Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/34352e3137352e3230342e302f32322d3232203d3e20323638393231.roa
File:                     34352e3137352e3230342e302f32322d3232203d3e20323638393231.roa (raw, json)
Hash identifier:          qocpm9+1JvF5PvElTjp643fS65yLi5dq+ldQBjtVyi4=
Subject key identifier:   D7:B6:14:CC:9F:2E:4C:9A:CD:2F:AD:22:C0:97:B4:FB:F0:AC:55:82
Certificate issuer:       /CN=E72BD72CA25320A444880C04AC90CC5F3D638430
Certificate serial:       66DE9522654357579379DE0D55F9034CFE9B20C3
Authority key identifier: E7:2B:D7:2C:A2:53:20:A4:44:88:0C:04:AC:90:CC:5F:3D:63:84:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E72BD72CA25320A444880C04AC90CC5F3D638430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/34352e3137352e3230342e302f32322d3232203d3e20323638393231.roa
Signing time:             Wed 03 Apr 2024 23:37:29 +0000
ROA not before:           Wed 03 Apr 2024 23:32:29 +0000
ROA not after:            Wed 02 Apr 2025 23:37:29 +0000
asID:                     268921
IP address blocks:        45.175.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/E72BD72CA25320A444880C04AC90CC5F3D638430.crl
                          rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/E72BD72CA25320A444880C04AC90CC5F3D638430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E72BD72CA25320A444880C04AC90CC5F3D638430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:de:95:22:65:43:57:57:93:79:de:0d:55:f9:03:4c:fe:9b:20:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E72BD72CA25320A444880C04AC90CC5F3D638430
        Validity
            Not Before: Apr  3 23:32:29 2024 GMT
            Not After : Apr  2 23:37:29 2025 GMT
        Subject: CN=D7B614CC9F2E4C9ACD2FAD22C097B4FBF0AC5582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:78:fa:fa:0c:11:c0:b2:a2:48:95:75:e0:
                    34:c5:c4:a8:ca:ec:35:ae:8a:52:b9:46:85:43:94:
                    b2:1d:0a:cd:5c:39:9b:99:63:24:89:59:44:0b:3a:
                    12:c0:11:b4:a5:25:52:ab:af:d9:a1:56:ae:12:d6:
                    13:e6:4a:a6:a1:0e:a4:7c:6a:fd:4a:91:8c:f6:57:
                    93:c0:22:ff:5e:40:20:a0:68:b6:da:b1:49:27:13:
                    a3:65:48:52:be:c7:8b:f3:5f:f8:a8:f9:24:71:08:
                    cb:7a:c6:85:59:e2:73:60:7a:80:4b:95:ff:c3:04:
                    f8:fb:28:c5:6d:b0:29:28:a7:c6:da:b9:1f:ac:05:
                    f8:46:fa:4c:1c:7e:00:06:56:72:87:2a:ca:e6:7b:
                    d2:9e:16:f9:10:27:5c:8f:de:bd:7d:cc:46:34:ef:
                    cc:32:93:6e:91:84:d7:8c:2a:bc:e3:71:33:a8:8e:
                    1a:0d:05:01:ff:44:7b:d0:ff:01:0f:10:68:e9:17:
                    ff:33:49:00:d3:e7:6b:03:52:10:ab:0b:de:bd:2f:
                    37:60:01:88:ec:e3:51:d7:3e:bd:1e:29:85:06:a6:
                    08:a7:f1:11:cf:72:1d:4f:ac:7b:d9:e8:8e:f7:5c:
                    6f:50:05:7c:20:d6:de:76:36:78:a3:a7:b4:ad:6b:
                    ff:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B6:14:CC:9F:2E:4C:9A:CD:2F:AD:22:C0:97:B4:FB:F0:AC:55:82
            X509v3 Authority Key Identifier:
                keyid:E7:2B:D7:2C:A2:53:20:A4:44:88:0C:04:AC:90:CC:5F:3D:63:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/E72BD72CA25320A444880C04AC90CC5F3D638430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E72BD72CA25320A444880C04AC90CC5F3D638430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/1/34352e3137352e3230342e302f32322d3232203d3e20323638393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:35:ae:f0:a8:6b:ec:0b:9c:9e:c6:41:ec:ee:7b:52:81:28:
         ea:1f:25:da:75:5a:25:6a:54:c3:c2:65:2c:9c:2b:d2:9a:5c:
         ea:50:d5:ee:dd:f1:14:94:61:4e:0b:1e:3d:43:85:61:eb:f1:
         62:5e:df:82:25:e5:76:6c:42:7a:55:0e:b6:7e:5a:c4:02:5f:
         64:1d:d7:18:50:f6:38:fc:58:1c:2b:40:9c:f1:a0:ab:45:d8:
         a8:af:3f:55:97:5f:d9:8a:31:9b:77:cd:c2:47:7d:0a:a3:87:
         a8:79:9f:8f:19:ea:45:49:0b:8c:b9:f6:a6:ba:92:80:5d:34:
         51:8d:ab:ca:87:92:c8:fe:d4:8f:f8:c4:bd:c7:a4:68:32:4e:
         cd:3e:2d:2d:28:90:8d:58:8b:07:6a:27:e4:93:66:f5:7b:68:
         ba:bd:5e:e1:4d:89:db:77:d3:41:c5:d2:18:e4:83:e7:ff:fb:
         4c:9c:49:d8:46:e3:ed:0b:bb:c3:27:6f:99:d1:a3:7e:a8:0e:
         82:89:58:de:d6:72:d2:d6:5b:ed:21:f9:9e:6f:b5:ae:34:99:
         02:c1:92:0f:cb:cc:a2:25:f1:23:9f:0c:24:66:e6:d7:45:66:
         60:87:f3:93:60:ae:3a:06:b9:ea:ca:24:0c:49:97:08:23:a8:
         f9:67:ea:49
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZt6VImVDV1eTed4NVfkDTP6bIMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTcyQkQ3MkNBMjUzMjBBNDQ0ODgwQzA0QUM5MENDNUYz
RDYzODQzMDAeFw0yNDA0MDMyMzMyMjlaFw0yNTA0MDIyMzM3MjlaMDMxMTAvBgNV
BAMTKEQ3QjYxNENDOUYyRTRDOUFDRDJGQUQyMkMwOTdCNEZCRjBBQzU1ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJy3j6+gwRwLKiSJV14DTFxKjK
7DWuilK5RoVDlLIdCs1cOZuZYySJWUQLOhLAEbSlJVKrr9mhVq4S1hPmSqahDqR8
av1KkYz2V5PAIv9eQCCgaLbasUknE6NlSFK+x4vzX/io+SRxCMt6xoVZ4nNgeoBL
lf/DBPj7KMVtsCkop8bauR+sBfhG+kwcfgAGVnKHKsrme9KeFvkQJ1yP3r19zEY0
78wyk26RhNeMKrzjcTOojhoNBQH/RHvQ/wEPEGjpF/8zSQDT52sDUhCrC969Lzdg
AYjs41HXPr0eKYUGpgin8RHPch1PrHvZ6I73XG9QBXwg1t52Nnijp7Sta/8DAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU17YUzJ8uTJrNL60iwJe0+/CsVYIwHwYDVR0j
BBgwFoAU5yvXLKJTIKREiAwErJDMXz1jhDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lXSkxLUWs0c2czYkNjMnk0WFFjNldVYUdpM2tmQWhuVzQ3WGRKQlhF
ZnQvMS9FNzJCRDcyQ0EyNTMyMEE0NDQ4ODBDMDRBQzkwQ0M1RjNENjM4NDMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3MkJENzJDQTI1MzIwQTQ0
NDg4MEMwNEFDOTBDQzVGM0Q2Mzg0MzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpV0pMS1FrNHNnM2JDYzJ5NFhRYzZXVWFHaTNrZkFoblc0N1hkSkJYRWZ0LzEv
MzQzNTJlMzEzNzM1MmUzMjMwMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzOTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItr8wwDQYJKoZIhvcNAQELBQADggEBAF01rvCo
a+wLnJ7GQezue1KBKOofJdp1WiVqVMPCZSycK9KaXOpQ1e7d8RSUYU4LHj1DhWHr
8WJe34Il5XZsQnpVDrZ+WsQCX2Qd1xhQ9jj8WBwrQJzxoKtF2KivP1WXX9mKMZt3
zcJHfQqjh6h5n48Z6kVJC4y59qa6koBdNFGNq8qHksj+1I/4xL3HpGgyTs0+LS0o
kI1YiwdqJ+STZvV7aLq9XuFNidt300HF0hjkg+f/+0ycSdhG4+0Lu8Mnb5nRo36o
DoKJWN7WctLWW+0h+Z5vta40mQLBkg/LzKIl8SOfDCRm5tdFZmCH85NgrjoGuerK
JAxJlwgjqPln6kk=
-----END CERTIFICATE-----
Generated at Fri Sep 20 08:25:06 2024 by rpki-client on console-ams.rpki-client.org