Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/34352e3232392e35322e302f32332d3234203d3e20323637313234.roa
File:                     34352e3232392e35322e302f32332d3234203d3e20323637313234.roa (raw, json)
Hash identifier:          8n1lAf7A3eIm54vXv7uK5swM0JwvxWG30TihGAtZCo0=
Subject key identifier:   56:B8:A3:B1:A9:92:93:B5:2E:68:68:A9:16:EF:EA:B1:28:DA:61:FB
Certificate issuer:       /CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
Certificate serial:       4E2C7ECF39EFB57024A0A79912B39EC4DA27398F
Authority key identifier: EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/34352e3232392e35322e302f32332d3234203d3e20323637313234.roa
Signing time:             Thu 04 Apr 2024 16:10:09 +0000
ROA not before:           Thu 04 Apr 2024 16:05:09 +0000
ROA not after:            Thu 03 Apr 2025 16:10:09 +0000
asID:                     267124
IP address blocks:        45.229.52.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl
                          rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2c:7e:cf:39:ef:b5:70:24:a0:a7:99:12:b3:9e:c4:da:27:39:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
        Validity
            Not Before: Apr  4 16:05:09 2024 GMT
            Not After : Apr  3 16:10:09 2025 GMT
        Subject: CN=56B8A3B1A99293B52E6868A916EFEAB128DA61FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f1:24:c6:5a:86:30:6c:bb:9b:d7:73:bb:ab:
                    cd:59:4d:79:32:e4:0f:de:41:d5:03:20:c0:a4:fb:
                    e2:20:d1:86:01:36:41:c4:ee:7f:f6:4a:cb:f0:1b:
                    9d:37:24:7a:5f:7b:10:70:53:f6:96:e7:72:02:28:
                    ca:54:93:62:29:10:eb:83:e0:34:0c:ae:32:b6:d5:
                    65:ad:d9:47:70:11:b7:a5:87:fc:c9:c0:ad:df:31:
                    5d:a5:2c:64:59:11:83:d9:56:c6:3a:f6:09:24:cc:
                    7d:9a:13:9b:c5:5f:35:df:31:c4:23:1c:f9:e5:76:
                    34:db:ff:b0:13:82:b1:00:f8:09:52:e2:32:d6:c2:
                    05:33:36:21:78:11:ce:89:04:4c:f9:7b:4b:db:91:
                    6b:53:8f:38:b2:1b:0d:2d:bc:20:ad:ad:3e:a3:e1:
                    c6:97:c7:ab:86:b6:fe:fc:53:60:b7:0c:1b:08:f7:
                    ba:61:f1:80:f5:3d:26:4a:7b:2a:84:9f:de:5a:6d:
                    50:5c:3c:91:66:95:a5:1d:79:f7:11:38:82:f4:17:
                    b3:f9:cc:20:4e:89:47:b9:72:ff:54:a6:da:14:6f:
                    3f:30:56:ac:26:a8:63:e7:d0:57:f2:84:5c:ad:e3:
                    c8:d4:08:be:cf:13:52:a4:c8:b1:a7:86:51:a5:5d:
                    95:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B8:A3:B1:A9:92:93:B5:2E:68:68:A9:16:EF:EA:B1:28:DA:61:FB
            X509v3 Authority Key Identifier:
                keyid:EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/34352e3232392e35322e302f32332d3234203d3e20323637313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:5a:91:8b:58:97:32:ff:ca:73:f3:1f:62:9d:d2:17:e0:57:
         bf:d0:8b:53:a7:6f:44:0c:1b:97:ee:73:21:44:b4:b2:e6:2a:
         5c:54:1e:3d:f2:a6:16:92:cd:61:63:5b:f0:c8:28:73:c5:d4:
         02:b5:7e:0f:d3:8b:59:b4:b2:da:ba:16:43:a7:f1:b8:6f:59:
         c8:d9:45:28:e4:d9:84:98:fc:76:5b:1d:e0:ed:8d:23:9e:3d:
         4d:a3:f2:0f:eb:7f:06:14:c9:55:8c:e4:d1:6e:8f:ca:7b:24:
         2d:70:97:3d:cf:e2:6d:f4:7b:ad:84:19:00:3f:4e:aa:a2:68:
         e3:2f:a1:20:77:7b:a2:42:96:44:eb:c2:28:ee:95:14:8c:b5:
         c7:f2:a5:0d:76:53:17:ba:78:fd:e9:dd:a5:7b:8d:a0:32:0b:
         ac:4f:69:ad:e2:5a:b7:6e:cd:bd:b7:d2:f8:37:06:f4:56:42:
         59:06:06:73:68:dd:e7:d4:2b:c6:12:a2:7d:b8:b9:3b:30:6f:
         f8:dd:3a:3f:2b:0c:64:4d:75:05:84:8d:c6:19:3d:88:b7:b1:
         ea:1d:43:42:34:7f:4f:a5:73:b5:af:9e:6b:61:73:81:fa:c8:
         0c:88:ef:b9:52:98:54:41:52:e7:47:13:a2:f2:d7:13:1a:e4:
         49:43:8c:32
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTix+zznvtXAkoKeZErOexNonOY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJCOEMwRUNEQjgzNkY2NjBGNzBDQjAyNUYyQTFEMUVG
RDZFNEE1MzAeFw0yNDA0MDQxNjA1MDlaFw0yNTA0MDMxNjEwMDlaMDMxMTAvBgNV
BAMTKDU2QjhBM0IxQTk5MjkzQjUyRTY4NjhBOTE2RUZFQUIxMjhEQTYxRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN8STGWoYwbLub13O7q81ZTXky
5A/eQdUDIMCk++Ig0YYBNkHE7n/2SsvwG503JHpfexBwU/aW53ICKMpUk2IpEOuD
4DQMrjK21WWt2UdwEbelh/zJwK3fMV2lLGRZEYPZVsY69gkkzH2aE5vFXzXfMcQj
HPnldjTb/7ATgrEA+AlS4jLWwgUzNiF4Ec6JBEz5e0vbkWtTjziyGw0tvCCtrT6j
4caXx6uGtv78U2C3DBsI97ph8YD1PSZKeyqEn95abVBcPJFmlaUdefcROIL0F7P5
zCBOiUe5cv9UptoUbz8wVqwmqGPn0FfyhFyt48jUCL7PE1KkyLGnhlGlXZWDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVrijsamSk7UuaGipFu/qsSjaYfswHwYDVR0j
BBgwFoAU67jA7NuDb2YPcMsCXyodHv1uSlMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNmWDF4amVoN1ZHUlpxU2FBWmN1N0hyaHBiblVkR1BLdzk4SDFiTldq
VzEvMS9FQkI4QzBFQ0RCODM2RjY2MEY3MENCMDI1RjJBMUQxRUZENkU0QTUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCQjhDMEVDREI4MzZGNjYw
RjcwQ0IwMjVGMkExRDFFRkQ2RTRBNTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozZlgxeGplaDdWR1JacVNhQVpjdTdIcmhwYm5VZEdQS3c5OEgxYk5XalcxLzEv
MzQzNTJlMzIzMjM5MmUzNTMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM3
MzEzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLeU0MA0GCSqGSIb3DQEBCwUAA4IBAQAnWpGLWJcy
/8pz8x9indIX4Fe/0ItTp29EDBuX7nMhRLSy5ipcVB498qYWks1hY1vwyChzxdQC
tX4P04tZtLLauhZDp/G4b1nI2UUo5NmEmPx2Wx3g7Y0jnj1No/IP638GFMlVjOTR
bo/KeyQtcJc9z+Jt9HuthBkAP06qomjjL6Egd3uiQpZE68Io7pUUjLXH8qUNdlMX
unj96d2le42gMgusT2mt4lq3bs29t9L4Nwb0VkJZBgZzaN3n1CvGEqJ9uLk7MG/4
3To/KwxkTXUFhI3GGT2It7HqHUNCNH9PpXO1r55rYXOB+sgMiO+5UphUQVLnRxOi
8tcTGuRJQ4wy
-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:48 2024 by rpki-client on console-fra.rpki-client.org