Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/34352e3138382e3132302e302f32322d3234203d3e203533303035.roa
File:                     34352e3138382e3132302e302f32322d3234203d3e203533303035.roa (raw, json)
Hash identifier:          ortUqT17k3rZtp6LbEeE9qMP2o98/TpVL5tTD1fqBaE=
Subject key identifier:   67:7E:A8:D6:75:0F:BF:70:34:2F:C0:2C:95:20:C5:6C:23:B5:8D:26
Certificate issuer:       /CN=E77FFE037CEF76A2021361C120C5E3DD2783824C
Certificate serial:       2722372F2A7AA7167FC7692AD76D5C142254277D
Authority key identifier: E7:7F:FE:03:7C:EF:76:A2:02:13:61:C1:20:C5:E3:DD:27:83:82:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/34352e3138382e3132302e302f32322d3234203d3e203533303035.roa
Signing time:             Thu 04 Apr 2024 05:05:26 +0000
ROA not before:           Thu 04 Apr 2024 05:00:26 +0000
ROA not after:            Thu 03 Apr 2025 05:05:26 +0000
asID:                     53005
IP address blocks:        45.188.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.crl
                          rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:22:37:2f:2a:7a:a7:16:7f:c7:69:2a:d7:6d:5c:14:22:54:27:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E77FFE037CEF76A2021361C120C5E3DD2783824C
        Validity
            Not Before: Apr  4 05:00:26 2024 GMT
            Not After : Apr  3 05:05:26 2025 GMT
        Subject: CN=677EA8D6750FBF70342FC02C9520C56C23B58D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:db:54:77:a1:10:bd:1f:0f:3f:2f:b7:50:0a:
                    2e:1b:4d:d9:28:78:91:cc:37:7d:10:22:df:4e:21:
                    ca:74:3b:3a:21:91:7f:3d:80:d0:ac:14:b6:36:d0:
                    eb:a1:87:65:b1:98:16:62:31:28:09:00:b5:f6:41:
                    b2:84:e1:d3:1e:3e:8c:9e:83:30:d7:05:b1:14:72:
                    ef:f1:0c:6e:06:65:94:88:b3:ef:76:6d:22:35:a3:
                    25:34:d7:d9:cc:d5:64:dd:c7:ec:9c:04:98:c4:f7:
                    d9:27:c8:7d:eb:49:80:1f:b1:a1:0f:6e:b3:98:7a:
                    53:c5:9a:5f:3d:3d:14:cf:e5:cc:1f:88:5c:b3:9a:
                    a5:b7:8a:32:d3:ff:c2:4d:a3:89:b6:c9:06:53:91:
                    ef:b5:61:4a:a9:47:bc:f5:28:70:89:ef:ae:e7:85:
                    c7:d8:16:1d:83:48:db:50:21:ea:f0:b2:8f:a7:af:
                    24:ad:39:55:58:29:38:dc:1b:0c:66:ec:09:e5:18:
                    fa:08:90:c4:6c:99:8b:6f:4e:ab:bd:7f:99:e1:54:
                    1f:27:01:88:82:4a:99:e6:7d:10:36:9d:6f:9d:59:
                    71:17:1c:88:04:9d:e7:11:24:11:4f:78:f7:9e:fd:
                    70:46:ce:87:d0:bd:9e:be:1f:4a:22:5a:ff:8b:c1:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7E:A8:D6:75:0F:BF:70:34:2F:C0:2C:95:20:C5:6C:23:B5:8D:26
            X509v3 Authority Key Identifier:
                keyid:E7:7F:FE:03:7C:EF:76:A2:02:13:61:C1:20:C5:E3:DD:27:83:82:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/34352e3138382e3132302e302f32322d3234203d3e203533303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:10:42:e6:1f:de:06:b9:bd:e4:94:0e:0d:2b:34:e3:3a:f3:
         03:af:6e:94:fa:7f:f0:12:7b:4f:9f:cb:09:d1:74:e2:d4:70:
         5d:25:ba:48:03:3b:8d:e3:08:00:62:99:d4:1b:f3:4d:89:14:
         84:19:eb:fa:bf:97:87:5f:36:56:51:f9:29:76:cc:ba:73:7d:
         77:55:a7:ac:ab:8c:00:66:e3:c8:54:60:4d:bc:21:d7:ee:b8:
         5a:86:a2:1d:90:94:f0:85:77:f4:02:e1:71:af:1f:2b:6e:e7:
         81:09:f4:fe:1c:99:76:c3:e7:2d:72:ba:fc:c0:b4:5b:be:26:
         90:ad:3a:b3:da:17:01:6c:c1:7a:6b:30:df:f4:be:c9:f1:7d:
         e2:cf:b0:94:91:84:f9:e3:1a:66:a0:90:a1:59:81:ee:67:82:
         2f:a1:76:94:44:c7:78:42:3a:59:87:76:a3:02:2e:29:2c:64:
         8c:a3:05:c2:29:8a:8e:a9:c7:ea:6f:3b:f7:38:b2:e1:6f:ef:
         9b:d2:55:56:05:4d:16:00:65:4e:cd:a0:e0:da:07:9e:30:ac:
         f1:ae:33:aa:e4:4c:ea:c6:4a:3c:59:34:36:de:75:d0:48:05:
         3c:f9:b9:6a:a1:b1:bf:f2:1c:55:17:00:27:6d:74:8c:d8:a3:
         39:0d:75:a6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJyI3Lyp6pxZ/x2kq121cFCJUJ30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc3RkZFMDM3Q0VGNzZBMjAyMTM2MUMxMjBDNUUzREQy
NzgzODI0QzAeFw0yNDA0MDQwNTAwMjZaFw0yNTA0MDMwNTA1MjZaMDMxMTAvBgNV
BAMTKDY3N0VBOEQ2NzUwRkJGNzAzNDJGQzAyQzk1MjBDNTZDMjNCNThEMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD21R3oRC9Hw8/L7dQCi4bTdko
eJHMN30QIt9OIcp0OzohkX89gNCsFLY20Ouhh2WxmBZiMSgJALX2QbKE4dMePoye
gzDXBbEUcu/xDG4GZZSIs+92bSI1oyU019nM1WTdx+ycBJjE99knyH3rSYAfsaEP
brOYelPFml89PRTP5cwfiFyzmqW3ijLT/8JNo4m2yQZTke+1YUqpR7z1KHCJ767n
hcfYFh2DSNtQIerwso+nryStOVVYKTjcGwxm7AnlGPoIkMRsmYtvTqu9f5nhVB8n
AYiCSpnmfRA2nW+dWXEXHIgEnecRJBFPePee/XBGzofQvZ6+H0oiWv+LwfKVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZ36o1nUPv3A0L8AslSDFbCO1jSYwHwYDVR0j
BBgwFoAU53/+A3zvdqICE2HBIMXj3SeDgkwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG9VSlJWeXZlTjk5VjF0QUVqaWFnWG4xaGsxV1ZGU0tuM1pXNjFvU3hZ
N0MvMi9FNzdGRkUwMzdDRUY3NkEyMDIxMzYxQzEyMEM1RTNERDI3ODM4MjRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3N0ZGRTAzN0NFRjc2QTIw
MjEzNjFDMTIwQzVFM0REMjc4MzgyNEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hvVUpSVnl2ZU45OVYxdEFFamlhZ1huMWhrMVdWRlNLbjNaVzYxb1N4WTdDLzIv
MzQzNTJlMzEzODM4MmUzMTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMz
MzAzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbx4MA0GCSqGSIb3DQEBCwUAA4IBAQCKEELmH94G
ub3klA4NKzTjOvMDr26U+n/wEntPn8sJ0XTi1HBdJbpIAzuN4wgAYpnUG/NNiRSE
Gev6v5eHXzZWUfkpdsy6c313Vaesq4wAZuPIVGBNvCHX7rhahqIdkJTwhXf0AuFx
rx8rbueBCfT+HJl2w+ctcrr8wLRbviaQrTqz2hcBbMF6azDf9L7J8X3iz7CUkYT5
4xpmoJChWYHuZ4IvoXaURMd4QjpZh3ajAi4pLGSMowXCKYqOqcfqbzv3OLLhb++b
0lVWBU0WAGVOzaDg2geeMKzxrjOq5Ezqxko8WTQ23nXQSAU8+blqobG/8hxVFwAn
bXSM2KM5DXWm
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:25 2024 by rpki-client on console-fra.rpki-client.org