Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132322e302f32332d3233203d3e20323639343233.roa
File:                     34352e3138362e3132322e302f32332d3233203d3e20323639343233.roa (raw, json)
Hash identifier:          NKSu+JZyQUyeShh3MayAHkldq7Dr0F1DAB3wFp9TfJE=
Subject key identifier:   7B:B3:E1:47:8C:42:DD:5E:4E:94:6D:48:C9:47:88:84:85:AE:82:8C
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       4820D193EB702C142F9E3147EB31DE1FACCB883E
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132322e302f32332d3233203d3e20323639343233.roa
Signing time:             Thu 02 May 2024 17:58:55 +0000
ROA not before:           Thu 02 May 2024 17:53:55 +0000
ROA not after:            Thu 01 May 2025 17:58:55 +0000
asID:                     269423
IP address blocks:        45.186.122.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:20:d1:93:eb:70:2c:14:2f:9e:31:47:eb:31:de:1f:ac:cb:88:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: May  2 17:53:55 2024 GMT
            Not After : May  1 17:58:55 2025 GMT
        Subject: CN=7BB3E1478C42DD5E4E946D48C947888485AE828C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:e3:5f:a8:02:04:d2:b7:7a:5a:5b:4b:b4:
                    8b:7b:3a:af:f2:d5:a1:60:9d:e6:73:39:b9:95:b7:
                    6a:05:07:7b:97:15:59:5c:df:a1:e1:e9:41:a0:e0:
                    05:54:e2:ac:e5:f2:eb:8e:10:a0:aa:99:79:0a:ee:
                    3e:81:fc:d5:42:6b:16:34:24:8c:31:51:4f:70:e8:
                    0b:f7:30:00:12:d1:f9:b2:9f:d6:35:50:66:31:92:
                    30:91:aa:4b:35:68:c1:5f:b1:93:1f:ca:b4:03:7e:
                    a6:d2:86:81:1b:e9:2a:72:1d:b8:43:50:4d:2d:77:
                    59:95:8a:75:84:9d:77:df:98:9c:04:50:71:16:06:
                    f6:4c:4c:07:bb:3b:b6:7e:55:dc:24:5c:c5:96:ae:
                    b5:35:a5:65:95:38:b7:60:00:fc:f3:15:73:81:f3:
                    b9:23:13:55:e2:24:a6:62:90:24:88:b3:59:f2:80:
                    03:f4:e1:3f:39:12:cb:6c:82:91:84:a1:94:76:0c:
                    25:43:91:ca:8a:bb:9a:39:ec:cd:25:a8:cb:c2:21:
                    31:2b:e9:54:e4:00:7c:80:48:02:8a:9f:dd:b0:45:
                    a3:0e:3f:ce:63:77:d3:1c:92:2a:cc:4d:3a:2e:6e:
                    6e:13:4c:79:55:de:1b:d2:56:92:8c:22:00:6f:92:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B3:E1:47:8C:42:DD:5E:4E:94:6D:48:C9:47:88:84:85:AE:82:8C
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132322e302f32332d3233203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:87:58:90:f2:4b:c7:f8:21:fb:af:dd:5e:eb:07:ee:11:9a:
         ea:05:89:af:fc:47:46:82:94:71:56:5e:0a:34:85:31:8d:c2:
         61:05:36:76:90:43:6f:b0:87:8b:a9:a8:89:8d:d8:38:e4:79:
         15:1e:73:5d:38:cd:9f:43:b1:60:78:17:9e:78:7d:dc:6b:5e:
         e4:43:41:16:4d:d4:a8:18:bc:c1:22:03:10:8a:35:f1:34:69:
         07:b9:bd:32:bb:92:37:09:e0:9b:83:63:52:e0:2a:1c:3f:60:
         89:e0:fa:51:77:bd:5e:61:fe:6f:48:09:02:53:08:1d:4c:79:
         19:f6:fe:5d:57:ed:ee:7a:90:f7:79:2e:af:a3:b7:62:ec:6f:
         9b:e1:eb:41:2e:f0:4f:bc:55:ae:f0:9a:83:61:98:82:7b:01:
         04:84:1e:20:83:94:26:66:b9:31:fd:22:e1:71:b4:9b:bb:5d:
         cc:75:c1:15:fc:0e:db:52:00:ca:f2:1f:60:29:26:cf:bb:ba:
         25:db:49:4b:b5:ee:2b:fd:94:c8:08:0e:a9:ee:f0:39:40:1f:
         e3:f9:1a:de:35:34:0f:08:78:f6:8e:af:7a:e2:e6:00:cd:1b:
         ed:6d:c9:33:9b:d0:e1:14:2d:30:e9:d9:72:2e:f7:c7:4d:a7:
         86:49:97:44
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSCDRk+twLBQvnjFH6zHeH6zLiD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBFMjQ1RDJDQUQwOUQzRTY1OUY1NTIwOTNDN0ZGQ0JF
MUQyNURDMDAeFw0yNDA1MDIxNzUzNTVaFw0yNTA1MDExNzU4NTVaMDMxMTAvBgNV
BAMTKDdCQjNFMTQ3OEM0MkRENUU0RTk0NkQ0OEM5NDc4ODg0ODVBRTgyOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyGeNfqAIE0rd6WltLtIt7Oq/y
1aFgneZzObmVt2oFB3uXFVlc36Hh6UGg4AVU4qzl8uuOEKCqmXkK7j6B/NVCaxY0
JIwxUU9w6Av3MAAS0fmyn9Y1UGYxkjCRqks1aMFfsZMfyrQDfqbShoEb6SpyHbhD
UE0td1mVinWEnXffmJwEUHEWBvZMTAe7O7Z+VdwkXMWWrrU1pWWVOLdgAPzzFXOB
87kjE1XiJKZikCSIs1nygAP04T85EstsgpGEoZR2DCVDkcqKu5o57M0lqMvCITEr
6VTkAHyASAKKn92wRaMOP85jd9MckirMTToubm4TTHlV3hvSVpKMIgBvkoWDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUe7PhR4xC3V5OlG1IyUeIhIWugowwHwYDVR0j
BBgwFoAU8OJF0srQnT5ln1Ugk8f/y+HSXcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHhMSnVBb3FweW5iM1oxTFNiZ3Jmelpad2ZZU3lLb2tQZnMzTDZCenN6
QWovMC9GMEUyNDVEMkNBRDA5RDNFNjU5RjU1MjA5M0M3RkZDQkUxRDI1REMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwRTI0NUQyQ0FEMDlEM0U2
NTlGNTUyMDkzQzdGRkNCRTFEMjVEQzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h4TEp1QW9xcHluYjNaMUxTYmdyZnpaWndmWVN5S29rUGZzM0w2QnpzekFqLzAv
MzQzNTJlMzEzODM2MmUzMTMyMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNDMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtunowDQYJKoZIhvcNAQELBQADggEBAFGHWJDy
S8f4Ifuv3V7rB+4RmuoFia/8R0aClHFWXgo0hTGNwmEFNnaQQ2+wh4upqImN2Djk
eRUec104zZ9DsWB4F554fdxrXuRDQRZN1KgYvMEiAxCKNfE0aQe5vTK7kjcJ4JuD
Y1LgKhw/YIng+lF3vV5h/m9ICQJTCB1MeRn2/l1X7e56kPd5Lq+jt2Lsb5vh60Eu
8E+8Va7wmoNhmIJ7AQSEHiCDlCZmuTH9IuFxtJu7Xcx1wRX8DttSAMryH2ApJs+7
uiXbSUu17iv9lMgIDqnu8DlAH+P5Gt41NA8IePaOr3ri5gDNG+1tyTOb0OEULTDp
2XIu98dNp4ZJl0Q=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:20 2024 by rpki-client on console-ams.rpki-client.org