Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34342e302f32342d3234203d3e20323636393538.roa
File:                     34352e3232362e34342e302f32342d3234203d3e20323636393538.roa (raw, json)
Hash identifier:          3uxnDUUud752OAZCXRygyf9u1Tq2+GSlwY3et1slej8=
Subject key identifier:   CD:E5:B6:99:3C:0A:DB:AC:F3:45:55:C8:40:C3:E6:ED:EE:56:C2:ED
Certificate issuer:       /CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
Certificate serial:       10D2424DEF45B20E28409EF65AA9F544950426CC
Authority key identifier: A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34342e302f32342d3234203d3e20323636393538.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     266958
IP address blocks:        45.226.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl
                          rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d2:42:4d:ef:45:b2:0e:28:40:9e:f6:5a:a9:f5:44:95:04:26:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:a6:8d:80:9c:d8:41:7c:fa:07:4b:83:54:
                    ab:f4:6d:ae:8a:5c:e0:9d:03:99:f7:de:50:c5:c3:
                    a7:7c:6c:e5:06:b1:23:d3:0a:33:34:5a:52:4e:65:
                    56:64:cf:99:ef:10:61:fb:39:a3:72:6c:73:64:f3:
                    b5:cd:13:99:1b:27:6d:bb:04:de:54:9e:cf:15:fb:
                    c5:db:72:17:2d:53:a6:a3:1b:fb:13:e6:94:d2:35:
                    7d:1d:52:2c:6c:59:06:24:4e:55:b7:8f:2a:18:c8:
                    56:c6:77:ee:a9:41:fa:d6:ec:4c:a3:91:3b:51:0d:
                    de:7f:40:9b:a9:1c:e2:34:fd:52:30:fd:ab:f1:09:
                    c8:a9:39:d9:1e:6f:b7:50:7e:1e:b9:63:b8:8f:be:
                    c0:1e:bc:de:01:ec:49:d3:bf:56:bd:ad:5c:f0:c1:
                    46:f0:30:3a:b1:93:d6:9b:31:4f:e4:84:d3:c5:9c:
                    3c:fb:15:fb:84:ed:75:c8:11:ce:89:49:fb:69:ce:
                    27:ea:0a:fe:c8:2a:83:1a:af:26:75:df:0e:0d:e5:
                    ad:02:a3:62:5b:82:a3:4f:2c:3d:85:c4:7a:8f:4c:
                    2a:85:b2:06:41:0f:56:a4:fc:fa:06:44:ea:a7:f3:
                    9e:35:d5:23:81:2a:19:da:ab:af:4f:69:17:27:35:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E5:B6:99:3C:0A:DB:AC:F3:45:55:C8:40:C3:E6:ED:EE:56:C2:ED
            X509v3 Authority Key Identifier:
                keyid:A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34342e302f32342d3234203d3e20323636393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:83:d5:01:ab:ce:f2:77:25:92:8d:22:98:dc:e7:4b:1a:f8:
         5a:c8:90:31:aa:5b:85:72:11:a0:8c:0d:bd:02:12:c5:5f:4d:
         5e:17:7b:48:e0:55:e8:12:66:41:1e:eb:76:81:47:d6:da:01:
         a9:63:a4:47:e9:d6:99:fe:00:d9:75:2f:81:79:60:f3:e5:60:
         b8:61:85:82:72:86:db:40:9b:3f:86:01:99:f8:1d:80:fc:16:
         9f:e6:b3:e6:20:62:e2:10:19:0a:05:53:bc:b1:dd:d5:2e:94:
         cb:48:c0:4d:09:20:f5:bc:a8:2a:c0:f2:d5:1d:50:93:f0:27:
         b5:08:a7:24:ea:6e:31:4e:ba:d6:fc:74:2a:c0:d5:85:e0:c0:
         4c:c0:43:69:24:6c:49:47:b4:6e:b7:84:9f:e0:ce:c8:f8:36:
         00:16:24:b6:8c:48:f6:cf:6c:6a:e2:55:63:1e:f4:2b:b7:2b:
         a3:9c:68:84:b8:70:9e:64:24:f7:ab:05:fd:08:04:23:59:a8:
         d6:89:61:79:9a:60:95:5d:92:85:4d:63:8e:ea:28:a8:c5:88:
         98:dc:88:de:3d:e1:81:97:13:d0:54:2f:16:9e:e1:52:66:96:
         92:19:a5:0c:a6:7e:04:69:d5:fa:3c:26:2a:a5:c3:6b:cc:3b:
         55:e1:83:ce
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUENJCTe9Fsg4oQJ72Wqn1RJUEJswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3QUQ0OUI5QkI5RTQ3QjczMjdBM0E1ODQxMjE3RkJE
Q0U1NUYzNjAeFw0yNDA0MDMxODI2MDdaFw0yNTA0MDIxODMxMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUM1NEE2OEQ4MDlDRDg0MTdD
RkEwNzRCODM1NEFCRjQ2REFFOEE1Q0UwOUQwMzk5RjdERTUwQzVDM0E3N0M2Q0U1
MDZCMTIzRDMwQTMzMzQ1QTUyNEU2NTU2NjRDRjk5RUYxMDYxRkIzOUEzNzI2Qzcz
NjRGM0I1Q0QxMzk5MUIyNzZEQkIwNERFNTQ5RUNGMTVGQkM1REI3MjE3MkQ1M0E2
QTMxQkZCMTNFNjk0RDIzNTdEMUQ1MjJDNkM1OTA2MjQ0RTU1Qjc4RjJBMThDODU2
QzY3N0VFQTk0MUZBRDZFQzRDQTM5MTNCNTEwRERFN0Y0MDlCQTkxQ0UyMzRGRDUy
MzBGREFCRjEwOUM4QTkzOUQ5MUU2RkI3NTA3RTFFQjk2M0I4OEZCRUMwMUVCQ0RF
MDFFQzQ5RDNCRjU2QkRBRDVDRjBDMTQ2RjAzMDNBQjE5M0Q2OUIzMTRGRTQ4NEQz
QzU5QzNDRkIxNUZCODRFRDc1QzgxMUNFODk0OUZCNjlDRTI3RUEwQUZFQzgyQTgz
MUFBRjI2NzVERjBFMERFNUFEMDJBMzYyNUI4MkEzNEYyQzNEODVDNDdBOEY0QzJB
ODVCMjA2NDEwRjU2QTRGQ0ZBMDY0NEVBQTdGMzlFMzVENTIzODEyQTE5REFBQkFG
NEY2OTE3MjczNTQxMDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArFSmjYCc2EF8+gdLg1Sr9G2uilzgnQOZ995QxcOnfGzlBrEj0woz
NFpSTmVWZM+Z7xBh+zmjcmxzZPO1zROZGydtuwTeVJ7PFfvF23IXLVOmoxv7E+aU
0jV9HVIsbFkGJE5Vt48qGMhWxnfuqUH61uxMo5E7UQ3ef0CbqRziNP1SMP2r8QnI
qTnZHm+3UH4euWO4j77AHrzeAexJ079Wva1c8MFG8DA6sZPWmzFP5ITTxZw8+xX7
hO11yBHOiUn7ac4n6gr+yCqDGq8mdd8ODeWtAqNiW4KjTyw9hcR6j0wqhbIGQQ9W
pPz6BkTqp/OeNdUjgSoZ2quvT2kXJzVBAQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FM3ltpk8Ctus80VVyEDD5u3uVsLtMB8GA1UdIwQYMBaAFKV61JubueR7cyejpYQS
F/vc5V82MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhUY1VLczRDekRxbTQ3
SGFzVVhvcUd5SnFqMjJpd0I1U0tGNWh3WHhwdXViLzEvQTU3QUQ0OUI5QkI5RTQ3
QjczMjdBM0E1ODQxMjE3RkJEQ0U1NUYzNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BNTdBRDQ5QjlCQjlFNDdCNzMyN0EzQTU4NDEyMTdGQkRDRTU1
RjM2LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84VGNVS3M0Q3pEcW00N0hhc1VY
b3FHeUpxajIyaXdCNVNLRjVod1h4cHV1Yi8xLzM0MzUyZTMyMzIzNjJlMzQzNDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM5MzUzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3i
LDANBgkqhkiG9w0BAQsFAAOCAQEAHYPVAavO8nclko0imNznSxr4WsiQMapbhXIR
oIwNvQISxV9NXhd7SOBV6BJmQR7rdoFH1toBqWOkR+nWmf4A2XUvgXlg8+VguGGF
gnKG20CbP4YBmfgdgPwWn+az5iBi4hAZCgVTvLHd1S6Uy0jATQkg9byoKsDy1R1Q
k/AntQinJOpuMU661vx0KsDVheDATMBDaSRsSUe0breEn+DOyPg2ABYktoxI9s9s
auJVYx70K7cro5xohLhwnmQk96sF/QgEI1mo1olheZpglV2ShU1jjuooqMWImNyI
3j3hgZcT0FQvFp7hUmaWkhmlDKZ+BGnV+jwmKqXDa8w7VeGDzg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:39 2024 by rpki-client on console-ams.rpki-client.org