Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234352e302f32342d3234203d3e20323638373937.roa
File:                     34352e3137322e3234352e302f32342d3234203d3e20323638373937.roa (raw, json)
Hash identifier:          rszQE+gLcNO4CpBbhzG4QZN1UOpA0Oes1XDCsJj/scc=
Subject key identifier:   85:16:FF:61:0B:C1:95:35:EB:59:7F:49:4C:99:09:43:CF:CE:2E:14
Certificate issuer:       /CN=EEEAE781774BBF39D3939DF8D9AFE5D134958196
Certificate serial:       0A6F821F899F86622409A29C599D8596FAA96AF0
Authority key identifier: EE:EA:E7:81:77:4B:BF:39:D3:93:9D:F8:D9:AF:E5:D1:34:95:81:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234352e302f32342d3234203d3e20323638373937.roa
Signing time:             Fri 31 May 2024 17:28:37 +0000
ROA not before:           Fri 31 May 2024 17:23:37 +0000
ROA not after:            Fri 30 May 2025 17:28:37 +0000
asID:                     268797
IP address blocks:        45.172.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.crl
                          rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6f:82:1f:89:9f:86:62:24:09:a2:9c:59:9d:85:96:fa:a9:6a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEEAE781774BBF39D3939DF8D9AFE5D134958196
        Validity
            Not Before: May 31 17:23:37 2024 GMT
            Not After : May 30 17:28:37 2025 GMT
        Subject: CN=8516FF610BC19535EB597F494C990943CFCE2E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:aa:37:af:55:ff:7f:80:87:9d:a7:cf:9c:
                    a3:d4:b5:b2:f1:1c:1e:89:0c:5b:8d:ce:b6:f2:a1:
                    1a:3e:c8:95:cb:e4:3c:60:d5:67:21:b0:ec:53:89:
                    a8:ad:02:d3:f6:4b:20:2c:8e:7d:d9:12:04:49:58:
                    9f:0d:64:03:9f:6d:1a:1d:37:95:b4:dc:c5:26:94:
                    3e:2f:81:e8:de:19:65:cc:27:02:03:dc:33:27:43:
                    dd:0d:48:e3:c2:59:06:ee:68:31:98:c2:5e:5c:ba:
                    36:22:d6:eb:61:b0:a3:5e:f5:47:ad:70:07:1d:ac:
                    f1:f3:a7:56:5e:38:5d:a3:1b:88:d7:70:17:db:78:
                    3f:0e:e9:97:f8:e2:5e:72:04:e1:5d:5e:cb:80:0a:
                    b8:3a:ae:87:f6:74:c4:19:02:14:45:3f:83:e6:1b:
                    23:a6:6b:cc:94:98:db:86:95:bf:b0:0c:e4:97:f1:
                    6c:24:68:c9:b6:0f:98:c7:50:8d:97:a2:74:e6:cb:
                    c6:22:26:d3:47:bf:87:eb:7d:d9:44:44:31:0e:79:
                    3a:d8:d2:e6:50:c9:01:02:d5:99:28:6e:12:c9:23:
                    d4:c2:da:8f:cc:55:e5:85:98:1d:52:4d:70:8b:fd:
                    56:65:98:ad:b7:ee:84:f8:31:87:af:6c:17:d7:2f:
                    b2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:16:FF:61:0B:C1:95:35:EB:59:7F:49:4C:99:09:43:CF:CE:2E:14
            X509v3 Authority Key Identifier:
                keyid:EE:EA:E7:81:77:4B:BF:39:D3:93:9D:F8:D9:AF:E5:D1:34:95:81:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234352e302f32342d3234203d3e20323638373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:a1:37:2f:07:27:29:84:41:b2:10:2f:48:81:4e:f7:88:1b:
         c5:ff:40:fd:a0:c9:71:c9:23:6d:b7:13:3f:cf:e3:8c:b7:61:
         53:a2:4f:de:16:47:16:75:a9:4e:65:3b:66:27:bc:5d:f3:91:
         c1:77:87:f8:13:2f:99:0d:6e:e1:b5:15:4c:77:97:dc:a4:cd:
         8c:d2:af:39:d2:e0:03:64:0b:11:7f:93:9c:ec:8b:6d:6f:ad:
         17:be:e0:b0:4e:d9:76:61:3c:8a:0b:6a:91:24:9b:6f:fe:a4:
         30:27:73:7d:8f:a0:f3:42:94:e5:7b:b8:69:6c:63:65:0d:df:
         dc:30:aa:eb:cc:84:48:76:5b:86:4b:6c:7f:f4:99:d5:5a:eb:
         85:14:a3:b1:bb:b0:7c:c6:61:4c:da:2d:17:96:da:bb:1a:1e:
         ec:6d:d7:6f:78:82:d2:57:13:cd:6b:a6:38:32:6b:85:80:7f:
         32:10:fe:fc:b9:3d:4e:88:0c:a9:db:0a:51:4a:16:80:79:fd:
         49:30:7d:47:43:61:82:08:64:40:4f:c5:e3:51:f3:1b:e3:cc:
         7f:fa:13:e3:ef:c4:00:b3:28:c8:ec:be:67:16:25:82:4b:cc:
         5e:03:94:ed:a1:79:d0:74:c8:e6:ff:0c:3f:54:db:bd:4d:9b:
         5b:73:35:a5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCm+CH4mfhmIkCaKcWZ2FlvqpavAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVFQUU3ODE3NzRCQkYzOUQzOTM5REY4RDlBRkU1RDEz
NDk1ODE5NjAeFw0yNDA1MzExNzIzMzdaFw0yNTA1MzAxNzI4MzdaMDMxMTAvBgNV
BAMTKDg1MTZGRjYxMEJDMTk1MzVFQjU5N0Y0OTRDOTkwOTQzQ0ZDRTJFMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkPao3r1X/f4CHnafPnKPUtbLx
HB6JDFuNzrbyoRo+yJXL5Dxg1WchsOxTiaitAtP2SyAsjn3ZEgRJWJ8NZAOfbRod
N5W03MUmlD4vgejeGWXMJwID3DMnQ90NSOPCWQbuaDGYwl5cujYi1uthsKNe9Uet
cAcdrPHzp1ZeOF2jG4jXcBfbeD8O6Zf44l5yBOFdXsuACrg6rof2dMQZAhRFP4Pm
GyOma8yUmNuGlb+wDOSX8WwkaMm2D5jHUI2XonTmy8YiJtNHv4frfdlERDEOeTrY
0uZQyQEC1ZkobhLJI9TC2o/MVeWFmB1STXCL/VZlmK237oT4MYevbBfXL7IpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhRb/YQvBlTXrWX9JTJkJQ8/OLhQwHwYDVR0j
BBgwFoAU7urngXdLvznTk5342a/l0TSVgZYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRZeDNHckFoN1g1YjdwWFpKUlBQbThMZVRDaHE3cldIOHpmZ2F6NzFN
ZmUvMC9FRUVBRTc4MTc3NEJCRjM5RDM5MzlERjhEOUFGRTVEMTM0OTU4MTk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFRUFFNzgxNzc0QkJGMzlE
MzkzOURGOEQ5QUZFNUQxMzQ5NTgxOTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg0WXgzR3JBaDdYNWI3cFhaSlJQUG04TGVUQ2hxN3JXSDh6ZmdhejcxTWZlLzAv
MzQzNTJlMzEzNzMyMmUzMjM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtrPUwDQYJKoZIhvcNAQELBQADggEBALGhNy8H
JymEQbIQL0iBTveIG8X/QP2gyXHJI223Ez/P44y3YVOiT94WRxZ1qU5lO2YnvF3z
kcF3h/gTL5kNbuG1FUx3l9ykzYzSrznS4ANkCxF/k5zsi21vrRe+4LBO2XZhPIoL
apEkm2/+pDAnc32PoPNClOV7uGlsY2UN39wwquvMhEh2W4ZLbH/0mdVa64UUo7G7
sHzGYUzaLReW2rsaHuxt1294gtJXE81rpjgya4WAfzIQ/vy5PU6IDKnbClFKFoB5
/UkwfUdDYYIIZEBPxeNR8xvjzH/6E+PvxACzKMjsvmcWJYJLzF4DlO2hedB0yOb/
DD9U271Nm1tzNaU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:38:27 2025 by rpki-client