Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/34352e3233302e3230382e302f32322d3234203d3e20323637323436.roa
File:                     34352e3233302e3230382e302f32322d3234203d3e20323637323436.roa (raw, json)
Hash identifier:          L3KOeqzzrfvFiWHn6cXyX3+MCJA9H+PUNKKu/3VCWeA=
Subject key identifier:   A0:8F:2A:1E:D1:2B:A2:FF:6C:DE:A1:A1:BF:5A:EF:54:67:0A:F7:93
Certificate issuer:       /CN=EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D
Certificate serial:       4C9CE1B3D97B8727E6102AA7563A99262810EA1F
Authority key identifier: EE:50:DC:3A:66:EC:9A:8B:5A:49:EF:AD:3F:0C:FF:4E:B4:19:E0:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/34352e3233302e3230382e302f32322d3234203d3e20323637323436.roa
Signing time:             Thu 04 Apr 2024 13:02:23 +0000
ROA not before:           Thu 04 Apr 2024 12:57:23 +0000
ROA not after:            Thu 03 Apr 2025 13:02:23 +0000
asID:                     267246
IP address blocks:        45.230.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.crl
                          rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9c:e1:b3:d9:7b:87:27:e6:10:2a:a7:56:3a:99:26:28:10:ea:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D
        Validity
            Not Before: Apr  4 12:57:23 2024 GMT
            Not After : Apr  3 13:02:23 2025 GMT
        Subject: CN=A08F2A1ED12BA2FF6CDEA1A1BF5AEF54670AF793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ea:63:9c:92:80:4f:bb:b6:24:20:48:58:c0:
                    99:c7:ea:48:d6:89:eb:80:72:7a:c0:34:04:07:92:
                    58:67:f4:32:3a:32:9c:38:38:8d:8e:9d:4b:ca:5b:
                    8d:ab:4a:50:ab:c9:50:41:c2:65:db:d9:04:2d:6e:
                    6e:71:2e:5a:1e:28:ad:be:12:0b:f4:f2:6d:52:ab:
                    ab:8f:0f:05:8f:cf:04:3c:13:79:87:e3:69:9f:7f:
                    9c:ab:f0:d9:eb:32:ae:10:bd:8c:9a:99:89:6d:4c:
                    47:fe:16:d9:03:09:11:36:5d:be:10:94:5a:69:0c:
                    bb:99:85:ab:9c:5b:98:74:be:e5:b8:61:16:c4:83:
                    23:61:60:ab:97:f0:c6:cb:9e:b1:a3:df:db:7a:49:
                    ec:1f:7f:cd:44:e3:0b:7b:04:50:69:42:0a:ac:73:
                    79:dc:98:88:b7:64:7b:2f:d3:61:cb:54:5f:df:7d:
                    f9:d4:bd:e3:0b:9a:f4:c8:c2:07:b3:5f:b9:fa:bd:
                    08:5b:e8:1c:d3:5b:a4:17:bf:00:0f:32:93:13:dc:
                    4f:97:7e:d3:d1:8f:3a:6d:34:07:9d:c2:4f:ba:1e:
                    21:38:a2:5b:01:6e:ec:3a:70:90:06:c9:f9:a1:7c:
                    61:8d:b4:c1:d1:63:96:e9:20:26:c2:06:18:51:c4:
                    c7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8F:2A:1E:D1:2B:A2:FF:6C:DE:A1:A1:BF:5A:EF:54:67:0A:F7:93
            X509v3 Authority Key Identifier:
                keyid:EE:50:DC:3A:66:EC:9A:8B:5A:49:EF:AD:3F:0C:FF:4E:B4:19:E0:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/34352e3233302e3230382e302f32322d3234203d3e20323637323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:fe:72:90:62:5c:51:56:94:1f:15:38:51:b6:f0:45:06:46:
         d2:a2:4a:e0:e0:e4:0d:c2:f6:6c:e8:35:d0:c0:aa:d1:87:00:
         27:52:60:ec:13:39:ae:f8:19:6e:38:df:00:f9:8c:d2:ac:d6:
         3f:13:fa:24:8a:64:da:fa:39:2a:62:c4:b9:eb:1b:f4:c5:ba:
         3d:46:07:62:84:11:6d:7b:0a:ea:ad:2d:de:30:af:76:4a:94:
         01:72:38:86:59:eb:43:16:9c:52:f8:1f:78:5b:25:2f:38:44:
         2f:1e:60:39:1f:e4:bb:3d:c9:e0:ae:24:f1:55:99:ae:25:4c:
         fb:6a:5c:41:61:10:d4:b2:89:e0:08:f8:05:74:a7:16:5d:30:
         f7:68:60:fc:46:60:ad:d1:ae:d0:ce:6d:2e:ef:eb:2d:cc:e6:
         95:d4:64:29:5a:62:7e:5f:6f:81:fb:ec:a9:71:f3:32:9b:56:
         51:62:c6:7c:19:41:19:10:f0:3a:c4:4c:9c:6d:94:6d:e1:fd:
         9a:4c:18:5b:72:bb:cd:7e:70:94:02:0f:62:64:9e:03:2d:3e:
         0d:10:11:ac:b5:71:73:fc:65:7b:a8:29:68:d3:d9:32:d6:a0:
         30:95:58:29:9c:af:e6:63:81:31:ad:b0:73:01:96:b0:05:32:
         08:10:b8:4b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTJzhs9l7hyfmECqnVjqZJigQ6h8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU1MERDM0E2NkVDOUE4QjVBNDlFRkFEM0YwQ0ZGNEVC
NDE5RTA3RDAeFw0yNDA0MDQxMjU3MjNaFw0yNTA0MDMxMzAyMjNaMDMxMTAvBgNV
BAMTKEEwOEYyQTFFRDEyQkEyRkY2Q0RFQTFBMUJGNUFFRjU0NjcwQUY3OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC96mOckoBPu7YkIEhYwJnH6kjW
ieuAcnrANAQHklhn9DI6Mpw4OI2OnUvKW42rSlCryVBBwmXb2QQtbm5xLloeKK2+
Egv08m1Sq6uPDwWPzwQ8E3mH42mff5yr8NnrMq4QvYyamYltTEf+FtkDCRE2Xb4Q
lFppDLuZhaucW5h0vuW4YRbEgyNhYKuX8MbLnrGj39t6Sewff81E4wt7BFBpQgqs
c3ncmIi3ZHsv02HLVF/fffnUveMLmvTIwgezX7n6vQhb6BzTW6QXvwAPMpMT3E+X
ftPRjzptNAedwk+6HiE4olsBbuw6cJAGyfmhfGGNtMHRY5bpICbCBhhRxMfZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoI8qHtErov9s3qGhv1rvVGcK95MwHwYDVR0j
BBgwFoAU7lDcOmbsmotaSe+tPwz/TrQZ4H0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNWdTZxcTd6RmFnVTIyeXNtdHVKQld4VEEzTkJNb2MxZThxd0NlWUVy
b28vMS9FRTUwREMzQTY2RUM5QThCNUE0OUVGQUQzRjBDRkY0RUI0MTlFMDdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFNTBEQzNBNjZFQzlBOEI1
QTQ5RUZBRDNGMENGRjRFQjQxOUUwN0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozVnU2cXE3ekZhZ1UyMnlzbXR1SkJXeFRBM05CTW9jMWU4cXdDZVlFcm9vLzEv
MzQzNTJlMzIzMzMwMmUzMjMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMjM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt5tAwDQYJKoZIhvcNAQELBQADggEBAC7+cpBi
XFFWlB8VOFG28EUGRtKiSuDg5A3C9mzoNdDAqtGHACdSYOwTOa74GW443wD5jNKs
1j8T+iSKZNr6OSpixLnrG/TFuj1GB2KEEW17CuqtLd4wr3ZKlAFyOIZZ60MWnFL4
H3hbJS84RC8eYDkf5Ls9yeCuJPFVma4lTPtqXEFhENSyieAI+AV0pxZdMPdoYPxG
YK3RrtDObS7v6y3M5pXUZClaYn5fb4H77Klx8zKbVlFixnwZQRkQ8DrETJxtlG3h
/ZpMGFtyu81+cJQCD2JkngMtPg0QEay1cXP8ZXuoKWjT2TLWoDCVWCmcr+ZjgTGt
sHMBlrAFMggQuEs=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org