Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/627HuAT9BthvsxYj9fMMzW6cG56h1QMfjUPg6PZJLYmW/0/34352e3233352e3231362e302f32322d3332203d3e20323638323031.roa
File:                     34352e3233352e3231362e302f32322d3332203d3e20323638323031.roa (raw, json)
Hash identifier:          qiS/BqfkgAfoUFUagkhWbaWGD+AkEmw9/BSOZqHKVMQ=
Subject key identifier:   19:0B:78:A6:5A:5C:C1:AA:62:1B:4F:D4:8F:8C:92:1B:6C:46:CA:13
Certificate issuer:       /CN=3049E2D35768D851E2830E90A86D86EC61B6CA7D
Certificate serial:       1BF91ADD1F2B54B5401AAD4E61331C8A102940D9
Authority key identifier: 30:49:E2:D3:57:68:D8:51:E2:83:0E:90:A8:6D:86:EC:61:B6:CA:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3049E2D35768D851E2830E90A86D86EC61B6CA7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/627HuAT9BthvsxYj9fMMzW6cG56h1QMfjUPg6PZJLYmW/0/34352e3233352e3231362e302f32322d3332203d3e20323638323031.roa
Signing time:             Wed 17 Jul 2024 20:04:28 +0000
ROA not before:           Wed 17 Jul 2024 19:59:28 +0000
ROA not after:            Wed 16 Jul 2025 20:04:28 +0000
asID:                     268201
IP address blocks:        45.235.216.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/627HuAT9BthvsxYj9fMMzW6cG56h1QMfjUPg6PZJLYmW/0/3049E2D35768D851E2830E90A86D86EC61B6CA7D.crl
                          rsync://rpki-repo.registro.br/repo/627HuAT9BthvsxYj9fMMzW6cG56h1QMfjUPg6PZJLYmW/0/3049E2D35768D851E2830E90A86D86EC61B6CA7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3049E2D35768D851E2830E90A86D86EC61B6CA7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f9:1a:dd:1f:2b:54:b5:40:1a:ad:4e:61:33:1c:8a:10:29:40:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3049E2D35768D851E2830E90A86D86EC61B6CA7D
        Validity
            Not Before: Jul 17 19:59:28 2024 GMT
            Not After : Jul 16 20:04:28 2025 GMT
        Subject: CN=190B78A65A5CC1AA621B4FD48F8C921B6C46CA13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:76:47:60:ab:b2:c7:e2:bb:9c:e7:08:d4:
                    44:8e:63:80:c9:bf:22:5d:9d:f1:1d:d7:39:b5:2e:
                    a8:dd:5a:e2:b7:5f:eb:01:c4:6d:03:11:2b:6c:ef:
                    9f:90:36:ea:f2:a8:dd:bd:e2:35:e4:55:6a:0e:1a:
                    b5:fe:e3:4b:8c:06:2f:f7:08:fa:16:47:c4:e5:d7:
                    55:7b:44:c4:43:b5:87:b7:be:e8:51:1a:52:38:53:
                    e2:49:9d:47:f1:e1:e5:34:98:06:89:18:a0:2d:4d:
                    ed:a2:b1:e4:81:a0:53:eb:51:d9:4c:3a:23:e7:c1:
                    da:c0:2f:b1:3b:60:64:33:93:03:2e:24:24:a7:25:
                    54:de:6e:a9:56:63:d9:3c:92:70:6c:26:c1:03:9f:
                    92:ac:31:c0:c8:86:ba:a4:5f:f2:7b:83:64:7a:a3:
                    e9:59:57:96:46:e6:3e:30:1e:55:38:c1:68:85:e5:
                    d5:58:9d:4e:68:74:36:b9:db:48:2a:41:1d:e1:b7:
                    5b:e6:48:80:bb:7d:3d:a4:70:07:0c:ca:7f:eb:42:
                    63:1d:cd:db:41:48:8e:e8:e2:27:b2:d2:39:eb:e8:
                    4e:ca:8c:3b:99:d3:be:97:b1:56:05:21:89:a9:21:
                    43:89:61:07:4d:0a:3d:14:8b:54:8a:5a:78:84:b0:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0B:78:A6:5A:5C:C1:AA:62:1B:4F:D4:8F:8C:92:1B:6C:46:CA:13
            X509v3 Authority Key Identifier:
                keyid:30:49:E2:D3:57:68:D8:51:E2:83:0E:90:A8:6D:86:EC:61:B6:CA:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/627HuAT9BthvsxYj9fMMzW6cG56h1QMfjUPg6PZJLYmW/0/3049E2D35768D851E2830E90A86D86EC61B6CA7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3049E2D35768D851E2830E90A86D86EC61B6CA7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/627HuAT9BthvsxYj9fMMzW6cG56h1QMfjUPg6PZJLYmW/0/34352e3233352e3231362e302f32322d3332203d3e20323638323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:6e:be:ab:1f:18:fa:d4:13:47:b3:f4:82:7b:bd:3f:ab:5b:
         7e:5c:a6:dc:c8:71:39:5c:b7:11:a8:27:dc:bc:35:ca:64:76:
         7a:c9:04:a1:84:f0:6f:03:df:10:48:bb:38:ff:db:2b:a4:5c:
         a1:aa:4b:e3:cf:0d:b1:07:76:ed:df:41:d3:ac:11:67:01:e8:
         43:a3:4e:4e:9d:d1:36:da:49:2d:1c:81:90:b9:02:60:d4:98:
         15:59:34:b0:46:f7:6c:8a:0f:f3:d5:23:bb:72:ff:26:2b:85:
         59:77:f2:08:8f:71:03:a8:e9:14:eb:96:03:ab:20:54:f9:dd:
         93:5d:89:80:99:9c:7f:f5:68:b5:d7:33:e2:86:45:89:48:65:
         2e:c8:c6:4b:6b:2b:36:e4:d6:3c:48:0c:50:06:49:8c:2e:29:
         08:e0:9d:27:d5:29:8b:95:d3:d4:44:17:bf:96:70:57:b1:c8:
         80:4c:6d:aa:d6:60:f1:61:ec:95:7d:6c:5b:10:49:51:06:83:
         a1:e1:ff:75:b8:93:99:55:38:94:e7:c7:c9:ee:18:8e:c2:39:
         22:c7:0b:22:d3:a7:24:66:31:27:34:cb:65:df:c3:6c:c9:e8:
         bb:25:62:b1:1b:f3:bc:2a:74:5d:95:e7:a1:0c:51:e5:26:e8:
         88:d4:ab:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG/ka3R8rVLVAGq1OYTMcihApQNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA0OUUyRDM1NzY4RDg1MUUyODMwRTkwQTg2RDg2RUM2
MUI2Q0E3RDAeFw0yNDA3MTcxOTU5MjhaFw0yNTA3MTYyMDA0MjhaMDMxMTAvBgNV
BAMTKDE5MEI3OEE2NUE1Q0MxQUE2MjFCNEZENDhGOEM5MjFCNkM0NkNBMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkn3ZHYKuyx+K7nOcI1ESOY4DJ
vyJdnfEd1zm1LqjdWuK3X+sBxG0DESts75+QNuryqN294jXkVWoOGrX+40uMBi/3
CPoWR8Tl11V7RMRDtYe3vuhRGlI4U+JJnUfx4eU0mAaJGKAtTe2iseSBoFPrUdlM
OiPnwdrAL7E7YGQzkwMuJCSnJVTebqlWY9k8knBsJsEDn5KsMcDIhrqkX/J7g2R6
o+lZV5ZG5j4wHlU4wWiF5dVYnU5odDa520gqQR3ht1vmSIC7fT2kcAcMyn/rQmMd
zdtBSI7o4iey0jnr6E7KjDuZ076XsVYFIYmpIUOJYQdNCj0Ui1SKWniEsH6TAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGQt4plpcwapiG0/Uj4ySG2xGyhMwHwYDVR0j
BBgwFoAUMEni01do2FHigw6QqG2G7GG2yn0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjI3SHVBVDlCdGh2c3hZajlmTU16VzZjRzU2aDFRTWZqVVBnNlBaSkxZ
bVcvMC8zMDQ5RTJEMzU3NjhEODUxRTI4MzBFOTBBODZEODZFQzYxQjZDQTdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwNDlFMkQzNTc2OEQ4NTFF
MjgzMEU5MEE4NkQ4NkVDNjFCNkNBN0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYyN0h1QVQ5QnRodnN4WWo5Zk1Nelc2Y0c1NmgxUU1malVQZzZQWkpMWW1XLzAv
MzQzNTJlMzIzMzM1MmUzMjMxMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzMjMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt69gwDQYJKoZIhvcNAQELBQADggEBAKBuvqsf
GPrUE0ez9IJ7vT+rW35cptzIcTlctxGoJ9y8NcpkdnrJBKGE8G8D3xBIuzj/2yuk
XKGqS+PPDbEHdu3fQdOsEWcB6EOjTk6d0TbaSS0cgZC5AmDUmBVZNLBG92yKD/PV
I7ty/yYrhVl38giPcQOo6RTrlgOrIFT53ZNdiYCZnH/1aLXXM+KGRYlIZS7Ixktr
Kzbk1jxIDFAGSYwuKQjgnSfVKYuV09REF7+WcFexyIBMbarWYPFh7JV9bFsQSVEG
g6Hh/3W4k5lVOJTnx8nuGI7COSLHCyLTpyRmMSc0y2Xfw2zJ6LslYrEb87wqdF2V
56EMUeUm6IjUqyY=
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:09:18 2024 by rpki-client on console-ams.rpki-client.org