
         1d:3b:27:e0:0b:f4:7f:94:a8:f4:f2:05:df:9a:c0:f0:c8:cf:
         53:ec:b1:b8:c4:9c:7e:3f:e2:e6:e1:90:d5:d8:45:12:4a:6e:
         b8:70:fa:20:f1:b6:06:63:24:bb:94:7b:78:52:21:03:49:83:
         2b:35:bd:69:d6:84:61:37:32:06:7d:c2:93:85:1d:7d:ca:7d:
         bf:b8:fa:a4:4d:5c:4a:7d:c9:5a:7d:4c:21:b3:df:43:b2:e6:
         b2:e1:95:2a:13:6b:84:71:2a:00:2f:a7:89:71:09:b0:0a:f4:
         63:f8:e8:cf:54:e9:9c:3c:4a:49:b9:dd:57:64:33:05:89:4e:
         ce:86:b2:2c:6b:14:a8:f9:2e:24:06:5f:7c:3b:5e:b5:78:79:
         b6:55:d3:91:3f:11:4e:46:77:41:98:2c:5b:d8:f4:97:75:e9:
         8f:ac:03:db:1c:74:56:4b:e7:0a:3e:a2:25:a1:bc:06:c8:02:
         e7:67:e2:7a:4d:44:0d:43:c7:eb:c0:69:ac:46:39:7b:44:5c:
         11:00:e1:e9:70:7f:86:ac:0b:86:00:80:0f:1c:9b:fd:9a:cb:
         99:87:f2:ca
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMIZY4z5r7Md/eDGyMBaenwwOAI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjgwMTdCNUU4MDVDNEE3MTVCMERBOTc4RjgxN0FCQjRC
NzRFRUI1MjAeFw0yNDA0MDgxNjE3MzlaFw0yNTA0MDcxNjIyMzlaMDMxMTAvBgNV
BAMTKDM2NEI3RkY0OTdDREYxRjAwMkFDMjIxODQ2OTJFRDUwM0NCNDYyMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DAPjhwy3sMBfp3VS9BLBRvbF
2wFdDRPWxviyRz+kXn3sL33b8KpWDENXsZmUNEgVklin9Gb0jH6y1M/PTL3lU6DR
Hpn57JXtpvZ0yEA0GtRWzcFmh/W003md01li+Td0nI85xDslMVezBS5DfOHzwiD+
1/hwcJLvObwJzmTRn1O1O96bH5F0t6UOAeHxlTGvOXfpQMQItjs/yF/aIC/gDfuR
8gVemHIOuHwNfxtuDPwBnTCLdN5OkgkTGYtHlE2M0f+t4Eh+rqblQBSeugABT90Q
PMfrFrfTliXGkMYM5G9pEcW90rzwM7Ae8/0WDH5vhPsepGCifC2gZC2mWrnVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNkt/9JfN8fACrCIYRpLtUDy0YgkwHwYDVR0j
BBgwFoAU+AF7XoBcSnFbDal4+BertLdO61IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGcyVFN3dFRuNGdpQ2ZzUThKWldGU0RkNE1ac3E1NjRyVkZDZnRtUEI0
Y1QvMC9GODAxN0I1RTgwNUM0QTcxNUIwREE5NzhGODE3QUJCNEI3NEVFQjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4MDE3QjVFODA1QzRBNzE1
QjBEQTk3OEY4MTdBQkI0Qjc0RUVCNTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RnMlRTd3RUbjRnaUNmc1E4SlpXRlNEZDRNWnNxNTY0clZGQ2Z0bVBCNGNULzAv
MzQzNTJlMzIzMjM1MmUzMjM1MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzYzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt4f4wDQYJKoZIhvcNAQELBQADggEBABVnvT2c
o5YiQ0+3M26zAXQKdMpedA4yOfi2s0XfmkyJSfGfNR07J+AL9H+UqPTyBd+awPDI
z1PssbjEnH4/4ubhkNXYRRJKbrhw+iDxtgZjJLuUe3hSIQNJgys1vWnWhGE3MgZ9
wpOFHX3Kfb+4+qRNXEp9yVp9TCGz30Oy5rLhlSoTa4RxKgAvp4lxCbAK9GP46M9U
6Zw8Skm53VdkMwWJTs6GsixrFKj5LiQGX3w7XrV4ebZV05E/EU5Gd0GYLFvY9Jd1
6Y+sA9scdFZL5wo+oiWhvAbIAudn4npNRA1Dx+vAaaxGOXtEXBEA4elwf4asC4YA
gA8cm/2ay5mH8so=
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:15:02 2024 by rpki-client on console-fra.rpki-client.org