Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/34352e3137372e3139342e302f32342d3234203d3e20323639303330.roa
File:                     34352e3137372e3139342e302f32342d3234203d3e20323639303330.roa (raw, json)
Hash identifier:          o5Antv6Pv8ymA0UTi9/4OZS0kHc+kpY4Qqh5LjEIVxw=
Subject key identifier:   83:F5:BC:30:71:6A:AC:36:CA:69:86:57:24:E6:E6:E5:F7:EF:FC:B0
Certificate issuer:       /CN=270A6B614E226CC356973519B40E8C57F2B8A8C9
Certificate serial:       3CEC5139FE634D33E8F39372218E71347B5C9EAA
Authority key identifier: 27:0A:6B:61:4E:22:6C:C3:56:97:35:19:B4:0E:8C:57:F2:B8:A8:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/34352e3137372e3139342e302f32342d3234203d3e20323639303330.roa
Signing time:             Thu 04 Apr 2024 00:49:13 +0000
ROA not before:           Thu 04 Apr 2024 00:44:13 +0000
ROA not after:            Thu 03 Apr 2025 00:49:13 +0000
asID:                     269030
IP address blocks:        45.177.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.crl
                          rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ec:51:39:fe:63:4d:33:e8:f3:93:72:21:8e:71:34:7b:5c:9e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=270A6B614E226CC356973519B40E8C57F2B8A8C9
        Validity
            Not Before: Apr  4 00:44:13 2024 GMT
            Not After : Apr  3 00:49:13 2025 GMT
        Subject: CN=83F5BC30716AAC36CA69865724E6E6E5F7EFFCB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6d:a3:ce:7c:df:ae:06:7b:a9:02:ff:d5:f7:
                    6b:83:af:ff:52:c3:0d:c4:04:d8:c1:65:42:0f:03:
                    33:a2:21:e7:9d:05:e1:07:26:dc:15:50:76:1a:7e:
                    e4:ae:8d:df:0f:9e:68:7c:4e:04:b7:62:b9:ce:c0:
                    5a:48:72:b0:fa:7e:08:c8:67:fe:cb:de:de:9b:d7:
                    67:cf:11:57:9c:04:86:c9:2c:98:48:95:68:ca:a8:
                    d6:5b:84:19:be:05:1e:e5:25:9b:3a:a3:28:03:91:
                    6f:4d:a5:be:74:05:41:c7:a0:a3:7d:0f:91:1a:c8:
                    cc:e7:cc:d0:12:2b:82:26:f0:19:ef:25:3f:34:e1:
                    b9:b8:12:2a:36:e1:63:52:dc:5d:f0:7f:26:f3:03:
                    2b:77:11:9f:3d:55:86:af:14:53:72:1f:14:06:ae:
                    22:7b:68:e3:18:c8:23:84:c6:d2:4e:85:a4:d7:fe:
                    59:22:d0:89:3d:60:a8:ef:73:d6:49:24:5d:db:3d:
                    df:d6:0a:a0:19:f6:d9:81:5b:5c:a7:b8:fe:3b:0f:
                    3b:87:56:21:74:cb:21:c2:61:30:45:7a:98:60:71:
                    d5:d2:7b:d1:a5:fe:29:84:6d:d2:7e:e8:07:43:12:
                    f3:87:bd:5f:21:aa:e1:db:57:db:9a:8b:38:50:af:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F5:BC:30:71:6A:AC:36:CA:69:86:57:24:E6:E6:E5:F7:EF:FC:B0
            X509v3 Authority Key Identifier:
                keyid:27:0A:6B:61:4E:22:6C:C3:56:97:35:19:B4:0E:8C:57:F2:B8:A8:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/34352e3137372e3139342e302f32342d3234203d3e20323639303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:70:94:13:e7:e4:57:e6:50:fa:da:7e:d3:88:a4:d5:3d:f0:
         c7:d9:2a:06:d2:9e:11:04:45:d4:5e:78:6a:82:fe:26:bf:ba:
         17:05:8a:9c:f5:80:64:88:b4:ad:46:d5:cd:5f:d1:5f:d6:11:
         17:75:b6:ab:24:66:b9:bb:0d:88:8b:45:12:b2:e7:23:85:32:
         32:9c:3a:d0:04:22:7c:f0:e4:2b:3b:b2:5f:2d:66:1c:9e:01:
         36:78:8b:fc:6e:f0:2e:28:ba:34:b9:18:e5:37:08:6d:b6:de:
         56:1b:1e:94:66:03:af:14:fc:c1:b8:88:39:12:1a:03:60:f6:
         8c:12:0f:6b:10:b1:ef:db:7e:34:9e:0d:6b:32:0b:6e:75:6e:
         4f:98:5d:9c:10:45:ac:0a:c4:79:9f:be:33:e9:2c:53:e5:eb:
         71:fe:e0:7c:1e:2c:3a:b9:82:55:64:3e:5b:f2:7e:41:9a:3d:
         56:64:53:a1:e3:6a:60:87:db:b0:48:02:7c:a9:44:b2:cc:8c:
         4e:3a:46:6e:7c:cf:3a:5d:5e:a8:12:3d:e7:81:eb:e0:e0:72:
         f9:6a:42:7f:bf:a8:bd:0c:29:aa:14:c5:72:bb:07:32:95:75:
         7f:db:0a:5c:34:4d:03:32:cf:22:fe:b0:70:be:4b:d0:08:29:
         49:ed:00:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPOxROf5jTTPo85NyIY5xNHtcnqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcwQTZCNjE0RTIyNkNDMzU2OTczNTE5QjQwRThDNTdG
MkI4QThDOTAeFw0yNDA0MDQwMDQ0MTNaFw0yNTA0MDMwMDQ5MTNaMDMxMTAvBgNV
BAMTKDgzRjVCQzMwNzE2QUFDMzZDQTY5ODY1NzI0RTZFNkU1RjdFRkZDQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVbaPOfN+uBnupAv/V92uDr/9S
ww3EBNjBZUIPAzOiIeedBeEHJtwVUHYafuSujd8Pnmh8TgS3YrnOwFpIcrD6fgjI
Z/7L3t6b12fPEVecBIbJLJhIlWjKqNZbhBm+BR7lJZs6oygDkW9Npb50BUHHoKN9
D5EayMznzNASK4Im8BnvJT804bm4Eio24WNS3F3wfybzAyt3EZ89VYavFFNyHxQG
riJ7aOMYyCOExtJOhaTX/lki0Ik9YKjvc9ZJJF3bPd/WCqAZ9tmBW1ynuP47DzuH
ViF0yyHCYTBFephgcdXSe9Gl/imEbdJ+6AdDEvOHvV8hquHbV9uaizhQr3jxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUg/W8MHFqrDbKaYZXJObm5ffv/LAwHwYDVR0j
BBgwFoAUJwprYU4ibMNWlzUZtA6MV/K4qMkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVViUTlTa1pEV3d2S2pHV0NQM0QyRUpXWGpBZUJOSjNuUFNzbzNiZTZq
aEovMS8yNzBBNkI2MTRFMjI2Q0MzNTY5NzM1MTlCNDBFOEM1N0YyQjhBOEM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3MEE2QjYxNEUyMjZDQzM1
Njk3MzUxOUI0MEU4QzU3RjJCOEE4QzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVVYlE5U2taRFd3dktqR1dDUDNEMkVKV1hqQWVCTkozblBTc28zYmU2amhKLzEv
MzQzNTJlMzEzNzM3MmUzMTM5MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtscIwDQYJKoZIhvcNAQELBQADggEBAHxwlBPn
5FfmUPraftOIpNU98MfZKgbSnhEERdReeGqC/ia/uhcFipz1gGSItK1G1c1f0V/W
ERd1tqskZrm7DYiLRRKy5yOFMjKcOtAEInzw5Cs7sl8tZhyeATZ4i/xu8C4oujS5
GOU3CG223lYbHpRmA68U/MG4iDkSGgNg9owSD2sQse/bfjSeDWsyC251bk+YXZwQ
RawKxHmfvjPpLFPl63H+4HweLDq5glVkPlvyfkGaPVZkU6HjamCH27BIAnypRLLM
jE46Rm58zzpdXqgSPeeB6+DgcvlqQn+/qL0MKaoUxXK7BzKVdX/bClw0TQMyzyL+
sHC+S9AIKUntABk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:35 2024 by rpki-client on console-ams.rpki-client.org