Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/34352e342e3130342e302f32322d3234203d3e20323636303633.roa
File:                     34352e342e3130342e302f32322d3234203d3e20323636303633.roa (raw, json)
Hash identifier:          4rZ0XOXHF5gXRRcr77Tibpq2thD4laVYb5TKi43lMvc=
Subject key identifier:   99:FC:C1:6A:8E:DA:96:ED:B4:32:0E:1E:7A:8F:9F:8E:18:12:D3:61
Certificate issuer:       /CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
Certificate serial:       032E65B7915425D6A262D16567C11C02501A0C37
Authority key identifier: 98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/34352e342e3130342e302f32322d3234203d3e20323636303633.roa
Signing time:             Wed 03 Apr 2024 23:17:38 +0000
ROA not before:           Wed 03 Apr 2024 23:12:38 +0000
ROA not after:            Wed 02 Apr 2025 23:17:38 +0000
asID:                     266063
IP address blocks:        45.4.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl
                          rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2e:65:b7:91:54:25:d6:a2:62:d1:65:67:c1:1c:02:50:1a:0c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
        Validity
            Not Before: Apr  3 23:12:38 2024 GMT
            Not After : Apr  2 23:17:38 2025 GMT
        Subject: CN=99FCC16A8EDA96EDB4320E1E7A8F9F8E1812D361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:31:da:b0:c0:96:d2:26:d5:6c:82:a6:19:
                    3f:51:a0:c0:e4:9d:e4:e0:1d:4b:b8:ff:95:a8:80:
                    2c:73:18:82:25:12:39:2d:8a:e9:24:cd:c1:5b:06:
                    2e:47:3e:16:7d:3c:ad:43:86:9e:bd:27:1b:6f:40:
                    d6:fb:37:9f:e0:f0:67:22:9b:97:0f:ee:50:d5:91:
                    48:02:a8:87:b7:05:b8:28:26:3b:d7:6f:f9:d6:a6:
                    ca:98:7e:f3:63:55:b6:c5:3a:69:e5:d2:1b:95:41:
                    03:ae:9c:8a:c5:38:57:ba:84:0f:a5:e3:dd:e9:a8:
                    9d:c3:79:d1:83:73:4c:85:06:bd:ba:33:74:42:06:
                    d6:6a:ef:b0:0d:57:95:ca:83:b2:d2:bb:8b:e5:31:
                    6f:48:23:bd:53:bf:cb:74:c7:2d:42:47:3b:a7:9c:
                    28:c9:1a:48:a3:ea:35:c8:b1:af:6a:e9:d9:fa:4d:
                    3d:42:27:6d:78:ce:ca:20:49:9b:5f:0b:60:89:d6:
                    39:a5:35:69:59:17:b9:00:e4:85:55:fd:4b:f4:a3:
                    9f:2f:47:b9:41:7e:bb:e5:58:c9:8c:e1:88:4a:af:
                    a1:e6:54:7a:cc:c8:8e:31:20:05:55:51:fb:55:73:
                    f8:a8:1f:22:33:aa:e9:f6:cb:41:df:28:18:ef:76:
                    d6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FC:C1:6A:8E:DA:96:ED:B4:32:0E:1E:7A:8F:9F:8E:18:12:D3:61
            X509v3 Authority Key Identifier:
                keyid:98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/34352e342e3130342e302f32322d3234203d3e20323636303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:7f:de:9d:af:04:74:91:02:ff:a3:b2:16:51:bb:19:df:6e:
         a4:ec:ce:60:e1:24:69:bc:1a:1a:fc:ce:97:f9:fa:b2:32:52:
         8d:f0:10:b9:32:34:ce:cd:b0:2f:9e:1a:4e:ee:d7:d1:3d:ca:
         0c:f9:ed:84:d7:04:63:b6:e0:ab:7c:e0:89:22:49:6f:53:65:
         e2:39:7c:66:53:c9:7a:59:2f:81:7d:6d:53:8f:2b:c9:87:c9:
         4c:1c:4e:0f:71:56:6b:c2:04:7f:4d:d0:95:3e:85:71:c1:1b:
         e4:86:4d:39:89:d4:b1:1f:1c:b8:21:eb:a4:76:dc:40:8a:99:
         1f:9b:aa:12:1f:bc:43:d7:f5:95:e2:51:a8:d7:fa:2e:e2:20:
         c5:80:7e:e1:49:e3:e5:e8:5a:61:74:ce:76:21:c0:74:a0:9e:
         df:53:c7:43:37:b7:ae:bd:cf:48:1d:8e:fc:56:9e:42:51:73:
         bd:22:82:fa:9a:b2:bc:68:b6:f0:44:3b:41:8f:28:6b:5e:1b:
         8f:61:f7:2e:f6:77:03:9c:02:51:e4:10:12:ac:81:fb:d7:b0:
         c8:6a:8f:f5:b1:f7:7f:2b:4b:79:e5:c3:c1:08:56:38:1b:1d:
         01:dd:c6:d3:3b:2d:4a:25:87:48:d1:94:a2:b8:fd:fd:64:e6:
         0d:64:73:67
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAy5lt5FUJdaiYtFlZ8EcAlAaDDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg1MjVGRjcwQkQ2N0M3OEMzNkJFMzE5MEUzNDYzMDk4
RTk1REYyQzAeFw0yNDA0MDMyMzEyMzhaFw0yNTA0MDIyMzE3MzhaMDMxMTAvBgNV
BAMTKDk5RkNDMTZBOEVEQTk2RURCNDMyMEUxRTdBOEY5RjhFMTgxMkQzNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64THasMCW0ibVbIKmGT9RoMDk
neTgHUu4/5WogCxzGIIlEjktiukkzcFbBi5HPhZ9PK1Dhp69JxtvQNb7N5/g8Gci
m5cP7lDVkUgCqIe3BbgoJjvXb/nWpsqYfvNjVbbFOmnl0huVQQOunIrFOFe6hA+l
493pqJ3DedGDc0yFBr26M3RCBtZq77ANV5XKg7LSu4vlMW9II71Tv8t0xy1CRzun
nCjJGkij6jXIsa9q6dn6TT1CJ214zsogSZtfC2CJ1jmlNWlZF7kA5IVV/Uv0o58v
R7lBfrvlWMmM4YhKr6HmVHrMyI4xIAVVUftVc/ioHyIzqun2y0HfKBjvdta9AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUmfzBao7alu20Mg4eeo+fjhgS02EwHwYDVR0j
BBgwFoAUmFJf9wvWfHjDa+MZDjRjCY6V3ywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3duRE1ITTEydkZkZ1dDclVVUWVUeGk0c1ZBaTdId2h4WXVQYkVZSmM5
QjQvMS85ODUyNUZGNzBCRDY3Qzc4QzM2QkUzMTkwRTM0NjMwOThFOTVERjJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4NTI1RkY3MEJENjdDNzhD
MzZCRTMxOTBFMzQ2MzA5OEU5NURGMkMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd3bkRNSE0xMnZGZGdXQ3JVVVFlVHhpNHNWQWk3SHdoeFl1UGJFWUpjOUI0LzEv
MzQzNTJlMzQyZTMxMzAzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjMw
MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0EaDANBgkqhkiG9w0BAQsFAAOCAQEAmH/ena8EdJEC
/6OyFlG7Gd9upOzOYOEkabwaGvzOl/n6sjJSjfAQuTI0zs2wL54aTu7X0T3KDPnt
hNcEY7bgq3zgiSJJb1Nl4jl8ZlPJelkvgX1tU48ryYfJTBxOD3FWa8IEf03QlT6F
ccEb5IZNOYnUsR8cuCHrpHbcQIqZH5uqEh+8Q9f1leJRqNf6LuIgxYB+4Unj5eha
YXTOdiHAdKCe31PHQze3rr3PSB2O/FaeQlFzvSKC+pqyvGi28EQ7QY8oa14bj2H3
LvZ3A5wCUeQQEqyB+9ewyGqP9bH3fytLeeXDwQhWOBsdAd3G0zstSiWHSNGUorj9
/WTmDWRzZw==
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:48 2024 by rpki-client on console-ams.rpki-client.org