Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa
File:                     34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (raw, json)
Hash identifier:          UmBFZh0jE6l01oioZL36G64F042pWBVJuxlqkLZuYrw=
Subject key identifier:   59:42:36:59:CA:B0:26:2A:44:E9:A2:BB:64:CD:D6:DF:4A:FB:F4:57
Certificate issuer:       /CN=A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F
Certificate serial:       7E2BD54BB7092BBC7289C41B8B95364DF7892B72
Authority key identifier: A1:25:E3:4C:BB:9E:F2:E8:9F:FA:32:29:9D:80:F0:A2:1A:0D:DC:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa
Signing time:             Thu 04 Apr 2024 08:12:00 +0000
ROA not before:           Thu 04 Apr 2024 08:07:00 +0000
ROA not after:            Thu 03 Apr 2025 08:12:00 +0000
asID:                     268084
IP address blocks:        45.168.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.crl
                          rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2b:d5:4b:b7:09:2b:bc:72:89:c4:1b:8b:95:36:4d:f7:89:2b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F
        Validity
            Not Before: Apr  4 08:07:00 2024 GMT
            Not After : Apr  3 08:12:00 2025 GMT
        Subject: CN=59423659CAB0262A44E9A2BB64CDD6DF4AFBF457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:bd:c9:5e:4d:1d:14:1a:ea:97:ff:e9:98:
                    87:b3:87:67:40:c2:59:10:8c:29:e4:e9:7f:d0:9b:
                    8e:45:c9:6c:05:e3:f5:22:24:94:3e:04:f0:fd:22:
                    38:93:dd:06:cd:1b:4b:cb:96:dd:9c:66:bb:b9:76:
                    29:ba:7d:18:75:00:06:8a:54:85:21:08:8f:86:80:
                    c3:e7:cb:75:1c:ea:ae:d8:a2:81:b1:90:03:06:62:
                    7d:d3:37:fb:72:43:ef:a8:51:96:89:0e:7e:66:f7:
                    11:a9:95:15:db:41:d4:60:c4:eb:c2:bf:98:60:37:
                    61:2f:26:21:c0:d8:9c:6b:cd:46:bf:3c:59:8d:15:
                    6b:07:0a:05:b6:8e:7d:83:95:d0:ba:5f:6a:2c:23:
                    d9:ca:cb:80:00:f3:f6:50:1e:34:ee:05:75:6c:b1:
                    a5:c6:08:95:f3:ac:7c:3a:79:b0:7e:3b:a6:e2:d3:
                    28:32:da:8a:bd:35:c3:2f:18:69:7a:aa:f5:d0:dd:
                    56:6a:60:2a:ab:72:2c:02:c5:25:7d:5a:36:06:96:
                    d7:4c:35:9b:f4:45:61:a8:d6:90:3a:36:60:ea:90:
                    d2:fb:8d:c1:24:20:47:ab:b2:fa:60:ca:f2:45:43:
                    f7:63:3c:d8:e2:bf:5d:59:3c:7a:80:60:c8:58:ee:
                    a1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:42:36:59:CA:B0:26:2A:44:E9:A2:BB:64:CD:D6:DF:4A:FB:F4:57
            X509v3 Authority Key Identifier:
                keyid:A1:25:E3:4C:BB:9E:F2:E8:9F:FA:32:29:9D:80:F0:A2:1A:0D:DC:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:83:00:34:a3:bb:01:34:3e:f4:bb:2d:4a:f0:ea:06:4c:03:
         3b:e7:c1:d5:88:64:16:f8:9e:9a:38:a2:d2:fe:55:56:29:da:
         56:04:da:34:86:73:4b:f2:57:0b:09:18:f2:68:d1:5d:d4:9d:
         cb:bf:19:98:1d:4b:20:17:90:f3:68:2c:a3:7b:76:ca:82:17:
         47:ee:7f:08:cf:91:39:31:1a:07:fa:5c:f7:16:1a:90:de:51:
         c0:58:b2:eb:e8:90:48:13:1d:56:3a:28:f0:e2:03:70:be:30:
         15:48:92:0a:76:e0:32:e7:cc:bd:28:f4:73:e1:a5:a4:01:4e:
         b9:b4:bb:14:be:88:90:95:60:37:af:06:d7:6c:64:16:3a:f3:
         5c:69:46:99:64:b2:2e:a0:9b:3b:f4:fe:32:b9:24:81:6e:e9:
         a2:e6:88:45:f1:d9:b3:fa:06:dc:30:c7:a0:e0:f5:bd:5c:55:
         31:ea:5d:e8:6e:15:a8:b4:4d:10:81:44:9b:05:67:95:ab:a9:
         6a:27:03:e9:98:be:e0:71:00:a4:21:e9:0c:b5:4a:71:fa:a5:
         76:c2:40:56:96:ad:ac:fa:7e:f5:bf:66:65:9a:14:8c:d3:a4:
         84:e0:81:43:30:73:35:f0:84:20:ab:35:6b:0a:26:5b:4e:25:
         13:7a:ea:6d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfivVS7cJK7xyicQbi5U2TfeJK3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTEyNUUzNENCQjlFRjJFODlGRkEzMjI5OUQ4MEYwQTIx
QTBEREM5RjAeFw0yNDA0MDQwODA3MDBaFw0yNTA0MDMwODEyMDBaMDMxMTAvBgNV
BAMTKDU5NDIzNjU5Q0FCMDI2MkE0NEU5QTJCQjY0Q0RENkRGNEFGQkY0NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxb3JXk0dFBrql//pmIezh2dA
wlkQjCnk6X/Qm45FyWwF4/UiJJQ+BPD9IjiT3QbNG0vLlt2cZru5dim6fRh1AAaK
VIUhCI+GgMPny3Uc6q7YooGxkAMGYn3TN/tyQ++oUZaJDn5m9xGplRXbQdRgxOvC
v5hgN2EvJiHA2JxrzUa/PFmNFWsHCgW2jn2DldC6X2osI9nKy4AA8/ZQHjTuBXVs
saXGCJXzrHw6ebB+O6bi0ygy2oq9NcMvGGl6qvXQ3VZqYCqrciwCxSV9WjYGltdM
NZv0RWGo1pA6NmDqkNL7jcEkIEersvpgyvJFQ/djPNjiv11ZPHqAYMhY7qFTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWUI2WcqwJipE6aK7ZM3W30r79FcwHwYDVR0j
BBgwFoAUoSXjTLue8uif+jIpnYDwohoN3J8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm
VFYvMS9BMTI1RTM0Q0JCOUVGMkU4OUZGQTMyMjk5RDgwRjBBMjFBMEREQzlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExMjVFMzRDQkI5RUYyRTg5
RkZBMzIyOTlEODBGMEEyMUEwRERDOUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c1d1htVGJqR1hkQ3NqUGc1OGV6YUNpN1pOV2dOWjk3aWc4OUh6REVwZlRWLzEv
MzQzNTJlMzEzNjM4MmUzMjM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqPQwDQYJKoZIhvcNAQELBQADggEBAFmDADSj
uwE0PvS7LUrw6gZMAzvnwdWIZBb4npo4otL+VVYp2lYE2jSGc0vyVwsJGPJo0V3U
ncu/GZgdSyAXkPNoLKN7dsqCF0fufwjPkTkxGgf6XPcWGpDeUcBYsuvokEgTHVY6
KPDiA3C+MBVIkgp24DLnzL0o9HPhpaQBTrm0uxS+iJCVYDevBtdsZBY681xpRplk
si6gmzv0/jK5JIFu6aLmiEXx2bP6Btwwx6Dg9b1cVTHqXehuFai0TRCBRJsFZ5Wr
qWonA+mYvuBxAKQh6Qy1SnH6pXbCQFaWraz6fvW/ZmWaFIzTpITggUMwczXwhCCr
NWsKJltOJRN66m0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:33 2024 by rpki-client on console-fra.rpki-client.org