Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/34352e372e3139322e302f32332d3234203d3e20323636363037.roa
File:                     34352e372e3139322e302f32332d3234203d3e20323636363037.roa (raw, json)
Hash identifier:          5EQv+7YlFftXGT825wRRPjltmmLcerWpi54aZ7ulFso=
Subject key identifier:   E0:53:72:E3:5D:96:17:69:D7:74:F9:F4:44:6F:8F:82:93:A2:2D:CF
Certificate issuer:       /CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
Certificate serial:       37F0DACB14C971C7AB7E4E14CEA806F1F7F90B59
Authority key identifier: 51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/34352e372e3139322e302f32332d3234203d3e20323636363037.roa
Signing time:             Wed 03 Apr 2024 21:27:05 +0000
ROA not before:           Wed 03 Apr 2024 21:22:05 +0000
ROA not after:            Wed 02 Apr 2025 21:27:05 +0000
asID:                     266607
IP address blocks:        45.7.192.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl
                          rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f0:da:cb:14:c9:71:c7:ab:7e:4e:14:ce:a8:06:f1:f7:f9:0b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
        Validity
            Not Before: Apr  3 21:22:05 2024 GMT
            Not After : Apr  2 21:27:05 2025 GMT
        Subject: CN=E05372E35D961769D774F9F4446F8F8293A22DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:91:d7:20:7c:ac:06:1f:e8:44:82:3a:35:
                    68:7c:f7:8b:22:3d:c4:32:1a:d1:fb:a8:43:60:a4:
                    ef:5e:69:fe:13:18:b4:62:1a:58:fd:d3:9c:3c:65:
                    6d:1e:ff:a0:7a:06:db:1b:ec:09:6b:ac:0f:2d:33:
                    b5:96:fb:20:77:18:53:4f:ec:e8:6e:28:fb:b9:43:
                    cd:d2:e7:ef:43:5a:c9:06:67:88:44:76:83:c5:a7:
                    87:4f:4a:d2:1d:1c:17:3e:85:2a:9b:2b:43:ab:8f:
                    bd:dc:a4:cb:79:3f:f3:20:39:3f:da:20:dc:90:af:
                    36:5b:97:d3:fe:56:99:8f:69:a6:68:29:db:4f:35:
                    4a:6a:9a:7c:87:87:2d:9a:82:b4:48:8f:41:96:c7:
                    5c:32:5a:a1:3d:89:ea:98:96:28:a6:87:11:3e:9d:
                    c5:86:27:d2:33:23:98:8a:34:f8:eb:95:d6:77:94:
                    37:38:1e:36:dd:a3:d5:10:f3:78:a3:4f:be:10:45:
                    56:3d:d1:2d:12:0e:ce:2d:7d:fc:03:04:99:32:92:
                    fb:09:71:5f:4a:b4:f4:08:29:6d:42:5a:6a:f7:28:
                    a4:b3:4e:1c:7b:5c:75:24:99:f1:9f:78:04:b1:4e:
                    f6:93:a5:d7:97:4e:01:ec:0a:d1:b1:7e:f7:4e:54:
                    a5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:53:72:E3:5D:96:17:69:D7:74:F9:F4:44:6F:8F:82:93:A2:2D:CF
            X509v3 Authority Key Identifier:
                keyid:51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/34352e372e3139322e302f32332d3234203d3e20323636363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:00:3e:ac:9c:45:1b:17:17:ce:a3:08:3f:4c:b4:39:4b:b2:
         44:c7:b0:cb:51:28:6c:c1:93:4b:be:1a:f3:ea:89:75:15:1d:
         93:28:7b:46:13:a0:20:30:3a:0a:9b:ab:21:02:af:3e:11:0f:
         62:c6:cc:d7:62:6f:88:c7:33:ab:14:dd:0d:83:c1:ce:2d:e6:
         95:b9:d5:16:c4:03:5e:99:6c:cb:78:f9:c0:fa:d0:ee:9d:94:
         13:70:1a:91:88:7b:4d:ad:0e:4e:2f:94:42:fb:4e:18:d6:f5:
         55:07:a9:92:2f:ef:6b:d8:5c:27:e9:d1:ee:fe:cf:12:4a:d0:
         8f:a5:28:3c:91:a4:87:18:66:a0:33:ed:e6:b2:33:6c:0d:dd:
         db:23:ba:ea:bb:04:cf:f1:66:ad:6d:4d:c6:1b:bc:f6:43:b8:
         05:98:67:7e:a1:3a:ee:fc:22:db:34:33:36:57:3a:71:c7:9e:
         f6:d5:a5:86:71:71:03:a2:0e:0c:8a:35:3a:2d:a5:4e:ff:12:
         ab:88:89:9c:3c:8f:73:7b:8a:43:70:26:5e:b5:44:ea:b8:03:
         69:b4:57:ff:7d:5a:88:bd:6a:be:de:37:31:b4:51:66:9c:88:
         6c:97:9d:fc:66:26:57:97:d3:bf:28:3a:be:f9:3b:ab:62:28:
         70:45:54:17
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUN/DayxTJccerfk4UzqgG8ff5C1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyRDBENTZEMTU2MUI0QUZFM0MxM0ZGNjQzMkIyM0ZC
NUIzOEM1MTAeFw0yNDA0MDMyMTIyMDVaFw0yNTA0MDIyMTI3MDVaMDMxMTAvBgNV
BAMTKEUwNTM3MkUzNUQ5NjE3NjlENzc0RjlGNDQ0NkY4RjgyOTNBMjJEQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJaZHXIHysBh/oRII6NWh894si
PcQyGtH7qENgpO9eaf4TGLRiGlj905w8ZW0e/6B6Btsb7AlrrA8tM7WW+yB3GFNP
7OhuKPu5Q83S5+9DWskGZ4hEdoPFp4dPStIdHBc+hSqbK0Orj73cpMt5P/MgOT/a
INyQrzZbl9P+VpmPaaZoKdtPNUpqmnyHhy2agrRIj0GWx1wyWqE9ieqYliimhxE+
ncWGJ9IzI5iKNPjrldZ3lDc4Hjbdo9UQ83ijT74QRVY90S0SDs4tffwDBJkykvsJ
cV9KtPQIKW1CWmr3KKSzThx7XHUkmfGfeASxTvaTpdeXTgHsCtGxfvdOVKUTAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU4FNy412WF2nXdPn0RG+PgpOiLc8wHwYDVR0j
BBgwFoAUUS0NVtFWG0r+PBP/ZDKyP7WzjFEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXc0RmQydjRzUTN4d210VkNWS2RpWnpzcHJWb2tmVGtLWERKOUpCWmVU
aHAvMS81MTJEMEQ1NkQxNTYxQjRBRkUzQzEzRkY2NDMyQjIzRkI1QjM4QzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxMkQwRDU2RDE1NjFCNEFG
RTNDMTNGRjY0MzJCMjNGQjVCMzhDNTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V3NEZkMnY0c1EzeHdtdFZDVktkaVp6c3ByVm9rZlRrS1hESjlKQlplVGhwLzEv
MzQzNTJlMzcyZTMxMzkzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzNjM2
MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS0HwDANBgkqhkiG9w0BAQsFAAOCAQEAIwA+rJxFGxcX
zqMIP0y0OUuyRMewy1EobMGTS74a8+qJdRUdkyh7RhOgIDA6CpurIQKvPhEPYsbM
12JviMczqxTdDYPBzi3mlbnVFsQDXplsy3j5wPrQ7p2UE3AakYh7Ta0OTi+UQvtO
GNb1VQepki/va9hcJ+nR7v7PEkrQj6UoPJGkhxhmoDPt5rIzbA3d2yO66rsEz/Fm
rW1Nxhu89kO4BZhnfqE67vwi2zQzNlc6ccee9tWlhnFxA6IODIo1Oi2lTv8Sq4iJ
nDyPc3uKQ3AmXrVE6rgDabRX/31aiL1qvt43MbRRZpyIbJed/GYmV5fTvyg6vvk7
q2IocEVUFw==
-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:10 2024 by rpki-client on console-fra.rpki-client.org