Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32322d3232203d3e20323639353137.roa
File:                     34352e3138382e37322e302f32322d3232203d3e20323639353137.roa (raw, json)
Hash identifier:          UFcoekRuPN0OBfrLAGlrPGhXkB/M/SHByrNO5Ww2LjY=
Subject key identifier:   85:89:69:5B:65:A1:44:85:EB:47:17:99:0B:FC:7F:14:1C:93:39:A7
Certificate issuer:       /CN=C47A0E8B419D9A48CB19E98AFC4DE74B767C9441
Certificate serial:       7F5BFE56C9A7A3D9F9A305E8AB67D4E3FC20C025
Authority key identifier: C4:7A:0E:8B:41:9D:9A:48:CB:19:E9:8A:FC:4D:E7:4B:76:7C:94:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32322d3232203d3e20323639353137.roa
Signing time:             Sun 03 Nov 2024 18:49:43 +0000
ROA not before:           Sun 03 Nov 2024 18:44:43 +0000
ROA not after:            Sun 02 Nov 2025 18:49:43 +0000
asID:                     269517
IP address blocks:        45.188.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.crl
                          rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5b:fe:56:c9:a7:a3:d9:f9:a3:05:e8:ab:67:d4:e3:fc:20:c0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47A0E8B419D9A48CB19E98AFC4DE74B767C9441
        Validity
            Not Before: Nov  3 18:44:43 2024 GMT
            Not After : Nov  2 18:49:43 2025 GMT
        Subject: CN=8589695B65A14485EB4717990BFC7F141C9339A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:b7:20:c0:93:44:8a:fa:a6:23:9e:95:8f:
                    9a:b8:d5:7f:bc:8c:42:76:74:96:c7:56:0b:81:40:
                    88:d9:6f:6a:e3:42:e2:4c:37:c1:7d:aa:33:f9:54:
                    b7:d7:b8:40:3d:77:1d:bc:70:7c:4e:c2:bf:cd:07:
                    9d:9f:35:da:2a:a5:2c:83:e4:69:c6:ce:11:fb:b2:
                    ba:91:bd:56:fe:30:97:e5:59:a4:ae:23:4e:01:59:
                    90:15:c8:5e:36:dc:f7:df:f0:46:d0:58:47:af:0a:
                    32:57:c9:bc:ab:3a:9a:ac:1f:23:99:d6:4b:6b:1e:
                    15:77:1d:bd:f8:bf:32:25:c1:1a:8d:4e:0a:d8:fa:
                    dd:b5:4f:42:29:63:5c:8e:23:f8:cc:fc:9a:10:8f:
                    8f:06:9c:c1:e4:44:e5:40:72:8e:09:48:a9:6a:ca:
                    f4:58:e5:43:69:53:49:d3:f7:30:67:75:5e:2f:42:
                    86:78:11:54:22:99:31:14:33:fb:9a:65:be:8b:9d:
                    d4:ac:3e:ea:df:da:2a:fb:88:bd:00:6e:98:2f:9f:
                    98:65:9c:6e:ad:f2:f7:d3:22:00:02:31:84:65:f3:
                    6f:91:4f:6c:5e:5a:3b:a1:52:2f:05:61:bd:2b:ac:
                    3e:9e:46:a0:6c:f2:20:d6:98:68:21:98:d7:9b:59:
                    00:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:89:69:5B:65:A1:44:85:EB:47:17:99:0B:FC:7F:14:1C:93:39:A7
            X509v3 Authority Key Identifier:
                keyid:C4:7A:0E:8B:41:9D:9A:48:CB:19:E9:8A:FC:4D:E7:4B:76:7C:94:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32322d3232203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:c0:23:2a:59:d4:b2:7e:9b:05:d2:89:63:1c:24:f4:ca:ed:
         c0:b3:62:24:48:94:b3:6a:e8:54:6c:23:a5:8b:03:2c:69:38:
         91:5f:d3:0f:b3:e1:af:25:b7:4e:4a:4f:96:fa:b6:cc:2a:22:
         85:9f:7c:83:9c:be:98:a4:d9:fe:77:57:3a:91:39:6a:4c:8a:
         c9:89:b0:ff:0f:15:a3:2a:a7:57:76:82:59:61:48:c8:c4:4f:
         a3:4a:02:5c:16:30:5e:95:95:f0:b1:b5:ad:c1:0f:1e:d9:36:
         ac:b4:e4:93:8c:5c:7a:8e:cd:d2:0f:bb:47:e0:22:d1:13:0f:
         df:88:4a:fb:58:f2:2a:b0:eb:99:59:da:40:4c:99:22:ad:22:
         40:ba:5b:9b:b2:ee:cc:2f:7c:72:77:30:39:ae:d2:26:4f:b3:
         a3:b5:b7:4d:1d:cf:ac:cb:26:11:9e:85:6f:39:e7:3d:1d:8d:
         cb:b6:aa:bc:b1:7f:c0:91:70:d2:6c:f6:f9:91:ae:9a:06:a3:
         15:f9:ab:fa:7b:41:1e:6e:85:81:e8:9e:46:91:3a:da:19:15:
         71:c9:7b:e9:4e:13:32:0e:9f:76:95:0e:da:dd:12:3b:ed:5b:
         d4:bc:27:f5:ca:c0:2f:e4:9a:ee:5f:30:a9:76:d0:93:6c:d1:
         4f:df:bf:1f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUf1v+Vsmno9n5owXoq2fU4/wgwCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3QTBFOEI0MTlEOUE0OENCMTlFOThBRkM0REU3NEI3
NjdDOTQ0MTAeFw0yNDExMDMxODQ0NDNaFw0yNTExMDIxODQ5NDNaMDMxMTAvBgNV
BAMTKDg1ODk2OTVCNjVBMTQ0ODVFQjQ3MTc5OTBCRkM3RjE0MUM5MzM5QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJWbcgwJNEivqmI56Vj5q41X+8
jEJ2dJbHVguBQIjZb2rjQuJMN8F9qjP5VLfXuEA9dx28cHxOwr/NB52fNdoqpSyD
5GnGzhH7srqRvVb+MJflWaSuI04BWZAVyF423Pff8EbQWEevCjJXybyrOpqsHyOZ
1ktrHhV3Hb34vzIlwRqNTgrY+t21T0IpY1yOI/jM/JoQj48GnMHkROVAco4JSKlq
yvRY5UNpU0nT9zBndV4vQoZ4EVQimTEUM/uaZb6LndSsPurf2ir7iL0Abpgvn5hl
nG6t8vfTIgACMYRl82+RT2xeWjuhUi8FYb0rrD6eRqBs8iDWmGghmNebWQCTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhYlpW2WhRIXrRxeZC/x/FByTOacwHwYDVR0j
BBgwFoAUxHoOi0GdmkjLGemK/E3nS3Z8lEEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBMZzZuYmRKZ3ZWaGs5cGQxeVJ2ZlZMeXJYc1FUQUdwbnVNOFA5Yk1v
dmIvMC9DNDdBMEU4QjQxOUQ5QTQ4Q0IxOUU5OEFGQzRERTc0Qjc2N0M5NDQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0N0EwRThCNDE5RDlBNDhD
QjE5RTk4QUZDNERFNzRCNzY3Qzk0NDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VwTGc2bmJkSmd2VmhrOXBkMXlSdmZWTHlyWHNRVEFHcG51TThQOWJNb3ZiLzAv
MzQzNTJlMzEzODM4MmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM5
MzUzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbxIMA0GCSqGSIb3DQEBCwUAA4IBAQCEwCMqWdSy
fpsF0oljHCT0yu3As2IkSJSzauhUbCOliwMsaTiRX9MPs+GvJbdOSk+W+rbMKiKF
n3yDnL6YpNn+d1c6kTlqTIrJibD/DxWjKqdXdoJZYUjIxE+jSgJcFjBelZXwsbWt
wQ8e2TastOSTjFx6js3SD7tH4CLREw/fiEr7WPIqsOuZWdpATJkirSJAulubsu7M
L3xydzA5rtImT7OjtbdNHc+syyYRnoVvOec9HY3Ltqq8sX/AkXDSbPb5ka6aBqMV
+av6e0EeboWB6J5GkTraGRVxyXvpThMyDp92lQ7a3RI77VvUvCf1ysAv5JruXzCp
dtCTbNFP378f
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:07 2024 by rpki-client on console-fra.rpki-client.org