Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/34352e3136342e35322e302f32322d3234203d3e20323638353938.roa
File:                     34352e3136342e35322e302f32322d3234203d3e20323638353938.roa (raw, json)
Hash identifier:          CKc7q8qCvCIzmamgFsAMkPlHPOfIVKIY9brlsM8muO8=
Subject key identifier:   1B:FC:47:B9:8C:B3:A6:71:5E:0F:A2:3F:47:8B:D9:F9:56:70:61:AB
Certificate issuer:       /CN=350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B
Certificate serial:       17298F750AF19EFED1978CA6314BE6928F9A6E73
Authority key identifier: 35:0F:77:D6:53:EB:2A:5A:6A:3F:2B:E0:6A:5D:7A:9F:F3:81:0A:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/34352e3136342e35322e302f32322d3234203d3e20323638353938.roa
Signing time:             Wed 13 Nov 2024 13:29:43 +0000
ROA not before:           Wed 13 Nov 2024 13:24:43 +0000
ROA not after:            Wed 12 Nov 2025 13:29:43 +0000
asID:                     268598
IP address blocks:        45.164.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.crl
                          rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 13:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:29:8f:75:0a:f1:9e:fe:d1:97:8c:a6:31:4b:e6:92:8f:9a:6e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B
        Validity
            Not Before: Nov 13 13:24:43 2024 GMT
            Not After : Nov 12 13:29:43 2025 GMT
        Subject: CN=1BFC47B98CB3A6715E0FA23F478BD9F9567061AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:6c:93:89:8f:1a:2d:4d:95:20:2a:0d:a7:
                    cc:90:6b:b5:c7:ef:28:03:d9:e9:ae:16:a0:b8:1c:
                    cd:e1:58:25:58:e7:33:ad:fd:71:69:0e:c8:e6:47:
                    99:01:d1:58:b6:c8:97:46:c4:92:dc:62:61:46:d9:
                    11:a1:47:d7:93:f2:9f:68:ac:cd:0d:6e:14:db:30:
                    87:8a:f9:42:76:52:55:c2:a9:fe:2f:c6:c6:5a:97:
                    2a:a6:f2:dd:0a:8b:07:23:45:cf:e4:ad:01:44:71:
                    3b:34:0f:b4:ac:59:6c:2e:4d:8d:12:4f:cb:6a:d8:
                    11:ee:84:b5:7a:41:57:5a:d0:80:44:e2:d2:aa:2b:
                    80:5b:8d:1a:a1:7f:02:49:e5:75:84:39:2a:ae:51:
                    7d:5e:59:97:26:1f:0c:46:ce:02:fa:bc:cb:2a:aa:
                    9c:64:87:53:65:ab:e0:0a:d7:fd:73:64:8b:2c:77:
                    04:a1:bf:19:2f:44:f9:55:24:bb:95:44:50:f8:f3:
                    53:2c:ed:33:a6:97:78:af:8d:0c:f6:cf:3e:9a:19:
                    8e:fd:5e:0c:35:a0:1d:73:38:b6:95:c3:a1:9b:24:
                    1a:e9:b1:32:d3:23:71:65:82:ce:47:b4:e4:01:03:
                    50:0a:bf:80:a9:75:91:ff:3a:86:32:e1:22:9d:e2:
                    81:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FC:47:B9:8C:B3:A6:71:5E:0F:A2:3F:47:8B:D9:F9:56:70:61:AB
            X509v3 Authority Key Identifier:
                keyid:35:0F:77:D6:53:EB:2A:5A:6A:3F:2B:E0:6A:5D:7A:9F:F3:81:0A:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/34352e3136342e35322e302f32322d3234203d3e20323638353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:da:8c:e1:b6:d8:96:27:01:1c:0d:37:f5:f5:51:1f:97:e1:
         0e:ab:b7:c7:81:b7:f4:84:90:fa:49:ca:e2:ef:56:5e:f2:64:
         7b:13:19:e1:ad:d8:85:34:5e:eb:a2:59:2a:12:20:15:21:11:
         db:24:14:11:ff:43:57:eb:df:93:c0:6d:56:f5:4d:bc:0f:a6:
         12:83:df:12:e4:19:89:39:47:bc:7c:1d:d4:fb:d3:c8:a8:2d:
         d7:e5:65:b7:1c:58:40:24:90:fa:91:4d:a6:2d:67:9b:e4:ee:
         9a:11:79:fe:98:3e:b6:67:97:3b:84:4c:c1:18:4b:66:95:83:
         74:ab:22:5b:9b:ae:3e:06:7d:82:c2:cc:9f:af:0b:59:35:91:
         31:73:84:f9:41:45:e3:e8:eb:d9:2d:dc:9c:54:b7:72:31:72:
         63:19:fe:a6:ef:f1:02:8b:cf:08:47:90:9a:85:b9:8d:31:d3:
         01:88:99:11:f4:0f:ff:15:73:88:eb:81:67:bd:2f:39:59:0a:
         f4:5f:9d:ef:fb:98:40:34:fb:b6:fa:2b:69:45:7f:d6:2f:e2:
         12:80:e6:c4:a2:d6:93:b3:cc:f6:0d:fb:ee:0a:ce:0d:07:aa:
         23:7d:77:3b:3d:6f:a5:d1:71:95:6c:3b:75:91:4d:dd:a3:ef:
         06:71:36:6e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFymPdQrxnv7Rl4ymMUvmko+abnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUwRjc3RDY1M0VCMkE1QTZBM0YyQkUwNkE1RDdBOUZG
MzgxMEEzQjAeFw0yNDExMTMxMzI0NDNaFw0yNTExMTIxMzI5NDNaMDMxMTAvBgNV
BAMTKDFCRkM0N0I5OENCM0E2NzE1RTBGQTIzRjQ3OEJEOUY5NTY3MDYxQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvg2yTiY8aLU2VICoNp8yQa7XH
7ygD2emuFqC4HM3hWCVY5zOt/XFpDsjmR5kB0Vi2yJdGxJLcYmFG2RGhR9eT8p9o
rM0NbhTbMIeK+UJ2UlXCqf4vxsZalyqm8t0KiwcjRc/krQFEcTs0D7SsWWwuTY0S
T8tq2BHuhLV6QVda0IBE4tKqK4BbjRqhfwJJ5XWEOSquUX1eWZcmHwxGzgL6vMsq
qpxkh1Nlq+AK1/1zZIssdwShvxkvRPlVJLuVRFD481Ms7TOml3ivjQz2zz6aGY79
Xgw1oB1zOLaVw6GbJBrpsTLTI3Flgs5HtOQBA1AKv4CpdZH/OoYy4SKd4oGtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUG/xHuYyzpnFeD6I/R4vZ+VZwYaswHwYDVR0j
BBgwFoAUNQ931lPrKlpqPyvgal16n/OBCjswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFU2R001UVh0a2lrQVpCMzhSY3lmTkg0SG8yQ2VzeDRqYm1mRGRMemoy
NTgvMS8zNTBGNzdENjUzRUIyQTVBNkEzRjJCRTA2QTVEN0E5RkYzODEwQTNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MEY3N0Q2NTNFQjJBNUE2
QTNGMkJFMDZBNUQ3QTlGRjM4MTBBM0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRVNkdNNVFYdGtpa0FaQjM4UmN5Zk5INEhvMkNlc3g0amJtZkRkTHpqMjU4LzEv
MzQzNTJlMzEzNjM0MmUzNTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzUzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaQ0MA0GCSqGSIb3DQEBCwUAA4IBAQCb2ozhttiW
JwEcDTf19VEfl+EOq7fHgbf0hJD6Scri71Ze8mR7ExnhrdiFNF7rolkqEiAVIRHb
JBQR/0NX69+TwG1W9U28D6YSg98S5BmJOUe8fB3U+9PIqC3X5WW3HFhAJJD6kU2m
LWeb5O6aEXn+mD62Z5c7hEzBGEtmlYN0qyJbm64+Bn2CwsyfrwtZNZExc4T5QUXj
6OvZLdycVLdyMXJjGf6m7/ECi88IR5CahbmNMdMBiJkR9A//FXOI64FnvS85WQr0
X53v+5hANPu2+itpRX/WL+ISgObEotaTs8z2DfvuCs4NB6ojfXc7PW+l0XGVbDt1
kU3do+8GcTZu
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:42 2025 by rpki-client