Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130312e302f32342d3234203d3e20323638323639.roa
File:                     34352e3233372e3130312e302f32342d3234203d3e20323638323639.roa (raw, json)
Hash identifier:          Z+VR9bA8w6vdM3IDKvyiE93l8E+8U6VmNnlOhMxwhGg=
Subject key identifier:   5E:B7:52:F2:4D:40:37:A6:F6:F8:8B:A8:97:E1:52:6E:49:E0:45:4F
Certificate issuer:       /CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
Certificate serial:       0697561F2AD4022CD2F5754A925645BEBBD9A0A8
Authority key identifier: B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130312e302f32342d3234203d3e20323638323639.roa
Signing time:             Thu 04 Apr 2024 19:08:49 +0000
ROA not before:           Thu 04 Apr 2024 19:03:49 +0000
ROA not after:            Thu 03 Apr 2025 19:08:49 +0000
asID:                     268269
IP address blocks:        45.237.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.crl
                          rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:97:56:1f:2a:d4:02:2c:d2:f5:75:4a:92:56:45:be:bb:d9:a0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
        Validity
            Not Before: Apr  4 19:03:49 2024 GMT
            Not After : Apr  3 19:08:49 2025 GMT
        Subject: CN=5EB752F24D4037A6F6F88BA897E1526E49E0454F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:46:5f:42:a9:a7:47:19:d0:4d:b2:ce:e5:a1:
                    4a:22:e7:db:6c:a3:3d:c3:d3:6d:0a:5f:aa:36:12:
                    c1:a9:45:15:0c:ed:d3:d9:4f:1a:d3:45:7f:f4:3b:
                    85:69:3f:e9:94:cf:36:d0:0c:13:bb:0b:d9:2e:e5:
                    bc:1c:64:e6:95:df:e0:12:ee:f8:3a:80:b5:fd:68:
                    67:78:aa:21:73:94:e0:b6:02:b7:99:15:aa:51:74:
                    ea:c8:38:68:e6:61:a7:5c:39:d6:a1:ed:05:fd:34:
                    54:de:ec:e3:2b:b5:2f:c2:3f:ce:a4:12:ce:fa:ac:
                    07:ca:09:70:6b:48:02:02:10:fa:49:76:cd:55:70:
                    e7:b3:cc:a7:0e:15:0c:99:b4:8e:e6:89:1d:a4:fb:
                    ad:8c:4d:dc:50:19:03:9d:a8:0b:f2:d3:d4:b0:de:
                    23:85:1e:c6:28:f5:df:2c:e7:68:1c:ef:66:a7:f0:
                    e6:96:8e:cd:6d:4d:b8:3e:df:45:87:d9:21:02:e7:
                    31:bb:c5:24:8c:d3:40:6e:b5:d7:c3:27:50:f6:f0:
                    2d:a5:d1:b7:69:6e:85:1e:4b:83:7a:8a:5e:fc:05:
                    83:b8:6b:c4:54:ad:cb:bf:85:ac:06:f3:ff:6a:e5:
                    97:4e:bc:f7:27:11:72:ce:03:63:40:a2:86:95:cf:
                    71:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B7:52:F2:4D:40:37:A6:F6:F8:8B:A8:97:E1:52:6E:49:E0:45:4F
            X509v3 Authority Key Identifier:
                keyid:B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130312e302f32342d3234203d3e20323638323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:29:e2:71:2a:4f:47:5f:0c:62:5f:d9:f9:d7:55:03:08:ec:
         fa:18:eb:e1:b4:43:98:d2:5f:62:28:17:6e:0b:50:b9:d9:4b:
         ce:10:4c:79:1c:f9:c1:1e:27:6d:88:61:e1:0d:5b:94:f3:ef:
         1d:35:29:f9:5b:6c:e5:8e:7d:17:05:1a:b2:d4:bb:06:95:f5:
         d8:df:ce:bd:e2:32:0f:1a:ed:cb:7a:18:23:5a:a9:c9:1a:b8:
         8a:2a:48:ca:b4:71:25:79:57:b9:d8:7b:5f:f5:81:00:e3:6b:
         50:57:eb:95:31:1f:80:52:ba:de:4b:4a:ec:ad:8c:64:7c:5b:
         cc:10:12:80:12:27:97:d6:df:6a:ac:75:68:ec:89:44:2d:7e:
         32:27:cc:db:91:7e:99:e8:c7:d1:b2:50:01:71:ac:11:58:11:
         0b:74:e8:fd:35:5a:df:72:35:aa:93:58:df:fb:21:9a:d8:75:
         9f:d6:41:d8:49:84:3c:10:c0:02:34:a0:d9:33:ed:20:2d:38:
         80:20:1e:e2:74:da:91:56:e3:3d:3c:90:b3:2d:33:e7:15:c7:
         78:51:be:e8:a1:26:9a:ed:2a:cb:67:83:6f:53:6d:2f:89:17:
         c0:3a:51:26:db:d9:c3:8e:7c:b7:d7:24:58:6a:b3:f3:10:eb:
         dc:b1:4f:45
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUBpdWHyrUAizS9XVKklZFvrvZoKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgyNzQyMjJEQUU5RkNBODA5NzUxNzEzMzdEREU0RkYx
OUNFOEUyNDAeFw0yNDA0MDQxOTAzNDlaFw0yNTA0MDMxOTA4NDlaMDMxMTAvBgNV
BAMTKDVFQjc1MkYyNEQ0MDM3QTZGNkY4OEJBODk3RTE1MjZFNDlFMDQ1NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURl9CqadHGdBNss7loUoi59ts
oz3D020KX6o2EsGpRRUM7dPZTxrTRX/0O4VpP+mUzzbQDBO7C9ku5bwcZOaV3+AS
7vg6gLX9aGd4qiFzlOC2AreZFapRdOrIOGjmYadcOdah7QX9NFTe7OMrtS/CP86k
Es76rAfKCXBrSAICEPpJds1VcOezzKcOFQyZtI7miR2k+62MTdxQGQOdqAvy09Sw
3iOFHsYo9d8s52gc72an8OaWjs1tTbg+30WH2SEC5zG7xSSM00ButdfDJ1D28C2l
0bdpboUeS4N6il78BYO4a8RUrcu/hawG8/9q5ZdOvPcnEXLOA2NAooaVz3GXAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUXrdS8k1AN6b2+Iuol+FSbkngRU8wHwYDVR0j
BBgwFoAUuCdCItrp/KgJdRcTN93k/xnOjiQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NY2ZrU1N5SGJBMjVWR0RTZXhpV0NQbUx3WndYRWROTFlZQzdqVTdESzlC
LzEvQjgyNzQyMjJEQUU5RkNBODA5NzUxNzEzMzdEREU0RkYxOUNFOEUyNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CODI3NDIyMkRBRTlGQ0E4MDk3
NTE3MTMzN0RERTRGRjE5Q0U4RTI0LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9N
Y2ZrU1N5SGJBMjVWR0RTZXhpV0NQbUx3WndYRWROTFlZQzdqVTdESzlCLzEvMzQz
NTJlMzIzMzM3MmUzMTMwMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzgz
MjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAt7WUwDQYJKoZIhvcNAQELBQADggEBAOMp4nEqT0df
DGJf2fnXVQMI7PoY6+G0Q5jSX2IoF24LULnZS84QTHkc+cEeJ22IYeENW5Tz7x01
KflbbOWOfRcFGrLUuwaV9djfzr3iMg8a7ct6GCNaqckauIoqSMq0cSV5V7nYe1/1
gQDja1BX65UxH4BSut5LSuytjGR8W8wQEoASJ5fW32qsdWjsiUQtfjInzNuRfpno
x9GyUAFxrBFYEQt06P01Wt9yNaqTWN/7IZrYdZ/WQdhJhDwQwAI0oNkz7SAtOIAg
HuJ02pFW4z08kLMtM+cVx3hRvuihJprtKstng29TbS+JF8A6USbb2cOOfLfXJFhq
s/MQ69yxT0U=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:55 2024 by rpki-client on console-fra.rpki-client.org