Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e352e3232302e302f32322d3234203d3e20323633353639.roa
File:                     34352e352e3232302e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          0YZBhuBNQ0UEwSPDMahDjAKz/0anHul9n30f0imTv14=
Subject key identifier:   DF:F2:A0:58:84:1F:14:F2:2E:C5:F1:D8:F5:EB:4D:D3:BF:46:27:81
Certificate issuer:       /CN=E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A
Certificate serial:       354D2E8BF34CEEB259B17694F4718DFE505EF1AA
Authority key identifier: E1:C8:E0:FF:8F:E8:F0:85:E2:D7:92:B2:66:3A:22:5B:0D:93:C1:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e352e3232302e302f32322d3234203d3e20323633353639.roa
Signing time:             Tue 23 Apr 2024 13:31:42 +0000
ROA not before:           Tue 23 Apr 2024 13:26:42 +0000
ROA not after:            Tue 22 Apr 2025 13:31:42 +0000
asID:                     263569
IP address blocks:        45.5.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.crl
                          rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4d:2e:8b:f3:4c:ee:b2:59:b1:76:94:f4:71:8d:fe:50:5e:f1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A
        Validity
            Not Before: Apr 23 13:26:42 2024 GMT
            Not After : Apr 22 13:31:42 2025 GMT
        Subject: CN=DFF2A058841F14F22EC5F1D8F5EB4DD3BF462781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2e:e5:83:d6:b5:f3:75:a8:07:0e:f7:79:25:
                    2c:04:28:4a:d6:70:54:a7:06:e8:0a:07:5b:2c:d9:
                    3a:88:6d:10:71:da:d7:14:2b:59:f9:33:23:24:66:
                    df:c2:8a:b0:d3:60:03:ed:4f:07:bb:01:c6:17:9d:
                    b1:89:88:84:7f:ec:6c:fd:2c:9d:6f:47:6e:e1:fb:
                    2c:c8:62:e7:4a:e6:d2:8f:e9:77:76:f6:24:42:d8:
                    03:0a:9e:9e:da:92:26:92:0e:ee:84:f4:2f:39:27:
                    8a:72:0b:ac:52:d5:10:14:40:13:0e:d5:3c:39:bd:
                    fb:bf:3a:4e:48:dd:ef:0f:46:05:f3:b6:8d:99:49:
                    80:2c:c0:4a:e4:10:e7:07:99:c1:f8:65:e3:c5:63:
                    7d:49:fc:fd:07:dc:b5:76:82:cf:40:e6:92:c7:68:
                    d5:6c:23:20:3f:41:b3:94:00:28:69:21:44:d4:61:
                    ba:ed:51:5a:73:58:38:92:1d:43:45:77:d3:0a:38:
                    5e:a0:77:c2:14:a5:b8:6b:27:2f:1e:87:59:ec:6a:
                    13:33:9a:d8:cf:ff:b1:f4:d9:b2:33:f2:5f:0e:23:
                    b7:42:ec:11:67:ab:64:34:89:1b:80:48:f8:7f:55:
                    b3:25:20:23:3b:c8:d8:04:ed:40:64:15:da:14:fb:
                    7e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F2:A0:58:84:1F:14:F2:2E:C5:F1:D8:F5:EB:4D:D3:BF:46:27:81
            X509v3 Authority Key Identifier:
                keyid:E1:C8:E0:FF:8F:E8:F0:85:E2:D7:92:B2:66:3A:22:5B:0D:93:C1:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e352e3232302e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:ff:a6:22:ce:36:4c:c9:00:60:71:30:4c:43:8b:3d:54:2a:
         da:ee:b0:71:e2:ec:df:9f:a0:33:3b:0c:7c:f7:0d:0c:22:ba:
         16:43:43:0b:3d:27:e0:50:f4:74:0a:b3:b5:9e:26:b7:87:12:
         93:13:20:e5:95:91:0f:5b:0a:e7:6d:17:13:77:02:cf:89:77:
         b8:91:3d:d2:4f:02:99:ee:71:05:f3:d3:a4:b8:90:72:f7:24:
         19:a1:df:14:0a:70:21:f4:38:21:47:1c:9e:46:1e:b5:d0:f6:
         5d:05:d6:d7:7a:9e:2b:dc:09:f1:5a:e8:45:c7:f1:7c:f5:23:
         0b:1a:fc:1e:15:66:2a:a9:75:1b:b1:02:9d:a4:78:b0:b1:1d:
         fc:02:86:a0:1c:c3:10:ff:7e:78:7a:8f:1e:01:b4:b6:6d:66:
         99:67:f0:97:91:f9:80:02:af:6a:55:a9:28:ad:a8:73:66:b5:
         e3:8c:c5:04:bd:43:b9:9c:41:61:18:88:f4:7b:7d:46:9f:0c:
         fb:b9:e2:1e:f5:68:89:39:67:1e:79:43:a5:5b:8b:35:34:f0:
         28:26:fa:7c:c9:df:3e:d5:fd:e3:a5:c0:03:26:af:95:3c:ae:
         1d:0c:1e:25:07:2e:72:d6:d8:3d:8a:7d:88:dc:b1:c0:94:d6:
         59:64:58:2c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNU0ui/NM7rJZsXaU9HGN/lBe8aowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFDOEUwRkY4RkU4RjA4NUUyRDc5MkIyNjYzQTIyNUIw
RDkzQzE3QTAeFw0yNDA0MjMxMzI2NDJaFw0yNTA0MjIxMzMxNDJaMDMxMTAvBgNV
BAMTKERGRjJBMDU4ODQxRjE0RjIyRUM1RjFEOEY1RUI0REQzQkY0NjI3ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoLuWD1rXzdagHDvd5JSwEKErW
cFSnBugKB1ss2TqIbRBx2tcUK1n5MyMkZt/CirDTYAPtTwe7AcYXnbGJiIR/7Gz9
LJ1vR27h+yzIYudK5tKP6Xd29iRC2AMKnp7akiaSDu6E9C85J4pyC6xS1RAUQBMO
1Tw5vfu/Ok5I3e8PRgXzto2ZSYAswErkEOcHmcH4ZePFY31J/P0H3LV2gs9A5pLH
aNVsIyA/QbOUAChpIUTUYbrtUVpzWDiSHUNFd9MKOF6gd8IUpbhrJy8eh1nsahMz
mtjP/7H02bIz8l8OI7dC7BFnq2Q0iRuASPh/VbMlICM7yNgE7UBkFdoU+35RAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU3/KgWIQfFPIuxfHY9etN079GJ4EwHwYDVR0j
BBgwFoAU4cjg/4/o8IXi15KyZjoiWw2TwXowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGNmTGhrcXU3d3dRYzRGRlNXaVNkcjJKZmI1bkNiWHVtb2ZoZkRYUEVM
WHgvMC9FMUM4RTBGRjhGRThGMDg1RTJENzkyQjI2NjNBMjI1QjBEOTNDMTdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxQzhFMEZGOEZFOEYwODVF
MkQ3OTJCMjY2M0EyMjVCMEQ5M0MxN0EuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hjZkxoa3F1N3d3UWM0RkZTV2lTZHIySmZiNW5DYlh1bW9maGZEWFBFTFh4LzAv
MzQzNTJlMzUyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMzM1
MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0F3DANBgkqhkiG9w0BAQsFAAOCAQEAhf+mIs42TMkA
YHEwTEOLPVQq2u6wceLs35+gMzsMfPcNDCK6FkNDCz0n4FD0dAqztZ4mt4cSkxMg
5ZWRD1sK520XE3cCz4l3uJE90k8Cme5xBfPTpLiQcvckGaHfFApwIfQ4IUccnkYe
tdD2XQXW13qeK9wJ8VroRcfxfPUjCxr8HhVmKql1G7ECnaR4sLEd/AKGoBzDEP9+
eHqPHgG0tm1mmWfwl5H5gAKvalWpKK2oc2a144zFBL1DuZxBYRiI9Ht9Rp8M+7ni
HvVoiTlnHnlDpVuLNTTwKCb6fMnfPtX946XAAyavlTyuHQweJQcuctbYPYp9iNyx
wJTWWWRYLA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org