Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/34352e3233352e31362e302f32332d3234203d3e20323632333931.roa
File:                     34352e3233352e31362e302f32332d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          SITvPpocKwjPElTLQsM96nUGAkRT1bA/UUrcrXgix5Q=
Subject key identifier:   F3:C6:16:F9:BF:7A:69:E6:43:A6:D4:8F:7C:8B:3C:E8:C4:62:7E:72
Certificate issuer:       /CN=4EED9818567EF67A561AEB24FB9C960FF884B0BB
Certificate serial:       5CD79B40F3BAD50415AC59158484AAEBD7AF40EC
Authority key identifier: 4E:ED:98:18:56:7E:F6:7A:56:1A:EB:24:FB:9C:96:0F:F8:84:B0:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/34352e3233352e31362e302f32332d3234203d3e20323632333931.roa
Signing time:             Wed 14 Aug 2024 01:06:13 +0000
ROA not before:           Wed 14 Aug 2024 01:01:13 +0000
ROA not after:            Wed 13 Aug 2025 01:06:13 +0000
asID:                     262391
IP address blocks:        45.235.16.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d7:9b:40:f3:ba:d5:04:15:ac:59:15:84:84:aa:eb:d7:af:40:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EED9818567EF67A561AEB24FB9C960FF884B0BB
        Validity
            Not Before: Aug 14 01:01:13 2024 GMT
            Not After : Aug 13 01:06:13 2025 GMT
        Subject: CN=F3C616F9BF7A69E643A6D48F7C8B3CE8C4627E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:f5:04:da:87:68:c4:3d:bb:83:9a:72:a0:
                    95:7b:65:a4:1d:69:0d:0b:22:37:32:3d:27:85:8b:
                    cf:bd:8e:5a:93:67:8a:34:bf:53:f6:30:cc:84:b4:
                    c3:c6:30:8c:8b:ad:2f:ce:8b:5e:b8:77:4e:93:ec:
                    3b:d6:03:b8:6b:b0:f5:0c:f6:9a:ce:ea:2a:27:45:
                    d9:2e:54:1e:b6:cb:01:94:41:f0:ef:1e:35:19:c6:
                    68:b5:79:c4:29:92:9e:7a:f0:fd:2b:0f:31:c8:5c:
                    cd:1e:25:ab:55:21:d2:1f:1d:92:32:5b:5b:32:12:
                    e0:7b:d3:79:f0:9e:22:a2:d4:60:ac:92:5d:15:bf:
                    d2:26:2e:00:dc:02:e2:8b:0f:f2:44:09:d7:4e:e1:
                    a7:04:9e:ed:2c:88:68:63:32:88:58:f1:53:30:8c:
                    5f:9e:3f:5d:63:d7:eb:6a:5e:84:74:26:31:d0:c8:
                    97:c6:37:9b:5d:76:36:bd:8a:ce:61:df:68:95:cc:
                    d8:5c:d1:8c:d6:9b:c8:5d:f2:52:00:9b:82:e2:35:
                    7c:ef:8c:18:b2:3f:42:dd:83:f5:98:9c:56:d3:00:
                    1e:4d:8f:e0:f2:1a:2e:2a:47:86:dc:c8:09:bf:17:
                    4a:1d:69:a2:3d:8d:7d:53:c3:a2:a4:df:45:d2:a6:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C6:16:F9:BF:7A:69:E6:43:A6:D4:8F:7C:8B:3C:E8:C4:62:7E:72
            X509v3 Authority Key Identifier:
                keyid:4E:ED:98:18:56:7E:F6:7A:56:1A:EB:24:FB:9C:96:0F:F8:84:B0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/34352e3233352e31362e302f32332d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:e9:c9:a0:67:ec:40:6c:01:b6:f3:5c:4d:ee:d7:ef:9e:17:
         84:58:d2:70:42:d1:d3:8b:d6:a9:19:15:c6:51:51:4e:10:51:
         d0:b6:3e:3c:cd:b6:74:19:91:c7:e6:b4:88:2b:c6:84:58:0c:
         98:b0:e7:61:84:aa:28:cf:de:25:92:07:93:26:09:33:33:4b:
         67:65:6b:af:bd:f0:eb:f3:d3:d7:0b:ed:f2:b1:3a:13:30:c0:
         f4:2d:d6:ef:bf:6c:3f:a0:ed:5c:88:d5:64:b5:d8:9e:00:72:
         8a:fb:f9:8a:cb:a4:0e:c0:eb:07:6c:01:18:70:9f:76:0f:2c:
         0e:35:8d:e9:3c:a2:d5:c6:7f:45:4d:0d:93:df:cd:fc:ee:96:
         f2:c7:d0:c8:24:7d:5a:71:94:6d:3e:ad:65:95:c7:90:ea:3f:
         31:db:cb:3b:c7:16:5a:23:c2:2d:c5:2e:6b:20:e8:24:9f:83:
         06:6f:d0:55:37:2d:86:28:ac:c5:b5:17:27:74:c6:9c:57:2f:
         b4:18:89:a3:ff:c7:07:9e:cc:18:f9:df:f8:4d:a1:b8:19:50:
         ac:7b:d3:fb:7a:6d:93:24:5d:f8:82:71:b3:a3:5f:a1:30:7b:
         69:f5:44:96:21:07:28:47:1a:a7:20:78:c9:69:a4:ba:6b:6b:
         2e:7b:97:bf
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUXNebQPO61QQVrFkVhISq69evQOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVFRDk4MTg1NjdFRjY3QTU2MUFFQjI0RkI5Qzk2MEZG
ODg0QjBCQjAeFw0yNDA4MTQwMTAxMTNaFw0yNTA4MTMwMTA2MTNaMDMxMTAvBgNV
BAMTKEYzQzYxNkY5QkY3QTY5RTY0M0E2RDQ4RjdDOEIzQ0U4QzQ2MjdFNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLA/UE2odoxD27g5pyoJV7ZaQd
aQ0LIjcyPSeFi8+9jlqTZ4o0v1P2MMyEtMPGMIyLrS/Oi164d06T7DvWA7hrsPUM
9prO6ionRdkuVB62ywGUQfDvHjUZxmi1ecQpkp568P0rDzHIXM0eJatVIdIfHZIy
W1syEuB703nwniKi1GCskl0Vv9ImLgDcAuKLD/JECddO4acEnu0siGhjMohY8VMw
jF+eP11j1+tqXoR0JjHQyJfGN5tddja9is5h32iVzNhc0YzWm8hd8lIAm4LiNXzv
jBiyP0Ldg/WYnFbTAB5Nj+DyGi4qR4bcyAm/F0odaaI9jX1Tw6Kk30XSphDbAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU88YW+b96aeZDptSPfIs86MRifnIwHwYDVR0j
BBgwFoAUTu2YGFZ+9npWGusk+5yWD/iEsLswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zeWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5
LzAvNEVFRDk4MTg1NjdFRjY3QTU2MUFFQjI0RkI5Qzk2MEZGODg0QjBCQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80RUVEOTgxODU2N0VGNjdBNTYx
QUVCMjRGQjlDOTYwRkY4ODRCMEJCLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
eWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5LzAvMzQz
NTJlMzIzMzM1MmUzMTM2MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjMyMzMz
OTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBLesQMA0GCSqGSIb3DQEBCwUAA4IBAQAy6cmgZ+xAbAG2
81xN7tfvnheEWNJwQtHTi9apGRXGUVFOEFHQtj48zbZ0GZHH5rSIK8aEWAyYsOdh
hKooz94lkgeTJgkzM0tnZWuvvfDr89PXC+3ysToTMMD0Ldbvv2w/oO1ciNVktdie
AHKK+/mKy6QOwOsHbAEYcJ92DywONY3pPKLVxn9FTQ2T38387pbyx9DIJH1acZRt
Pq1llceQ6j8x28s7xxZaI8ItxS5rIOgkn4MGb9BVNy2GKKzFtRcndMacVy+0GImj
/8cHnswY+d/4TaG4GVCse9P7em2TJF34gnGzo1+hMHtp9USWIQcoRxqnIHjJaaS6
a2sue5e/
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:24 2024 by rpki-client on console-ams.rpki-client.org