Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e302f32342d3234203d3e20323637323536.roa
File:                     34352e3233322e35302e302f32342d3234203d3e20323637323536.roa (raw, json)
Hash identifier:          uzgQbSqsr7l6ZfumTgrViMimRqOU8fHm1ttufbd/C3E=
Subject key identifier:   66:2E:93:E1:DA:DA:00:1F:97:83:CC:B6:F8:6F:5D:CD:BE:49:62:E1
Certificate issuer:       /CN=93B81388D9F01BB3ADD678C7DD82C64A03F69013
Certificate serial:       1CB774E20F17F6B91DC7D82714E1DF659DB9DA48
Authority key identifier: 93:B8:13:88:D9:F0:1B:B3:AD:D6:78:C7:DD:82:C6:4A:03:F6:90:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e302f32342d3234203d3e20323637323536.roa
Signing time:             Mon 14 Apr 2025 18:41:23 +0000
ROA not before:           Mon 14 Apr 2025 18:36:23 +0000
ROA not after:            Mon 13 Apr 2026 18:41:23 +0000
asID:                     267256
IP address blocks:        45.232.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.crl
                          rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 23:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b7:74:e2:0f:17:f6:b9:1d:c7:d8:27:14:e1:df:65:9d:b9:da:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93B81388D9F01BB3ADD678C7DD82C64A03F69013
        Validity
            Not Before: Apr 14 18:36:23 2025 GMT
            Not After : Apr 13 18:41:23 2026 GMT
        Subject: CN=662E93E1DADA001F9783CCB6F86F5DCDBE4962E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:15:30:f4:b6:ff:cd:f9:b3:c9:b5:eb:ad:
                    1c:47:b7:80:b9:2b:b1:44:e7:4e:f3:0c:76:4b:57:
                    59:67:b8:b0:67:d4:92:58:90:de:70:f3:f4:c1:c4:
                    95:c5:bc:e8:f7:7f:7e:06:e1:af:f7:de:a8:f5:3c:
                    4b:01:f1:1b:f1:2f:af:f1:fe:12:29:47:82:19:91:
                    a9:44:9c:25:4c:27:b5:09:fa:43:02:63:7d:1c:5c:
                    88:75:a8:2b:bc:43:1a:b0:11:da:ae:02:cf:64:0d:
                    3d:11:ac:6d:74:a6:8d:df:e0:cd:95:03:c5:55:28:
                    bb:7d:54:ef:de:86:56:86:54:ea:ef:b7:d1:23:cd:
                    6e:60:6e:59:a0:3d:db:a1:ee:da:c7:a7:c2:82:87:
                    57:63:e3:0a:d7:a6:65:33:5d:d0:8c:9c:8b:9d:bc:
                    33:73:40:f8:3e:7a:36:8a:de:78:f2:31:1c:0c:d7:
                    f4:47:7e:ae:8f:79:60:cb:17:1b:02:ad:fc:17:a5:
                    af:8f:48:ec:6d:d9:8b:0b:1c:79:d9:1d:98:0f:a3:
                    45:3f:f0:b2:8d:0e:fe:76:f5:ca:6d:f7:de:f4:b2:
                    d2:f8:1a:4d:3a:70:98:7b:6a:df:4c:8d:aa:c6:db:
                    a9:b8:82:2e:85:fb:8b:d4:2d:f5:8e:06:d5:4d:89:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2E:93:E1:DA:DA:00:1F:97:83:CC:B6:F8:6F:5D:CD:BE:49:62:E1
            X509v3 Authority Key Identifier:
                keyid:93:B8:13:88:D9:F0:1B:B3:AD:D6:78:C7:DD:82:C6:4A:03:F6:90:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e302f32342d3234203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:b3:ba:c5:c0:6a:92:08:ec:bc:19:cf:38:21:d2:52:47:27:
         25:1b:ed:c1:30:53:56:a3:fd:c4:46:78:db:5f:7f:e3:81:40:
         04:2a:bb:b1:f7:62:d7:00:85:62:bc:c1:d2:ec:cb:cf:ea:e1:
         bb:27:0f:8c:8a:82:c3:29:3c:69:de:9c:b5:19:8a:0b:d3:65:
         0f:76:91:7f:04:3f:33:a6:e9:e2:ac:0e:f8:17:ef:a6:6d:c0:
         eb:b8:22:1e:d3:47:06:5c:93:8f:8d:48:4b:91:58:15:97:d3:
         14:5e:45:33:3b:d9:04:7e:36:fc:bc:48:5b:f2:5a:5f:a2:87:
         f8:4a:c8:7c:f2:40:0c:06:5c:23:76:08:17:e0:b6:21:16:28:
         08:e5:b2:3e:6a:ca:62:a8:98:ff:07:d9:4a:ca:59:11:63:01:
         f2:e6:94:35:8e:57:e2:1b:cf:c1:d8:a0:d2:a4:9f:7b:69:22:
         bc:7f:1a:51:5e:e1:4f:2e:84:f6:42:85:88:2a:e0:c4:28:f5:
         da:65:c4:b1:c8:a9:f6:36:b2:53:62:ec:0b:14:cb:9f:32:2d:
         f9:fa:27:9f:64:fb:2f:22:1d:93:de:e2:b8:f0:13:b4:da:1b:
         28:b7:70:f0:14:3a:0c:e4:79:5f:03:e7:f2:08:5a:e9:f4:61:
         a3:55:13:e2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHLd04g8X9rkdx9gnFOHfZZ252kgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNCODEzODhEOUYwMUJCM0FERDY3OEM3REQ4MkM2NEEw
M0Y2OTAxMzAeFw0yNTA0MTQxODM2MjNaFw0yNjA0MTMxODQxMjNaMDMxMTAvBgNV
BAMTKDY2MkU5M0UxREFEQTAwMUY5NzgzQ0NCNkY4NkY1RENEQkU0OTYyRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtNhUw9Lb/zfmzybXrrRxHt4C5
K7FE507zDHZLV1lnuLBn1JJYkN5w8/TBxJXFvOj3f34G4a/33qj1PEsB8RvxL6/x
/hIpR4IZkalEnCVMJ7UJ+kMCY30cXIh1qCu8QxqwEdquAs9kDT0RrG10po3f4M2V
A8VVKLt9VO/ehlaGVOrvt9EjzW5gblmgPduh7trHp8KCh1dj4wrXpmUzXdCMnIud
vDNzQPg+ejaK3njyMRwM1/RHfq6PeWDLFxsCrfwXpa+PSOxt2YsLHHnZHZgPo0U/
8LKNDv529cpt9970stL4Gk06cJh7at9MjarG26m4gi6F+4vULfWOBtVNiatrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZi6T4draAB+Xg8y2+G9dzb5JYuEwHwYDVR0j
BBgwFoAUk7gTiNnwG7Ot1njH3YLGSgP2kBMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVlSzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVpr
bmgvMC85M0I4MTM4OEQ5RjAxQkIzQURENjc4QzdERDgyQzY0QTAzRjY5MDEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzQjgxMzg4RDlGMDFCQjNB
REQ2NzhDN0REODJDNjRBMDNGNjkwMTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzAv
MzQzNTJlMzIzMzMyMmUzNTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzIzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALegyMA0GCSqGSIb3DQEBCwUAA4IBAQCAs7rFwGqS
COy8Gc84IdJSRyclG+3BMFNWo/3ERnjbX3/jgUAEKrux92LXAIVivMHS7MvP6uG7
Jw+MioLDKTxp3py1GYoL02UPdpF/BD8zpunirA74F++mbcDruCIe00cGXJOPjUhL
kVgVl9MUXkUzO9kEfjb8vEhb8lpfoof4Ssh88kAMBlwjdggX4LYhFigI5bI+aspi
qJj/B9lKylkRYwHy5pQ1jlfiG8/B2KDSpJ97aSK8fxpRXuFPLoT2QoWIKuDEKPXa
ZcSxyKn2NrJTYuwLFMufMi35+iefZPsvIh2T3uK48BO02hsot3DwFDoM5HlfA+fy
CFrp9GGjVRPi
-----END CERTIFICATE-----
Generated at Wed Apr 23 03:38:40 2025 by rpki-client