Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34342e302f32322d3232203d3e20323636393538.roa
File:                     34352e3232362e34342e302f32322d3232203d3e20323636393538.roa (raw, json)
Hash identifier:          cXW4ZIThqJ99BalAPUrMqV09s/zQPg4v7SKH+rBPY8s=
Subject key identifier:   80:A0:15:87:7C:DD:36:2C:8E:1A:EB:11:23:17:FE:69:10:F9:98:FF
Certificate issuer:       /CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
Certificate serial:       39E84C2C358FDB72E387ACDE408F2C6A7324E6C4
Authority key identifier: A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34342e302f32322d3232203d3e20323636393538.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     266958
IP address blocks:        45.226.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl
                          rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e8:4c:2c:35:8f:db:72:e3:87:ac:de:40:8f:2c:6a:73:24:e6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:b7:d7:53:00:af:57:ba:ab:3c:45:ac:89:
                    58:c1:82:6f:fc:f3:ed:ac:1f:0a:dd:cd:aa:fb:30:
                    da:5d:c0:e4:49:1c:b1:f8:40:a2:db:9e:18:51:c1:
                    52:d6:87:35:a0:4e:d9:4a:73:ef:b5:52:f1:ab:e8:
                    84:b4:15:15:b2:5d:56:90:57:1d:90:f7:21:a5:de:
                    e5:d4:d9:50:0e:e6:fd:ab:29:54:e3:cd:38:1d:ec:
                    ad:71:1a:fe:1f:e8:bf:3b:cc:63:1e:e5:56:b8:71:
                    ac:42:9d:17:e9:81:80:3f:b2:65:7b:ef:fa:14:0a:
                    ae:b1:dd:4a:50:5b:95:89:59:6a:63:47:8a:11:8e:
                    7b:d9:c3:36:ad:25:8d:2d:ef:4b:4f:9d:4f:87:e0:
                    ae:c8:50:5e:89:e1:37:ee:ab:0e:93:ca:81:a4:02:
                    25:e4:5d:9b:9d:86:bd:14:05:28:53:f6:be:a9:e4:
                    c2:86:21:44:42:ed:05:1f:82:62:31:50:64:d9:e6:
                    99:3b:67:7a:7a:13:e0:b8:2b:b9:9e:5f:67:9a:dd:
                    5f:c3:ec:b5:68:02:95:d7:2c:b0:8c:c7:64:1d:d0:
                    2c:3a:32:bb:34:8e:4c:ad:f7:f5:4f:fe:0d:75:22:
                    16:df:f0:9d:7b:c2:e2:6e:ba:04:69:8f:06:16:f2:
                    da:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A0:15:87:7C:DD:36:2C:8E:1A:EB:11:23:17:FE:69:10:F9:98:FF
            X509v3 Authority Key Identifier:
                keyid:A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34342e302f32322d3232203d3e20323636393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:62:8e:78:e4:bd:ee:45:bf:59:af:a6:d3:67:b2:ec:cc:8c:
         ef:e1:a5:b0:38:fe:9c:f3:6b:26:86:71:37:b2:04:b1:20:73:
         6f:0f:a8:83:d1:58:80:a7:fa:f8:c1:a6:bd:fb:d3:0a:73:79:
         e3:92:62:1c:42:11:1e:80:b7:42:2b:5d:e3:eb:c4:5c:a2:41:
         4b:61:f8:e2:c6:9c:f0:45:ce:0d:68:f2:0d:5b:6e:f1:a4:9b:
         54:e2:40:9a:c4:89:c2:40:b8:ea:04:9f:d6:46:88:b4:7f:21:
         91:19:37:6a:6f:fe:00:33:77:f0:c7:bf:7e:7c:b8:48:db:f2:
         a4:ae:ee:15:49:a4:eb:be:92:a4:76:ea:cb:d0:10:1e:cd:c8:
         ff:7f:87:0b:bb:85:38:21:eb:2d:cb:30:b6:41:e6:99:eb:72:
         94:55:b4:cb:c6:c9:2c:01:cb:9c:e7:d8:70:e9:12:a9:30:d9:
         c0:71:ee:96:3c:ab:e4:29:52:98:fe:1f:d5:30:61:79:2a:ea:
         78:f2:9a:56:fd:7c:3b:ec:53:b0:7d:2b:a1:0a:a3:d3:5e:ff:
         eb:96:1f:ad:0f:1f:d8:a0:e7:71:29:5b:a7:32:00:95:36:78:
         2d:ea:4f:89:95:67:f7:8c:fe:c8:4f:15:3e:51:0e:7f:e8:8b:
         a0:d0:6b:bb
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUOehMLDWP23Ljh6zeQI8sanMk5sQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3QUQ0OUI5QkI5RTQ3QjczMjdBM0E1ODQxMjE3RkJE
Q0U1NUYzNjAeFw0yNDA0MDMxODI2MDhaFw0yNTA0MDIxODMxMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTIyRUI3RDc1MzAwQUY1N0JB
QUIzQzQ1QUM4OTU4QzE4MjZGRkNGM0VEQUMxRjBBRERDREFBRkIzMERBNURDMEU0
NDkxQ0IxRjg0MEEyREI5RTE4NTFDMTUyRDY4NzM1QTA0RUQ5NEE3M0VGQjU1MkYx
QUJFODg0QjQxNTE1QjI1RDU2OTA1NzFEOTBGNzIxQTVERUU1RDREOTUwMEVFNkZE
QUIyOTU0RTNDRDM4MURFQ0FENzExQUZFMUZFOEJGM0JDQzYzMUVFNTU2Qjg3MUFD
NDI5RDE3RTk4MTgwM0ZCMjY1N0JFRkZBMTQwQUFFQjFERDRBNTA1Qjk1ODk1OTZB
NjM0NzhBMTE4RTdCRDlDMzM2QUQyNThEMkRFRjRCNEY5RDRGODdFMEFFQzg1MDVF
ODlFMTM3RUVBQjBFOTNDQTgxQTQwMjI1RTQ1RDlCOUQ4NkJEMTQwNTI4NTNGNkJF
QTlFNEMyODYyMTQ0NDJFRDA1MUY4MjYyMzE1MDY0RDlFNjk5M0I2NzdBN0ExM0Uw
QjgyQkI5OUU1RjY3OUFERDVGQzNFQ0I1NjgwMjk1RDcyQ0IwOENDNzY0MUREMDJD
M0EzMkJCMzQ4RTRDQURGN0Y1NEZGRTBENzUyMjE2REZGMDlEN0JDMkUyNkVCQTA0
Njk4RjA2MTZGMkRBRTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAoi6311MAr1e6qzxFrIlYwYJv/PPtrB8K3c2q+zDaXcDkSRyx+ECi
254YUcFS1oc1oE7ZSnPvtVLxq+iEtBUVsl1WkFcdkPchpd7l1NlQDub9qylU4804
HeytcRr+H+i/O8xjHuVWuHGsQp0X6YGAP7Jle+/6FAqusd1KUFuViVlqY0eKEY57
2cM2rSWNLe9LT51Ph+CuyFBeieE37qsOk8qBpAIl5F2bnYa9FAUoU/a+qeTChiFE
Qu0FH4JiMVBk2eaZO2d6ehPguCu5nl9nmt1fw+y1aAKV1yywjMdkHdAsOjK7NI5M
rff1T/4NdSIW3/Cde8LibroEaY8GFvLa5QIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FICgFYd83TYsjhrrESMX/mkQ+Zj/MB8GA1UdIwQYMBaAFKV61JubueR7cyejpYQS
F/vc5V82MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhUY1VLczRDekRxbTQ3
SGFzVVhvcUd5SnFqMjJpd0I1U0tGNWh3WHhwdXViLzEvQTU3QUQ0OUI5QkI5RTQ3
QjczMjdBM0E1ODQxMjE3RkJEQ0U1NUYzNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BNTdBRDQ5QjlCQjlFNDdCNzMyN0EzQTU4NDEyMTdGQkRDRTU1
RjM2LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84VGNVS3M0Q3pEcW00N0hhc1VY
b3FHeUpxajIyaXdCNVNLRjVod1h4cHV1Yi8xLzM0MzUyZTMyMzIzNjJlMzQzNDJl
MzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNjM5MzUzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3i
LDANBgkqhkiG9w0BAQsFAAOCAQEAq2KOeOS97kW/Wa+m02ey7MyM7+GlsDj+nPNr
JoZxN7IEsSBzbw+og9FYgKf6+MGmvfvTCnN545JiHEIRHoC3Qitd4+vEXKJBS2H4
4sac8EXODWjyDVtu8aSbVOJAmsSJwkC46gSf1kaItH8hkRk3am/+ADN38Me/fny4
SNvypK7uFUmk676SpHbqy9AQHs3I/3+HC7uFOCHrLcswtkHmmetylFW0y8bJLAHL
nOfYcOkSqTDZwHHuljyr5ClSmP4f1TBheSrqePKaVv18O+xTsH0roQqj017/65Yf
rQ8f2KDncSlbpzIAlTZ4LepPiZVn94z+yE8VPlEOf+iLoNBruw==
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:13 2024 by rpki-client on console-ams.rpki-client.org