Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/34352e3233342e3130342e302f32322d3234203d3e20323637333537.roa
File:                     34352e3233342e3130342e302f32322d3234203d3e20323637333537.roa (raw, json)
Hash identifier:          cF7epytEgKWAnHjxAlvX0ADM3uZNfeKnE9ylRKQ4OS4=
Subject key identifier:   2A:48:2A:9B:50:84:F5:96:37:09:0A:AC:84:EF:1B:FE:59:2C:89:E1
Certificate issuer:       /CN=17ED80E395F8EFDA83018AB531CF36E32B3374B4
Certificate serial:       5733AD04A58E937E9E94AEB249112A31CA466F17
Authority key identifier: 17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/34352e3233342e3130342e302f32322d3234203d3e20323637333537.roa
Signing time:             Thu 04 Apr 2024 08:14:55 +0000
ROA not before:           Thu 04 Apr 2024 08:09:55 +0000
ROA not after:            Thu 03 Apr 2025 08:14:55 +0000
asID:                     267357
IP address blocks:        45.234.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:33:ad:04:a5:8e:93:7e:9e:94:ae:b2:49:11:2a:31:ca:46:6f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ED80E395F8EFDA83018AB531CF36E32B3374B4
        Validity
            Not Before: Apr  4 08:09:55 2024 GMT
            Not After : Apr  3 08:14:55 2025 GMT
        Subject: CN=2A482A9B5084F59637090AAC84EF1BFE592C89E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9c:0b:e9:b5:cc:70:ea:b5:99:e1:1a:09:0a:
                    5a:af:59:f3:b3:c5:bf:0b:12:f3:89:44:be:77:78:
                    4c:fb:2a:d7:4c:f6:33:50:a8:5e:bd:89:14:84:38:
                    d1:7e:d9:ed:d0:a7:9a:f2:f3:fd:1e:fb:ad:e8:a1:
                    2c:6d:8d:a7:b2:12:5d:96:77:d7:27:ae:19:f1:6d:
                    8c:19:31:fb:68:a9:df:c3:a1:01:40:41:73:db:01:
                    20:a9:f9:90:ed:45:51:3f:82:76:dd:e8:0b:f1:2f:
                    f7:ce:0a:f8:d4:3f:f7:e9:2a:ee:73:3e:7f:75:0f:
                    f1:28:c2:ba:3e:a4:3a:d6:59:c2:92:a5:3d:a4:1c:
                    87:01:2a:fb:2a:ca:5f:7f:65:ea:d7:c0:6e:ac:ed:
                    93:61:b4:71:99:5f:3b:d8:51:a7:e9:cc:23:9d:59:
                    4b:53:f0:73:83:dc:fe:dc:fa:7d:1c:65:a9:50:49:
                    90:37:9a:7d:0b:d6:3a:a1:0c:fe:d3:ea:5a:4e:52:
                    4b:17:b6:5c:37:6f:91:27:5d:a1:fe:8f:48:ca:ff:
                    c0:a2:82:04:62:eb:30:ed:8a:e4:cf:de:17:69:fc:
                    8d:64:d2:af:4a:71:d7:99:64:8a:0c:f0:ca:06:b8:
                    c6:c6:5b:4c:9f:dc:7a:c2:03:07:01:f4:eb:06:ce:
                    6b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:48:2A:9B:50:84:F5:96:37:09:0A:AC:84:EF:1B:FE:59:2C:89:E1
            X509v3 Authority Key Identifier:
                keyid:17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/34352e3233342e3130342e302f32322d3234203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:69:b5:a8:9e:b0:da:d6:9b:19:d1:91:ab:7e:9e:77:4f:0f:
         32:51:97:34:95:c7:39:2f:83:6f:c9:81:50:1b:8d:58:97:9b:
         d8:3e:9f:cf:49:bf:6b:5c:b7:f5:48:5f:fe:32:3a:46:46:fe:
         d9:b7:7d:ed:06:6c:6e:d8:71:39:63:bb:99:2e:a0:d4:06:81:
         d4:a1:0f:f4:a9:15:36:96:71:b0:bb:da:66:b4:e3:8d:fa:28:
         93:63:be:b5:05:d6:f9:c8:a8:80:d1:c4:01:6a:6c:ca:b9:7d:
         75:6a:ad:d2:24:65:65:86:c9:be:20:51:28:c8:a5:b6:07:37:
         48:18:dd:5f:c8:e2:72:91:aa:81:e1:29:12:65:e4:f0:80:2d:
         1c:bc:9d:4a:81:1e:b0:86:36:e4:7b:79:16:f7:19:f0:fd:eb:
         88:10:0d:9f:2d:51:d2:06:86:1a:7a:1d:62:ad:b2:52:ed:d9:
         ba:5f:83:e7:4d:0a:52:5c:ef:d0:aa:9e:d5:77:87:0b:8b:fb:
         f8:c4:bd:09:ba:67:ac:08:d3:77:c6:fe:08:e2:bc:29:d6:85:
         8b:06:93:e7:b5:f7:12:48:71:c2:3d:b4:fb:c1:50:fb:6f:bf:
         4b:c7:12:30:c4:53:21:ce:46:fd:fc:f2:33:c8:bc:db:e0:56:
         4c:b9:d0:fd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVzOtBKWOk36elK6ySREqMcpGbxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdFRDgwRTM5NUY4RUZEQTgzMDE4QUI1MzFDRjM2RTMy
QjMzNzRCNDAeFw0yNDA0MDQwODA5NTVaFw0yNTA0MDMwODE0NTVaMDMxMTAvBgNV
BAMTKDJBNDgyQTlCNTA4NEY1OTYzNzA5MEFBQzg0RUYxQkZFNTkyQzg5RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmnAvptcxw6rWZ4RoJClqvWfOz
xb8LEvOJRL53eEz7KtdM9jNQqF69iRSEONF+2e3Qp5ry8/0e+63ooSxtjaeyEl2W
d9cnrhnxbYwZMftoqd/DoQFAQXPbASCp+ZDtRVE/gnbd6AvxL/fOCvjUP/fpKu5z
Pn91D/Eowro+pDrWWcKSpT2kHIcBKvsqyl9/ZerXwG6s7ZNhtHGZXzvYUafpzCOd
WUtT8HOD3P7c+n0cZalQSZA3mn0L1jqhDP7T6lpOUksXtlw3b5EnXaH+j0jK/8Ci
ggRi6zDtiuTP3hdp/I1k0q9KcdeZZIoM8MoGuMbGW0yf3HrCAwcB9OsGzmuBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKkgqm1CE9ZY3CQqshO8b/lksieEwHwYDVR0j
BBgwFoAUF+2A45X479qDAYq1Mc824yszdLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTZKUnVycnlCVHpVS2dpNVViVU5KUE1Qa0ptckt1TjJxSFBLVWlrWjM4
OVUvMS8xN0VEODBFMzk1RjhFRkRBODMwMThBQjUzMUNGMzZFMzJCMzM3NEI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3RUQ4MEUzOTVGOEVGREE4
MzAxOEFCNTMxQ0YzNkUzMkIzMzc0QjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U2SlJ1cnJ5QlR6VUtnaTVVYlVOSlBNUGtKbXJLdU4ycUhQS1Vpa1ozODlVLzEv
MzQzNTJlMzIzMzM0MmUzMTMwMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMzM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt6mgwDQYJKoZIhvcNAQELBQADggEBABlptaie
sNrWmxnRkat+nndPDzJRlzSVxzkvg2/JgVAbjViXm9g+n89Jv2tct/VIX/4yOkZG
/tm3fe0GbG7YcTlju5kuoNQGgdShD/SpFTaWcbC72ma04436KJNjvrUF1vnIqIDR
xAFqbMq5fXVqrdIkZWWGyb4gUSjIpbYHN0gY3V/I4nKRqoHhKRJl5PCALRy8nUqB
HrCGNuR7eRb3GfD964gQDZ8tUdIGhhp6HWKtslLt2bpfg+dNClJc79CqntV3hwuL
+/jEvQm6Z6wI03fG/gjivCnWhYsGk+e19xJIccI9tPvBUPtvv0vHEjDEUyHORv38
8jPIvNvgVky50P0=
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:54 2024 by rpki-client on console-fra.rpki-client.org