Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQEtnVS9QEZF1X7Hgv4FihvSv3KK25vcban59QXyL7t/0/34352e3233352e32372e302f32342d3234203d3e20323637333831.roa
File:                     34352e3233352e32372e302f32342d3234203d3e20323637333831.roa (raw, json)
Hash identifier:          +4ojv7HnxEtOqQepQlxJp8TeGjN+h7foMSG9ZLlg47c=
Subject key identifier:   37:E7:D3:A4:31:9B:6C:65:A8:07:45:A0:1D:54:C4:DD:13:9B:F3:AF
Certificate issuer:       /CN=AD9F8701AC14D16BF452FF59281EDDC4BD3DE167
Certificate serial:       0BD058CAF0113EC51CDCFF661DE744F2262BFB64
Authority key identifier: AD:9F:87:01:AC:14:D1:6B:F4:52:FF:59:28:1E:DD:C4:BD:3D:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD9F8701AC14D16BF452FF59281EDDC4BD3DE167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQEtnVS9QEZF1X7Hgv4FihvSv3KK25vcban59QXyL7t/0/34352e3233352e32372e302f32342d3234203d3e20323637333831.roa
Signing time:             Wed 17 Jul 2024 18:42:21 +0000
ROA not before:           Wed 17 Jul 2024 18:37:21 +0000
ROA not after:            Wed 16 Jul 2025 18:42:21 +0000
asID:                     267381
IP address blocks:        45.235.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7UQEtnVS9QEZF1X7Hgv4FihvSv3KK25vcban59QXyL7t/0/AD9F8701AC14D16BF452FF59281EDDC4BD3DE167.crl
                          rsync://rpki-repo.registro.br/repo/7UQEtnVS9QEZF1X7Hgv4FihvSv3KK25vcban59QXyL7t/0/AD9F8701AC14D16BF452FF59281EDDC4BD3DE167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD9F8701AC14D16BF452FF59281EDDC4BD3DE167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:37:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d0:58:ca:f0:11:3e:c5:1c:dc:ff:66:1d:e7:44:f2:26:2b:fb:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD9F8701AC14D16BF452FF59281EDDC4BD3DE167
        Validity
            Not Before: Jul 17 18:37:21 2024 GMT
            Not After : Jul 16 18:42:21 2025 GMT
        Subject: CN=37E7D3A4319B6C65A80745A01D54C4DD139BF3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:95:3e:32:b2:fa:7a:d1:b0:5c:c2:69:61:
                    5c:34:60:c7:5b:9a:f4:21:e2:d7:50:8a:7a:f2:98:
                    ad:12:3a:aa:89:1c:18:e6:50:25:6a:ee:ca:ef:d4:
                    75:45:db:f8:b8:50:09:c2:b8:32:72:ac:2a:4c:9a:
                    3c:82:bb:37:e0:55:49:b4:8d:f3:13:c1:8b:6c:be:
                    23:16:f9:02:a0:d7:d7:e2:4b:88:9f:a2:dd:18:c1:
                    41:cf:ad:6f:49:92:cf:04:9f:9a:1a:ab:c2:52:af:
                    d6:a9:d1:4d:1c:de:a4:cc:fa:e3:29:62:ba:71:a0:
                    72:87:de:41:38:e7:9f:25:2e:1d:b0:24:7d:6f:d1:
                    cb:43:ae:39:b1:8e:e4:74:7c:90:f9:5c:d1:37:d4:
                    d2:71:14:e3:5c:a6:56:d7:08:23:7b:a8:d7:ee:c5:
                    2c:b7:49:d1:97:1c:22:1c:56:00:bc:0d:59:20:41:
                    79:c7:a2:ff:11:9d:44:ef:8c:3a:6f:51:3a:89:76:
                    83:3c:3e:bb:1a:84:83:8a:b6:12:4f:0e:d8:46:55:
                    49:c8:f3:41:7b:69:6e:56:06:c7:be:ae:1a:7d:59:
                    f0:ea:47:6f:16:9c:d2:73:22:b8:5c:a6:74:2b:c5:
                    33:99:22:0b:fb:7e:87:16:d5:f7:3b:b3:ba:eb:87:
                    be:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E7:D3:A4:31:9B:6C:65:A8:07:45:A0:1D:54:C4:DD:13:9B:F3:AF
            X509v3 Authority Key Identifier:
                keyid:AD:9F:87:01:AC:14:D1:6B:F4:52:FF:59:28:1E:DD:C4:BD:3D:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQEtnVS9QEZF1X7Hgv4FihvSv3KK25vcban59QXyL7t/0/AD9F8701AC14D16BF452FF59281EDDC4BD3DE167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD9F8701AC14D16BF452FF59281EDDC4BD3DE167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQEtnVS9QEZF1X7Hgv4FihvSv3KK25vcban59QXyL7t/0/34352e3233352e32372e302f32342d3234203d3e20323637333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:bd:96:0d:02:a1:30:5c:5b:6a:9b:63:f7:89:56:dd:d1:86:
         6b:83:86:6a:a6:cb:c2:c8:7d:5a:a7:8e:3e:2c:13:62:ac:2c:
         a6:0a:bf:a5:2f:b2:fe:70:79:b8:fb:61:9c:b5:53:87:b3:bc:
         cc:94:e9:b7:0e:c9:bc:a7:c7:79:fc:fa:66:80:39:84:90:e8:
         32:ab:db:4f:16:cf:d8:64:f1:72:e7:81:d6:2a:de:1a:1b:e8:
         c7:ec:ee:f4:b4:c7:51:c1:09:c6:b2:d2:07:5c:60:84:33:0e:
         ac:2d:87:69:ef:6b:a2:67:98:70:40:3e:04:68:52:f5:a4:ba:
         60:98:03:3f:bd:b7:44:6f:db:1c:f6:27:f9:85:1f:02:cb:3d:
         57:bf:2a:4f:bb:15:76:cd:02:b5:4e:a1:c5:5a:61:cd:70:0e:
         46:89:82:ff:27:57:19:17:99:6e:cf:e4:b8:08:53:31:af:da:
         47:af:b6:01:b3:11:41:97:cc:d0:6d:ea:dd:67:30:5c:f3:c8:
         bc:1a:b4:df:b9:cd:9d:e2:a9:f6:c7:b7:7b:24:6e:11:4c:cd:
         14:a8:2d:8e:04:46:75:98:6f:e7:08:d7:fe:6a:45:9b:b4:23:
         81:99:e8:81:bd:95:24:24:c7:d4:e5:76:c8:a9:5b:4e:78:d3:
         2e:7d:d9:c3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUC9BYyvARPsUc3P9mHedE8iYr+2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ5Rjg3MDFBQzE0RDE2QkY0NTJGRjU5MjgxRUREQzRC
RDNERTE2NzAeFw0yNDA3MTcxODM3MjFaFw0yNTA3MTYxODQyMjFaMDMxMTAvBgNV
BAMTKDM3RTdEM0E0MzE5QjZDNjVBODA3NDVBMDFENTRDNEREMTM5QkYzQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwJU+MrL6etGwXMJpYVw0YMdb
mvQh4tdQinrymK0SOqqJHBjmUCVq7srv1HVF2/i4UAnCuDJyrCpMmjyCuzfgVUm0
jfMTwYtsviMW+QKg19fiS4ifot0YwUHPrW9Jks8En5oaq8JSr9ap0U0c3qTM+uMp
YrpxoHKH3kE4558lLh2wJH1v0ctDrjmxjuR0fJD5XNE31NJxFONcplbXCCN7qNfu
xSy3SdGXHCIcVgC8DVkgQXnHov8RnUTvjDpvUTqJdoM8PrsahIOKthJPDthGVUnI
80F7aW5WBse+rhp9WfDqR28WnNJzIrhcpnQrxTOZIgv7focW1fc7s7rrh77NAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUN+fTpDGbbGWoB0WgHVTE3ROb868wHwYDVR0j
BBgwFoAUrZ+HAawU0Wv0Uv9ZKB7dxL094WcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1VRRXRuVlM5UUVaRjFYN0hndjRGaWh2U3YzS0syNXZjYmFuNTlRWHlM
N3QvMC9BRDlGODcwMUFDMTREMTZCRjQ1MkZGNTkyODFFRERDNEJEM0RFMTY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FEOUY4NzAxQUMxNEQxNkJG
NDUyRkY1OTI4MUVEREM0QkQzREUxNjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdVUUV0blZTOVFFWkYxWDdIZ3Y0RmlodlN2M0tLMjV2Y2JhbjU5UVh5TDd0LzAv
MzQzNTJlMzIzMzM1MmUzMjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALesbMA0GCSqGSIb3DQEBCwUAA4IBAQCsvZYNAqEw
XFtqm2P3iVbd0YZrg4ZqpsvCyH1ap44+LBNirCymCr+lL7L+cHm4+2GctVOHs7zM
lOm3Dsm8p8d5/PpmgDmEkOgyq9tPFs/YZPFy54HWKt4aG+jH7O70tMdRwQnGstIH
XGCEMw6sLYdp72uiZ5hwQD4EaFL1pLpgmAM/vbdEb9sc9if5hR8Cyz1XvypPuxV2
zQK1TqHFWmHNcA5GiYL/J1cZF5luz+S4CFMxr9pHr7YBsxFBl8zQberdZzBc88i8
GrTfuc2d4qn2x7d7JG4RTM0UqC2OBEZ1mG/nCNf+akWbtCOBmeiBvZUkJMfU5XbI
qVtOeNMufdnD
-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:20 2024 by rpki-client on console-fra.rpki-client.org