Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35382e302f32342d3234203d3e20323733363833.roa
File:                     34352e3233352e35382e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          s+isFV4RnikM+0ok+MqmccKZP5/Tg0f7z2muUzFmbE4=
Subject key identifier:   9E:BA:8D:64:61:F0:83:25:93:C1:E9:8F:E7:74:78:BA:41:1E:22:90
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       4117687ED3A8959D01ED114CE83198667EF44962
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35382e302f32342d3234203d3e20323733363833.roa
Signing time:             Fri 23 Aug 2024 19:44:58 +0000
ROA not before:           Fri 23 Aug 2024 19:39:58 +0000
ROA not after:            Fri 22 Aug 2025 19:44:58 +0000
asID:                     273683
IP address blocks:        45.235.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:17:68:7e:d3:a8:95:9d:01:ed:11:4c:e8:31:98:66:7e:f4:49:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Aug 23 19:39:58 2024 GMT
            Not After : Aug 22 19:44:58 2025 GMT
        Subject: CN=9EBA8D6461F0832593C1E98FE77478BA411E2290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a8:d5:7c:45:62:89:1e:c6:7e:67:19:a2:3e:
                    c7:d3:db:eb:de:28:ae:07:72:c9:48:32:c6:45:9b:
                    14:12:ad:a6:c7:46:7d:95:7b:f2:f9:67:7e:61:17:
                    d8:93:de:bc:c8:6e:54:84:bb:2c:4c:f0:08:58:f4:
                    53:e6:f6:c9:f1:25:a5:72:59:85:08:76:e0:6a:db:
                    9e:37:1e:d7:c8:0e:04:85:88:6d:61:ab:35:66:7a:
                    3c:e2:bf:50:c4:02:e5:ae:d0:53:1b:3d:b2:0c:9e:
                    b6:40:c5:9a:31:ea:36:78:e7:44:b8:7e:d6:1b:0f:
                    19:cd:ae:08:9f:18:42:e7:23:fe:04:09:38:48:cd:
                    bf:6d:b1:c0:81:57:67:07:82:de:be:70:ed:14:f2:
                    d5:3a:36:6f:bf:1b:bc:74:0f:43:bd:26:80:9b:cd:
                    5b:95:ff:aa:dd:d0:d4:67:71:92:64:2e:3d:c4:7b:
                    97:f1:b0:d7:69:e6:51:f0:42:cc:f4:40:fc:b5:d6:
                    1d:a4:58:13:83:69:0f:3c:d2:a1:0b:a4:bf:c2:4e:
                    8d:ba:1d:33:03:0d:9b:a3:74:e2:ee:e0:29:d0:b7:
                    a5:91:11:b8:7e:4b:9c:82:65:ec:40:bd:6f:f9:a6:
                    ff:f6:54:40:9a:28:11:c0:7b:21:b2:e0:9f:f5:fc:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BA:8D:64:61:F0:83:25:93:C1:E9:8F:E7:74:78:BA:41:1E:22:90
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233352e35382e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:52:2d:d0:ac:a3:4d:3c:37:70:14:4a:ab:67:8c:38:86:41:
         d0:11:b4:80:1c:02:5e:58:ff:81:f5:8b:ba:d0:72:ce:a7:f8:
         ca:c7:a5:b3:fc:b8:c4:1f:89:c2:fd:1f:33:e3:a7:da:ce:13:
         6f:fb:24:02:4b:e9:bb:f1:e0:66:f2:23:60:f4:5d:09:8b:c9:
         90:ac:bd:5b:6a:d2:b9:92:3f:13:68:ad:49:83:86:3f:c1:c5:
         c5:6b:b9:23:48:65:c9:55:47:fc:2c:2f:53:ed:37:01:d7:e2:
         18:7f:ad:cc:c3:7b:61:08:d2:0e:be:03:4d:d5:c5:39:f8:81:
         c8:51:3d:43:c3:1a:5b:5e:d7:de:67:52:c5:05:77:16:b9:a7:
         ab:a6:8d:b8:1d:a8:dd:44:d4:fa:e2:7c:f6:2c:10:cd:15:9b:
         55:00:7d:6b:b8:f8:dc:ae:3d:64:f9:e8:8f:81:43:4a:11:a0:
         4e:fa:ca:4b:ba:87:00:37:75:67:8a:61:cb:29:17:b1:72:b0:
         66:bb:56:fc:6a:73:ad:a7:74:57:24:76:99:4b:6c:b3:27:ba:
         91:f6:9d:84:b6:9c:82:38:c4:d2:28:5e:c9:4f:7e:50:ff:e7:
         c5:b8:ac:1d:0d:50:ab:1f:c1:b5:99:53:af:a0:f0:5b:f9:a6:
         b5:dd:e6:a4
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUQRdoftOolZ0B7RFM6DGYZn70SWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNDA4MjMxOTM5NThaFw0yNTA4MjIxOTQ0NThaMDMxMTAvBgNV
BAMTKDlFQkE4RDY0NjFGMDgzMjU5M0MxRTk4RkU3NzQ3OEJBNDExRTIyOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbqNV8RWKJHsZ+ZxmiPsfT2+ve
KK4HcslIMsZFmxQSrabHRn2Ve/L5Z35hF9iT3rzIblSEuyxM8AhY9FPm9snxJaVy
WYUIduBq2543HtfIDgSFiG1hqzVmejziv1DEAuWu0FMbPbIMnrZAxZox6jZ450S4
ftYbDxnNrgifGELnI/4ECThIzb9tscCBV2cHgt6+cO0U8tU6Nm+/G7x0D0O9JoCb
zVuV/6rd0NRncZJkLj3Ee5fxsNdp5lHwQsz0QPy11h2kWBODaQ880qELpL/CTo26
HTMDDZujdOLu4CnQt6WREbh+S5yCZexAvW/5pv/2VECaKBHAeyGy4J/1/ObJAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUnrqNZGHwgyWTwemP53R4ukEeIpAwHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzQz
NTJlMzIzMzM1MmUzNTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzYz
ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQALes6MA0GCSqGSIb3DQEBCwUAA4IBAQBwUi3QrKNNPDdw
FEqrZ4w4hkHQEbSAHAJeWP+B9Yu60HLOp/jKx6Wz/LjEH4nC/R8z46fazhNv+yQC
S+m78eBm8iNg9F0Ji8mQrL1batK5kj8TaK1Jg4Y/wcXFa7kjSGXJVUf8LC9T7TcB
1+IYf63Mw3thCNIOvgNN1cU5+IHIUT1DwxpbXtfeZ1LFBXcWuaerpo24HajdRNT6
4nz2LBDNFZtVAH1ruPjcrj1k+eiPgUNKEaBO+spLuocAN3VnimHLKRexcrBmu1b8
anOtp3RXJHaZS2yzJ7qR9p2EtpyCOMTSKF7JT35Q/+fFuKwdDVCrH8G1mVOvoPBb
+aa13eak
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:51 2024 by rpki-client on console-ams.rpki-client.org