Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxf17mdepYrduT9yaXQzL8HbpUYVGJfSJ3U2udzL2uRJ/0/34352e3233372e3132302e302f32322d3332203d3e20323638323732.roa
File:                     34352e3233372e3132302e302f32322d3332203d3e20323638323732.roa (raw, json)
Hash identifier:          HubRn/iNolORykhQIvJSAgLcUby76BqCV2b5xxkQXRY=
Subject key identifier:   BB:81:14:60:92:9D:4E:D4:9C:D6:2B:52:6D:C0:8F:A0:E7:41:04:AC
Certificate issuer:       /CN=427D521F1FA6980F53ED5CF52B5FAFF3E4B55642
Certificate serial:       722A2C2303263F6C2E3D76900F7B2AE1A7A94F0D
Authority key identifier: 42:7D:52:1F:1F:A6:98:0F:53:ED:5C:F5:2B:5F:AF:F3:E4:B5:56:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxf17mdepYrduT9yaXQzL8HbpUYVGJfSJ3U2udzL2uRJ/0/34352e3233372e3132302e302f32322d3332203d3e20323638323732.roa
Signing time:             Mon 05 Aug 2024 20:33:27 +0000
ROA not before:           Mon 05 Aug 2024 20:28:27 +0000
ROA not after:            Mon 04 Aug 2025 20:33:27 +0000
asID:                     268272
IP address blocks:        45.237.120.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxf17mdepYrduT9yaXQzL8HbpUYVGJfSJ3U2udzL2uRJ/0/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.crl
                          rsync://rpki-repo.registro.br/repo/Fxf17mdepYrduT9yaXQzL8HbpUYVGJfSJ3U2udzL2uRJ/0/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2a:2c:23:03:26:3f:6c:2e:3d:76:90:0f:7b:2a:e1:a7:a9:4f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427D521F1FA6980F53ED5CF52B5FAFF3E4B55642
        Validity
            Not Before: Aug  5 20:28:27 2024 GMT
            Not After : Aug  4 20:33:27 2025 GMT
        Subject: CN=BB811460929D4ED49CD62B526DC08FA0E74104AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b7:8c:aa:81:78:25:8e:b3:32:fe:f2:1e:b8:
                    ea:2e:90:55:85:61:0e:e6:ea:e0:5a:e0:76:c0:65:
                    d9:6f:b4:12:18:80:43:93:7a:92:ae:0b:6a:48:d7:
                    91:41:89:f2:15:7f:26:b7:3a:d9:a5:e6:8e:5f:3b:
                    66:79:f9:fd:b5:2e:75:56:21:3e:2f:76:fb:4e:68:
                    24:0f:0d:34:4b:5b:2c:e7:69:b2:28:ca:f7:04:ae:
                    09:c6:9c:63:d7:55:8d:e1:d7:e9:bc:3a:96:0e:d7:
                    86:3e:56:e4:73:6d:5e:e9:65:e0:00:0d:bd:93:b8:
                    45:24:e9:63:da:c6:cb:79:b6:05:0b:bb:c1:b0:3e:
                    96:32:52:d4:bc:c6:d1:b6:39:b8:97:47:a0:e4:fb:
                    6e:76:7c:7e:6d:da:08:9b:f7:52:3e:0c:16:61:46:
                    59:b1:4d:a8:f1:17:6c:7b:04:81:b7:64:32:45:f1:
                    37:f4:12:e0:de:e3:3c:c1:64:b9:8e:51:e9:ff:c3:
                    6d:a0:fc:46:ad:45:fa:8f:7d:b8:93:c7:d6:9e:2c:
                    e9:5e:76:9a:31:51:87:2a:d7:4f:4c:2e:60:25:0b:
                    00:31:63:57:d6:ae:bc:1b:af:3d:8f:d9:f2:79:98:
                    78:1a:f1:93:b3:7d:f2:62:5f:18:2e:04:e7:34:74:
                    76:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:81:14:60:92:9D:4E:D4:9C:D6:2B:52:6D:C0:8F:A0:E7:41:04:AC
            X509v3 Authority Key Identifier:
                keyid:42:7D:52:1F:1F:A6:98:0F:53:ED:5C:F5:2B:5F:AF:F3:E4:B5:56:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxf17mdepYrduT9yaXQzL8HbpUYVGJfSJ3U2udzL2uRJ/0/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxf17mdepYrduT9yaXQzL8HbpUYVGJfSJ3U2udzL2uRJ/0/34352e3233372e3132302e302f32322d3332203d3e20323638323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:b8:bf:60:0e:15:f4:e6:63:b1:27:83:47:bc:ea:c3:6e:0c:
         b2:1d:7f:3c:a6:d2:4c:c0:75:af:ef:80:c1:ed:68:62:da:56:
         a6:bd:71:aa:3f:f3:3f:ba:4b:88:48:fe:10:dd:aa:28:52:82:
         ef:43:36:1f:cd:da:b9:ab:be:1e:6a:7f:78:18:38:a4:b3:bf:
         a1:f6:75:a3:30:33:9d:33:bd:89:1c:a0:6b:23:86:21:61:9d:
         93:38:87:ab:94:c7:a2:56:0b:14:ae:22:c7:37:34:0d:de:ca:
         30:c1:c6:fb:ff:cc:d3:37:ce:37:3a:76:65:29:71:e0:00:79:
         d7:ef:b3:98:b4:1a:0f:43:a3:c2:02:5c:88:67:81:a5:c3:a6:
         4d:eb:b0:c1:da:aa:86:f0:4e:bb:77:a5:c8:d2:49:12:63:dc:
         c8:92:f0:f8:bc:8b:48:23:a2:70:7c:ca:dd:b2:cf:27:14:ae:
         e1:66:f7:54:74:36:6e:c9:73:2a:2b:d6:af:11:a7:9f:3d:03:
         de:31:25:07:b6:39:3a:a5:e7:c0:91:c5:91:d1:da:fc:a6:e8:
         39:8d:6a:ba:9f:ec:33:25:d1:09:cf:2a:5f:70:01:9b:06:31:
         d2:71:9c:6f:87:30:56:e6:01:d1:3a:3c:51:22:2b:f6:e3:d6:
         1b:7d:b6:35
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUciosIwMmP2wuPXaQD3sq4aepTw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI3RDUyMUYxRkE2OTgwRjUzRUQ1Q0Y1MkI1RkFGRjNF
NEI1NTY0MjAeFw0yNDA4MDUyMDI4MjdaFw0yNTA4MDQyMDMzMjdaMDMxMTAvBgNV
BAMTKEJCODExNDYwOTI5RDRFRDQ5Q0Q2MkI1MjZEQzA4RkEwRTc0MTA0QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdt4yqgXgljrMy/vIeuOoukFWF
YQ7m6uBa4HbAZdlvtBIYgEOTepKuC2pI15FBifIVfya3Otml5o5fO2Z5+f21LnVW
IT4vdvtOaCQPDTRLWyznabIoyvcErgnGnGPXVY3h1+m8OpYO14Y+VuRzbV7pZeAA
Db2TuEUk6WPaxst5tgULu8GwPpYyUtS8xtG2ObiXR6Dk+252fH5t2gib91I+DBZh
RlmxTajxF2x7BIG3ZDJF8Tf0EuDe4zzBZLmOUen/w22g/EatRfqPfbiTx9aeLOle
dpoxUYcq109MLmAlCwAxY1fWrrwbrz2P2fJ5mHga8ZOzffJiXxguBOc0dHa1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUu4EUYJKdTtSc1itSbcCPoOdBBKwwHwYDVR0j
BBgwFoAUQn1SHx+mmA9T7Vz1K1+v8+S1VkIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnhmMTdtZGVwWXJkdVQ5eWFYUXpMOEhicFVZVkdKZlNKM1UydWR6TDJ1
UkovMC80MjdENTIxRjFGQTY5ODBGNTNFRDVDRjUyQjVGQUZGM0U0QjU1NjQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyN0Q1MjFGMUZBNjk4MEY1
M0VENUNGNTJCNUZBRkYzRTRCNTU2NDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z4ZjE3bWRlcFlyZHVUOXlhWFF6TDhIYnBVWVZHSmZTSjNVMnVkekwydVJKLzAv
MzQzNTJlMzIzMzM3MmUzMTMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzMjM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7XgwDQYJKoZIhvcNAQELBQADggEBAHi4v2AO
FfTmY7Eng0e86sNuDLIdfzym0kzAda/vgMHtaGLaVqa9cao/8z+6S4hI/hDdqihS
gu9DNh/N2rmrvh5qf3gYOKSzv6H2daMwM50zvYkcoGsjhiFhnZM4h6uUx6JWCxSu
Isc3NA3eyjDBxvv/zNM3zjc6dmUpceAAedfvs5i0Gg9Do8ICXIhngaXDpk3rsMHa
qobwTrt3pcjSSRJj3MiS8Pi8i0gjonB8yt2yzycUruFm91R0Nm7Jcyor1q8Rp589
A94xJQe2OTql58CRxZHR2vym6DmNarqf7DMl0QnPKl9wAZsGMdJxnG+HMFbmAdE6
PFEiK/bj1ht9tjU=
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:59 2024 by rpki-client on console-fra.rpki-client.org