Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa
File:                     34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa (raw, json)
Hash identifier:          WywrrlqYbNpP2axsmDiWu7iwgVM/dO5MJuV889E0QNM=
Subject key identifier:   18:5E:69:2E:D7:46:97:32:3C:57:27:A9:56:E9:7A:D6:49:76:52:6E
Certificate issuer:       /CN=1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB
Certificate serial:       64126E7555B18BE7C51235D1B3A0B2E327E10F61
Authority key identifier: 1F:6C:29:54:DA:AB:7F:76:D6:4B:99:3F:3B:15:C4:6F:86:A9:FF:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa
Signing time:             Thu 04 Apr 2024 16:02:06 +0000
ROA not before:           Thu 04 Apr 2024 15:57:06 +0000
ROA not after:            Thu 03 Apr 2025 16:02:06 +0000
asID:                     267083
IP address blocks:        45.228.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.crl
                          rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:12:6e:75:55:b1:8b:e7:c5:12:35:d1:b3:a0:b2:e3:27:e1:0f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB
        Validity
            Not Before: Apr  4 15:57:06 2024 GMT
            Not After : Apr  3 16:02:06 2025 GMT
        Subject: CN=185E692ED74697323C5727A956E97AD64976526E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:1b:e0:da:de:84:db:2f:0f:1a:23:a5:c5:
                    5e:ff:22:7d:da:33:ea:8b:77:ca:8f:5c:38:3c:dc:
                    66:70:26:ed:bb:1e:bb:5c:d3:4f:34:07:6d:49:d9:
                    43:8e:fe:81:bf:74:34:88:45:8f:ce:4b:11:35:e0:
                    bd:34:07:84:ba:1a:19:7a:e4:c8:78:f8:ff:4d:2a:
                    75:91:54:d9:f3:d6:6f:45:b5:f9:e6:0f:c5:9c:36:
                    72:3c:05:7d:f0:39:af:9f:2f:f9:f2:3f:72:2c:bd:
                    81:7a:2f:3b:87:72:7d:0a:e5:7b:79:ab:09:0a:c3:
                    d7:e7:14:b2:ea:66:92:45:b1:5f:9e:cb:41:b4:3f:
                    5c:e7:62:f1:fa:d8:c5:1c:08:96:69:fd:ae:52:ac:
                    f1:2c:29:a2:bc:3d:c1:22:6b:28:27:3d:ff:6e:5e:
                    19:67:0f:d2:5b:ce:89:8d:c7:97:13:34:02:ee:3d:
                    80:50:c9:34:13:0b:4a:a0:cd:74:39:ba:5e:b0:24:
                    a4:4d:51:70:a1:d8:c7:ac:e5:53:d7:1d:6e:b6:28:
                    be:9b:72:52:5f:81:6e:92:8b:fc:82:72:35:37:26:
                    a8:47:08:9d:04:34:44:31:87:72:17:21:f5:ff:8f:
                    8a:c6:68:2d:06:ca:14:f1:b8:c1:13:e0:e4:82:19:
                    3e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5E:69:2E:D7:46:97:32:3C:57:27:A9:56:E9:7A:D6:49:76:52:6E
            X509v3 Authority Key Identifier:
                keyid:1F:6C:29:54:DA:AB:7F:76:D6:4B:99:3F:3B:15:C4:6F:86:A9:FF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:53:70:e3:f4:d0:8f:e1:b2:27:30:3e:a1:16:51:fa:39:3c:
         c3:52:f4:fa:33:ee:1d:3c:b7:8a:29:d5:65:0d:1d:d8:18:c2:
         24:f6:53:d0:60:86:db:7b:00:4c:a6:68:f0:0f:63:eb:e7:76:
         78:bc:3c:85:53:c0:e4:3f:3e:15:f9:2b:c7:80:2a:c1:bd:34:
         6c:bf:bb:76:ef:fe:5c:f1:10:8f:e4:0f:5c:82:9d:1f:26:3b:
         f6:62:c5:e8:08:57:87:a1:44:bd:10:ed:32:53:a6:7f:a4:42:
         09:7b:e7:a7:b1:a6:77:a4:17:55:47:10:ac:3b:69:ab:82:53:
         43:7a:26:25:4d:32:8e:36:8d:22:9a:9d:5d:70:b1:b5:cf:f0:
         04:4e:98:a2:e4:c3:df:7d:73:b8:0c:9f:0c:15:7d:7e:13:59:
         17:1c:1a:2d:12:5e:3e:c0:9b:23:de:c4:45:b9:7f:8a:dc:e8:
         7d:e7:d0:05:69:f1:e5:60:fe:10:fb:b4:50:ca:19:d3:80:b8:
         a6:62:f4:20:28:21:fd:74:7f:cd:7a:7c:6b:62:56:13:92:cd:
         4f:0a:25:a9:02:93:8d:42:48:6d:0e:f0:82:0f:ae:1c:c6:2a:
         26:d9:cf:87:65:0f:e8:a4:c8:91:13:75:8b:d9:77:89:34:f8:
         a1:8e:aa:a6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZBJudVWxi+fFEjXRs6Cy4yfhD2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY2QzI5NTREQUFCN0Y3NkQ2NEI5OTNGM0IxNUM0NkY4
NkE5RkZEQjAeFw0yNDA0MDQxNTU3MDZaFw0yNTA0MDMxNjAyMDZaMDMxMTAvBgNV
BAMTKDE4NUU2OTJFRDc0Njk3MzIzQzU3MjdBOTU2RTk3QUQ2NDk3NjUyNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAxRvg2t6E2y8PGiOlxV7/In3a
M+qLd8qPXDg83GZwJu27Hrtc0080B21J2UOO/oG/dDSIRY/OSxE14L00B4S6Ghl6
5Mh4+P9NKnWRVNnz1m9FtfnmD8WcNnI8BX3wOa+fL/nyP3IsvYF6LzuHcn0K5Xt5
qwkKw9fnFLLqZpJFsV+ey0G0P1znYvH62MUcCJZp/a5SrPEsKaK8PcEiaygnPf9u
XhlnD9JbzomNx5cTNALuPYBQyTQTC0qgzXQ5ul6wJKRNUXCh2Mes5VPXHW62KL6b
clJfgW6Si/yCcjU3JqhHCJ0ENEQxh3IXIfX/j4rGaC0GyhTxuMET4OSCGT4lAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGF5pLtdGlzI8VyepVul61kl2Um4wHwYDVR0j
BBgwFoAUH2wpVNqrf3bWS5k/OxXEb4ap/9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGdYQXdvdHpyTHA3Y2J2VVZLS3p4TEFkQ3pIRnJnV2szTm9DVFhRaEpI
UzkvMS8xRjZDMjk1NERBQUI3Rjc2RDY0Qjk5M0YzQjE1QzQ2Rjg2QTlGRkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGNkMyOTU0REFBQjdGNzZE
NjRCOTkzRjNCMTVDNDZGODZBOUZGREIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hnWEF3b3R6ckxwN2NidlVWS0t6eExBZEN6SEZyZ1drM05vQ1RYUWhKSFM5LzEv
MzQzNTJlMzIzMjM4MmUzMjM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMDM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt5PQwDQYJKoZIhvcNAQELBQADggEBAJFTcOP0
0I/hsicwPqEWUfo5PMNS9Poz7h08t4op1WUNHdgYwiT2U9Bghtt7AEymaPAPY+vn
dni8PIVTwOQ/PhX5K8eAKsG9NGy/u3bv/lzxEI/kD1yCnR8mO/ZixegIV4ehRL0Q
7TJTpn+kQgl756expnekF1VHEKw7aauCU0N6JiVNMo42jSKanV1wsbXP8AROmKLk
w999c7gMnwwVfX4TWRccGi0SXj7AmyPexEW5f4rc6H3n0AVp8eVg/hD7tFDKGdOA
uKZi9CAoIf10f816fGtiVhOSzU8KJakCk41CSG0O8IIPrhzGKibZz4dlD+ikyJET
dYvZd4k0+KGOqqY=
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:56 2024 by rpki-client on console-fra.rpki-client.org