Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3232342e3139362e302f32332d3233203d3e20323733363833.roa
File:                     34352e3232342e3139362e302f32332d3233203d3e20323733363833.roa (raw, json)
Hash identifier:          g85nMwSrheuHnv31K4Jza33+FkS7/HcElGj2XOXgxAw=
Subject key identifier:   49:8E:19:01:6E:F2:D1:02:00:9F:8E:84:03:34:4B:DA:81:F3:6E:D0
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       34E5AF4019F4E16615645E4926BA8AAF1AD69491
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3232342e3139362e302f32332d3233203d3e20323733363833.roa
Signing time:             Tue 22 Oct 2024 07:10:32 +0000
ROA not before:           Tue 22 Oct 2024 07:05:32 +0000
ROA not after:            Tue 21 Oct 2025 07:10:32 +0000
asID:                     273683
IP address blocks:        45.224.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e5:af:40:19:f4:e1:66:15:64:5e:49:26:ba:8a:af:1a:d6:94:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct 22 07:05:32 2024 GMT
            Not After : Oct 21 07:10:32 2025 GMT
        Subject: CN=498E19016EF2D102009F8E8403344BDA81F36ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:75:08:04:b5:73:17:2b:ac:36:27:45:87:6d:
                    2f:0b:82:6a:0e:9c:b2:75:c7:af:96:db:be:28:c7:
                    9a:30:94:08:ab:85:70:4a:40:14:33:4b:cc:17:b5:
                    62:ce:71:30:d6:00:48:c6:62:f8:a2:85:d3:3e:fc:
                    92:a1:16:d6:0f:ba:58:5e:d5:ad:15:52:08:1a:97:
                    e5:db:a8:a5:ac:01:4b:93:d0:a0:21:64:b7:9d:01:
                    ea:a9:1f:c8:70:ed:33:23:85:16:ff:e3:60:ae:45:
                    0e:45:9e:fc:4e:6a:8b:1c:85:9b:f0:70:0f:9c:4e:
                    c5:b3:b4:cd:89:08:42:6b:86:ee:a5:51:1d:9b:54:
                    a9:51:7a:22:63:a9:81:59:32:af:87:46:11:32:56:
                    92:75:3f:7d:b4:90:96:f6:63:87:9c:9d:3c:af:4f:
                    42:41:42:1d:e2:99:07:64:af:0d:9c:71:d1:86:df:
                    07:98:23:77:db:16:a9:b0:11:fa:41:67:b9:da:6f:
                    b6:0d:56:21:58:23:2c:0f:2f:fd:a8:03:91:f1:90:
                    18:3a:b0:15:23:d6:ba:65:16:90:f3:4b:e4:a1:46:
                    d1:b3:77:98:4f:67:23:b0:fb:1e:74:d0:f0:8c:6e:
                    0f:8d:e4:b1:e7:ad:40:fd:98:b0:f3:ca:f1:fc:a7:
                    fb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8E:19:01:6E:F2:D1:02:00:9F:8E:84:03:34:4B:DA:81:F3:6E:D0
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3232342e3139362e302f32332d3233203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:45:d7:b4:86:a4:e9:b5:19:1e:77:7c:62:75:14:c7:3d:be:
         f4:c6:e9:21:7d:a6:be:c3:de:14:d6:7b:18:b9:da:8f:70:2a:
         2c:03:e7:80:93:21:76:84:54:1f:56:27:a2:41:a2:18:26:c9:
         41:d8:5d:94:3e:00:0a:39:15:66:33:ef:92:2e:ca:f7:fe:e9:
         47:78:79:01:99:6e:33:ac:27:54:07:90:c4:4a:4e:29:00:94:
         c2:cb:a8:fb:d6:2b:eb:bd:c4:a3:45:44:9a:9e:3a:aa:00:d2:
         9e:33:8d:9d:ad:fb:9a:91:a4:92:69:1a:1d:9c:c2:36:90:74:
         48:21:80:fd:6f:51:b2:38:d2:7c:c4:17:f8:1f:e5:05:4b:f7:
         44:f2:6c:b4:fe:3c:0a:3d:80:8f:95:52:4f:38:d9:10:c7:39:
         be:21:5e:6e:30:c0:38:db:ab:c5:29:cd:65:46:08:5e:2d:49:
         3f:46:6c:9c:78:4e:60:a4:f5:f4:0b:e7:fe:14:7b:96:b3:7f:
         26:6a:7e:40:bd:cc:a9:7c:e8:9e:1d:73:96:23:61:4b:b4:5c:
         14:2e:a6:68:fb:5e:96:5a:cc:e2:e6:5d:74:81:9e:6e:da:0d:
         20:55:f3:57:53:ac:62:c6:19:72:a0:65:e1:18:31:97:7e:23:
         45:8d:0f:e4
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUNOWvQBn04WYVZF5JJrqKrxrWlJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNDEwMjIwNzA1MzJaFw0yNTEwMjEwNzEwMzJaMDMxMTAvBgNV
BAMTKDQ5OEUxOTAxNkVGMkQxMDIwMDlGOEU4NDAzMzQ0QkRBODFGMzZFRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWdQgEtXMXK6w2J0WHbS8LgmoO
nLJ1x6+W274ox5owlAirhXBKQBQzS8wXtWLOcTDWAEjGYviihdM+/JKhFtYPulhe
1a0VUggal+XbqKWsAUuT0KAhZLedAeqpH8hw7TMjhRb/42CuRQ5FnvxOaoschZvw
cA+cTsWztM2JCEJrhu6lUR2bVKlReiJjqYFZMq+HRhEyVpJ1P320kJb2Y4ecnTyv
T0JBQh3imQdkrw2ccdGG3weYI3fbFqmwEfpBZ7nab7YNViFYIywPL/2oA5HxkBg6
sBUj1rplFpDzS+ShRtGzd5hPZyOw+x500PCMbg+N5LHnrUD9mLDzyvH8p/s3AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUSY4ZAW7y0QIAn46EAzRL2oHzbtAwHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzQz
NTJlMzIzMjM0MmUzMTM5MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3MzMz
NjM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAEt4MQwDQYJKoZIhvcNAQELBQADggEBAHVF17SGpOm1
GR53fGJ1FMc9vvTG6SF9pr7D3hTWexi52o9wKiwD54CTIXaEVB9WJ6JBohgmyUHY
XZQ+AAo5FWYz75Iuyvf+6Ud4eQGZbjOsJ1QHkMRKTikAlMLLqPvWK+u9xKNFRJqe
OqoA0p4zjZ2t+5qRpJJpGh2cwjaQdEghgP1vUbI40nzEF/gf5QVL90TybLT+PAo9
gI+VUk842RDHOb4hXm4wwDjbq8UpzWVGCF4tST9GbJx4TmCk9fQL5/4Ue5azfyZq
fkC9zKl86J4dc5YjYUu0XBQupmj7XpZazOLmXXSBnm7aDSBV81dTrGLGGXKgZeEY
MZd+I0WND+Q=
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:57 2024 by rpki-client on console-fra.rpki-client.org