Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235342e302f32342d3234203d3e20323638323532.roa
File:                     34352e3233362e3235342e302f32342d3234203d3e20323638323532.roa (raw, json)
Hash identifier:          t7d0JuVJWCW52xuNHb9CM83kGZ1LUp1ksDrH2Gj4+XA=
Subject key identifier:   66:CC:F9:24:88:46:E2:25:E6:FB:87:30:14:A0:55:1D:F9:77:D9:D7
Certificate issuer:       /CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
Certificate serial:       325BD8FAB9630E3CA01F9065BC49D5A3345837F1
Authority key identifier: 54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235342e302f32342d3234203d3e20323638323532.roa
Signing time:             Mon 01 Jul 2024 17:21:00 +0000
ROA not before:           Mon 01 Jul 2024 17:16:00 +0000
ROA not after:            Mon 30 Jun 2025 17:21:00 +0000
asID:                     268252
IP address blocks:        45.236.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl
                          rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5b:d8:fa:b9:63:0e:3c:a0:1f:90:65:bc:49:d5:a3:34:58:37:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
        Validity
            Not Before: Jul  1 17:16:00 2024 GMT
            Not After : Jun 30 17:21:00 2025 GMT
        Subject: CN=66CCF9248846E225E6FB873014A0551DF977D9D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:77:40:a1:a5:3a:a0:06:7a:6c:70:d6:bd:fc:
                    0d:25:1e:f6:8a:76:62:e6:a9:52:2b:24:b4:9c:9c:
                    21:69:d3:2c:8a:a2:22:0a:95:67:4b:50:a9:4e:7e:
                    6a:f2:6d:b8:72:28:a5:8c:97:58:1b:88:d9:06:b7:
                    01:04:57:ec:c5:5d:4e:ff:19:ab:d7:c6:be:19:c0:
                    bb:00:9d:3e:3a:fa:6b:39:c3:fb:3b:1c:41:01:6c:
                    84:6b:28:1e:a7:fb:0d:70:d2:9a:96:c5:61:aa:a7:
                    27:4a:72:a1:ed:45:1f:94:1b:50:2e:89:0d:c4:f7:
                    3a:01:fb:32:d3:94:08:6f:71:4b:a0:84:4b:68:35:
                    d5:86:83:68:99:70:3f:cb:6b:78:9f:2c:4b:74:8a:
                    70:47:96:83:ef:05:d0:d3:28:42:99:a8:bd:2a:27:
                    1c:c6:b4:c2:5e:9e:7e:43:ce:98:24:bd:92:ee:d8:
                    a5:75:d9:39:64:f3:3c:c4:df:45:1c:96:24:01:2c:
                    c8:c3:b0:3b:22:20:b8:32:f7:0b:f9:78:53:80:23:
                    d0:4d:b8:0e:8e:f8:9e:e1:7b:fd:a2:2e:f7:98:60:
                    5e:46:70:6a:cf:d3:e6:e3:d8:1c:06:dd:1c:e2:73:
                    f1:9d:5b:1e:13:a8:b1:f2:24:83:cd:91:26:b9:8d:
                    e4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CC:F9:24:88:46:E2:25:E6:FB:87:30:14:A0:55:1D:F9:77:D9:D7
            X509v3 Authority Key Identifier:
                keyid:54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235342e302f32342d3234203d3e20323638323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:10:f7:b8:d3:6d:3d:06:20:86:ce:9e:c3:77:70:8f:71:48:
         0f:41:ef:43:b8:a8:93:db:8a:b3:30:33:bf:75:bd:76:68:2d:
         f1:d0:e8:43:6f:ba:99:1d:65:0f:91:54:da:33:ee:97:89:b3:
         e7:69:e3:c6:97:87:d4:fd:e4:f6:21:d3:bd:e0:2e:c3:23:8d:
         33:97:f5:a3:1a:e6:82:1e:e4:5d:b2:67:26:e6:a2:bc:35:36:
         88:12:6a:09:df:e5:f2:4a:03:af:57:ee:b9:da:a9:bc:71:fb:
         03:d8:04:ad:37:e8:2b:26:4c:9e:aa:9e:f5:c1:77:93:11:4f:
         bc:5c:94:c0:7b:a2:54:b6:43:a3:65:4c:ea:2c:24:e4:b0:2d:
         c7:b3:26:6b:63:6d:f7:1e:f6:9b:c6:a5:9c:80:a2:9e:a2:52:
         f8:de:30:59:df:61:78:fe:ea:3a:52:a1:d9:ac:66:0e:8e:5f:
         7d:50:c6:1a:23:c2:05:0d:4e:3f:cf:29:ce:97:64:23:ee:73:
         e5:61:5b:95:e6:a4:30:e3:e5:21:ef:4c:80:49:b6:a1:ec:19:
         c0:bd:9b:6a:bf:b9:93:88:88:cb:68:cc:7d:b7:06:c4:f4:6b:
         7e:7e:09:71:ba:1e:09:49:25:c8:fb:23:a0:2a:ec:78:5b:f3:
         90:77:33:5a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMlvY+rljDjygH5BlvEnVozRYN/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQzOTVBNTQ1RDAwMDhDN0Y0Q0IwMzRERDlEOTBDREM0
MUQ5NUFFNDAeFw0yNDA3MDExNzE2MDBaFw0yNTA2MzAxNzIxMDBaMDMxMTAvBgNV
BAMTKDY2Q0NGOTI0ODg0NkUyMjVFNkZCODczMDE0QTA1NTFERjk3N0Q5RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFd0ChpTqgBnpscNa9/A0lHvaK
dmLmqVIrJLScnCFp0yyKoiIKlWdLUKlOfmrybbhyKKWMl1gbiNkGtwEEV+zFXU7/
GavXxr4ZwLsAnT46+ms5w/s7HEEBbIRrKB6n+w1w0pqWxWGqpydKcqHtRR+UG1Au
iQ3E9zoB+zLTlAhvcUughEtoNdWGg2iZcD/La3ifLEt0inBHloPvBdDTKEKZqL0q
JxzGtMJenn5DzpgkvZLu2KV12Tlk8zzE30UcliQBLMjDsDsiILgy9wv5eFOAI9BN
uA6O+J7he/2iLveYYF5GcGrP0+bj2BwG3Rzic/GdWx4TqLHyJIPNkSa5jeS5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZsz5JIhG4iXm+4cwFKBVHfl32dcwHwYDVR0j
BBgwFoAUVDlaVF0ACMf0ywNN2dkM3EHZWuQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1BDVlMzdkVmWHVxRkNSNmEyR0h6WVNwOVVYWllUWUdGSjhVTmJjdkxU
SnYvMC81NDM5NUE1NDVEMDAwOEM3RjRDQjAzNEREOUQ5MENEQzQxRDk1QUU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0Mzk1QTU0NUQwMDA4QzdG
NENCMDM0REQ5RDkwQ0RDNDFEOTVBRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dQQ1ZTM3ZFZlh1cUZDUjZhMkdIellTcDlVWFpZVFlHRko4VU5iY3ZMVEp2LzAv
MzQzNTJlMzIzMzM2MmUzMjM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7P4wDQYJKoZIhvcNAQELBQADggEBAKYQ97jT
bT0GIIbOnsN3cI9xSA9B70O4qJPbirMwM791vXZoLfHQ6ENvupkdZQ+RVNoz7peJ
s+dp48aXh9T95PYh073gLsMjjTOX9aMa5oIe5F2yZybmorw1NogSagnf5fJKA69X
7rnaqbxx+wPYBK036CsmTJ6qnvXBd5MRT7xclMB7olS2Q6NlTOosJOSwLcezJmtj
bfce9pvGpZyAop6iUvjeMFnfYXj+6jpSodmsZg6OX31QxhojwgUNTj/PKc6XZCPu
c+VhW5XmpDDj5SHvTIBJtqHsGcC9m2q/uZOIiMtozH23BsT0a35+CXG6HglJJcj7
I6Aq7Hhb85B3M1o=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:58 2024 by rpki-client on console-fra.rpki-client.org