Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38362e302f32342d3234203d3e20323633323932.roa
File:                     34352e3136362e38362e302f32342d3234203d3e20323633323932.roa (raw, json)
Hash identifier:          3apVRdfn3VtWhlLpdUEkGXm5zzkPb6a8PNIT5+PsAsY=
Subject key identifier:   A5:B8:96:D6:C0:99:A4:81:79:DD:12:04:5F:36:E2:1B:01:D3:81:B6
Certificate issuer:       /CN=E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B
Certificate serial:       457145B930A1B07AB2691A6A82FBF126864755AB
Authority key identifier: E1:91:DE:39:00:DF:8B:A2:32:F6:BB:C8:D0:29:D8:0A:32:B4:CB:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38362e302f32342d3234203d3e20323633323932.roa
Signing time:             Sun 02 Jun 2024 02:49:19 +0000
ROA not before:           Sun 02 Jun 2024 02:44:19 +0000
ROA not after:            Sun 01 Jun 2025 02:49:19 +0000
asID:                     263292
IP address blocks:        45.166.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:71:45:b9:30:a1:b0:7a:b2:69:1a:6a:82:fb:f1:26:86:47:55:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B
        Validity
            Not Before: Jun  2 02:44:19 2024 GMT
            Not After : Jun  1 02:49:19 2025 GMT
        Subject: CN=A5B896D6C099A48179DD12045F36E21B01D381B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:c1:eb:20:55:19:1b:5c:33:d7:bd:7b:38:
                    5b:c8:12:b2:5f:ec:86:84:21:bd:91:49:7d:54:ba:
                    a1:5a:ed:9d:28:50:c9:52:bf:bc:0f:51:7c:94:65:
                    af:cd:de:ab:ac:5c:3f:be:51:0d:ae:21:9d:4f:90:
                    3a:6c:15:2a:fa:55:e2:00:b1:94:61:51:64:27:25:
                    99:ee:fc:06:03:0d:8b:20:4e:7b:02:09:17:ef:e8:
                    64:2f:01:2b:19:90:4b:07:b6:26:d5:25:89:f3:a6:
                    da:43:c5:68:7a:2a:52:ca:e8:48:3c:2c:7a:a4:6a:
                    a4:05:ca:b8:41:54:59:a3:cc:05:26:1c:b6:5a:96:
                    75:94:a6:ad:3a:89:03:7b:e1:ad:3f:e3:71:8c:a1:
                    28:8e:92:5d:c0:bf:2d:2f:73:be:7a:b0:04:52:67:
                    da:54:37:0a:f6:87:a4:66:31:40:55:2b:d4:f6:c7:
                    0c:2e:6f:18:0d:91:52:cd:ab:ab:e3:8b:40:c8:a7:
                    a4:65:62:d6:b9:a3:b8:aa:44:73:97:94:b7:57:c6:
                    95:67:76:f6:dc:38:1b:07:18:cb:3f:3e:69:ec:ec:
                    90:2a:ae:ff:bf:56:3c:9a:0d:d3:e5:e1:05:23:b6:
                    a7:94:d3:74:f1:8c:2d:b8:fe:4b:d3:ae:54:29:ca:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B8:96:D6:C0:99:A4:81:79:DD:12:04:5F:36:E2:1B:01:D3:81:B6
            X509v3 Authority Key Identifier:
                keyid:E1:91:DE:39:00:DF:8B:A2:32:F6:BB:C8:D0:29:D8:0A:32:B4:CB:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38362e302f32342d3234203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:a6:79:9f:fc:03:6f:bb:53:42:8b:d6:25:3e:2b:1c:dd:68:
         ba:46:8f:91:8a:7c:75:de:4b:8f:25:2d:38:66:14:d8:88:6f:
         89:ef:54:31:a2:42:d4:f5:49:43:4b:96:73:43:50:e4:8b:ce:
         55:cb:6d:fc:9a:0e:17:fc:a1:36:c8:64:31:06:7e:0f:1d:da:
         76:a2:e2:53:3c:22:0e:12:4b:7a:ee:91:8c:2e:ed:c9:08:36:
         03:bc:8a:61:f8:cc:13:d0:2b:67:b4:47:ef:48:8f:37:3d:db:
         43:a8:c4:e8:48:82:08:3a:cf:9d:b4:9f:0f:4c:cb:de:85:67:
         2d:03:ad:de:62:e7:2f:87:39:9e:d3:e7:ed:ef:10:0e:8e:1e:
         b4:62:15:2d:e7:23:44:0b:9b:3a:7a:4f:39:f1:ac:60:e5:0b:
         1c:b2:eb:42:cf:f4:55:04:7f:06:de:f3:cd:cb:14:a0:18:fb:
         60:a2:d1:bc:dd:cf:4f:60:5b:bb:83:ba:18:b2:16:11:0e:e8:
         0b:46:49:62:52:05:d5:ea:93:d1:80:82:0f:2c:65:97:61:a6:
         1e:80:b1:35:36:0e:a8:fb:42:7e:8e:f0:6e:03:05:6b:35:fd:
         03:7d:8f:7a:0e:0e:9d:88:e8:14:dc:75:ba:11:38:5c:07:ec:
         7c:e3:30:fe
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIURXFFuTChsHqyaRpqgvvxJoZHVaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE5MURFMzkwMERGOEJBMjMyRjZCQkM4RDAyOUQ4MEEz
MkI0Q0I3QjAeFw0yNDA2MDIwMjQ0MTlaFw0yNTA2MDEwMjQ5MTlaMDMxMTAvBgNV
BAMTKEE1Qjg5NkQ2QzA5OUE0ODE3OUREMTIwNDVGMzZFMjFCMDFEMzgxQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJoMHrIFUZG1wz1717OFvIErJf
7IaEIb2RSX1UuqFa7Z0oUMlSv7wPUXyUZa/N3qusXD++UQ2uIZ1PkDpsFSr6VeIA
sZRhUWQnJZnu/AYDDYsgTnsCCRfv6GQvASsZkEsHtibVJYnzptpDxWh6KlLK6Eg8
LHqkaqQFyrhBVFmjzAUmHLZalnWUpq06iQN74a0/43GMoSiOkl3Avy0vc756sARS
Z9pUNwr2h6RmMUBVK9T2xwwubxgNkVLNq6vji0DIp6RlYta5o7iqRHOXlLdXxpVn
dvbcOBsHGMs/Pmns7JAqrv+/VjyaDdPl4QUjtqeU03TxjC24/kvTrlQpygoFAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUpbiW1sCZpIF53RIEXzbiGwHTgbYwHwYDVR0j
BBgwFoAU4ZHeOQDfi6Iy9rvI0CnYCjK0y3swDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9icWlwZmpURnJWR1BTR3ptMVBxRnNldExqcjZYWFdQRWNVWGtzYmRWendG
LzAvRTE5MURFMzkwMERGOEJBMjMyRjZCQkM4RDAyOUQ4MEEzMkI0Q0I3Qi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FMTkxREUzOTAwREY4QkEyMzJG
NkJCQzhEMDI5RDgwQTMyQjRDQjdCLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9i
cWlwZmpURnJWR1BTR3ptMVBxRnNldExqcjZYWFdQRWNVWGtzYmRWendGLzAvMzQz
NTJlMzEzNjM2MmUzODM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzIz
OTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQALaZWMA0GCSqGSIb3DQEBCwUAA4IBAQCWpnmf/ANvu1NC
i9YlPisc3Wi6Ro+Rinx13kuPJS04ZhTYiG+J71QxokLU9UlDS5ZzQ1Dki85Vy238
mg4X/KE2yGQxBn4PHdp2ouJTPCIOEkt67pGMLu3JCDYDvIph+MwT0CtntEfvSI83
PdtDqMToSIIIOs+dtJ8PTMvehWctA63eYucvhzme0+ft7xAOjh60YhUt5yNEC5s6
ek858axg5QscsutCz/RVBH8G3vPNyxSgGPtgotG83c9PYFu7g7oYshYRDugLRkli
UgXV6pPRgIIPLGWXYaYegLE1Ng6o+0J+jvBuAwVrNf0DfY96Dg6diOgU3HW6EThc
B+x84zD+
-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:49 2024 by rpki-client on console-fra.rpki-client.org