Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa
File:                     34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa (raw, json)
Hash identifier:          FOj1ayHpixxpEkovrNwqIteWkL48RiKncPi8Ukn5Wvk=
Subject key identifier:   69:BA:CB:67:7D:3D:48:EB:13:E5:3C:55:15:69:66:50:77:E9:E4:B1
Certificate issuer:       /CN=E03CF531484EF901E008EB682C28C97D40536BB3
Certificate serial:       EDC2C5CBBF7C87210CC9E9F3F0FE011B4F910C
Authority key identifier: E0:3C:F5:31:48:4E:F9:01:E0:08:EB:68:2C:28:C9:7D:40:53:6B:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E03CF531484EF901E008EB682C28C97D40536BB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa
Signing time:             Fri 09 Aug 2024 20:26:23 +0000
ROA not before:           Fri 09 Aug 2024 20:21:23 +0000
ROA not after:            Fri 08 Aug 2025 20:26:23 +0000
asID:                     268786
IP address blocks:        45.172.168.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/E03CF531484EF901E008EB682C28C97D40536BB3.crl
                          rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/E03CF531484EF901E008EB682C28C97D40536BB3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E03CF531484EF901E008EB682C28C97D40536BB3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ed:c2:c5:cb:bf:7c:87:21:0c:c9:e9:f3:f0:fe:01:1b:4f:91:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E03CF531484EF901E008EB682C28C97D40536BB3
        Validity
            Not Before: Aug  9 20:21:23 2024 GMT
            Not After : Aug  8 20:26:23 2025 GMT
        Subject: CN=69BACB677D3D48EB13E53C551569665077E9E4B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:ef:02:e5:5d:4a:87:14:f6:32:2f:19:8e:
                    cf:c3:04:de:e4:7e:8d:cd:c3:46:aa:04:aa:ca:07:
                    70:e9:db:93:ce:f5:3a:fd:0e:45:e4:a4:31:47:8c:
                    c5:bc:59:dc:b7:78:9b:d5:80:49:0d:ef:72:d0:88:
                    1a:59:59:29:d2:97:ca:61:a0:95:75:44:93:36:d8:
                    ac:30:ac:8f:58:c3:a1:59:a2:85:7d:33:0c:53:89:
                    c6:33:eb:b0:46:52:fa:03:58:14:11:8a:c5:16:3a:
                    4e:43:09:bf:4d:61:95:63:46:92:a2:a1:8b:ea:37:
                    bb:06:65:16:b0:a7:d1:64:9a:cb:8c:a2:90:da:35:
                    d7:3a:b9:32:ee:e0:a1:b3:6e:2a:ec:1f:54:28:ce:
                    0c:2a:0a:34:e3:b1:ad:0d:1d:00:3a:1b:1a:73:c3:
                    24:74:0f:50:69:ec:af:21:f1:9c:df:f7:59:3c:18:
                    98:21:e4:20:30:c0:90:34:42:2a:fe:36:c7:83:ff:
                    76:a3:77:23:0a:8c:ce:a7:9e:92:b9:5b:52:9d:9f:
                    19:26:3c:ae:2e:7c:81:9c:a2:0c:cb:54:8e:48:8d:
                    96:30:c9:a3:44:9a:21:43:14:e7:b4:87:93:00:5b:
                    1e:d7:bf:4f:3f:df:2a:c7:83:f7:5a:69:fe:d6:87:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BA:CB:67:7D:3D:48:EB:13:E5:3C:55:15:69:66:50:77:E9:E4:B1
            X509v3 Authority Key Identifier:
                keyid:E0:3C:F5:31:48:4E:F9:01:E0:08:EB:68:2C:28:C9:7D:40:53:6B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/E03CF531484EF901E008EB682C28C97D40536BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E03CF531484EF901E008EB682C28C97D40536BB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:1e:7b:e6:5c:a0:32:16:a5:c3:3f:e4:1c:a1:a5:e8:07:e3:
         46:27:0e:d2:8d:e2:57:09:88:71:f8:ec:8b:25:13:f9:3a:d6:
         ca:59:86:91:bf:35:d5:46:3a:9b:a4:f9:ce:c9:76:1f:1e:f9:
         7d:05:29:61:81:bc:9f:44:62:3b:55:2c:64:ff:a5:20:83:87:
         5a:b9:85:db:21:3a:02:57:ab:93:f7:5c:98:26:6f:60:20:48:
         ba:ef:9f:e6:f9:ce:ef:0d:08:d3:c2:cb:a2:d2:3b:7b:df:03:
         1f:ad:aa:cb:e8:f1:66:36:43:7a:c4:07:77:9d:42:d7:ac:df:
         e9:22:9b:64:0b:db:4c:4c:6d:a4:73:5e:bb:3b:d1:30:bc:c1:
         b5:9b:41:fc:83:3a:fe:c3:96:79:96:5e:8b:c6:20:1c:e9:b2:
         3a:9c:56:6a:34:b9:21:4d:5b:e6:b4:c7:62:f6:a6:24:96:c1:
         98:81:13:14:58:fc:bb:91:74:fe:e8:43:64:37:16:66:1b:04:
         38:1e:01:7e:a2:e2:41:ef:d8:e0:57:54:64:9c:a6:51:51:94:
         a7:c2:a7:99:99:5e:c8:44:ce:c1:aa:33:39:3a:29:ee:4c:47:
         c7:48:09:62:64:ca:6d:d1:b6:ce:df:6a:32:cc:3f:43:a5:eb:
         d4:ed:5d:93
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAO3Cxcu/fIchDMnp8/D+ARtPkQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAzQ0Y1MzE0ODRFRjkwMUUwMDhFQjY4MkMyOEM5N0Q0
MDUzNkJCMzAeFw0yNDA4MDkyMDIxMjNaFw0yNTA4MDgyMDI2MjNaMDMxMTAvBgNV
BAMTKDY5QkFDQjY3N0QzRDQ4RUIxM0U1M0M1NTE1Njk2NjUwNzdFOUU0QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8SO8C5V1KhxT2Mi8Zjs/DBN7k
fo3Nw0aqBKrKB3Dp25PO9Tr9DkXkpDFHjMW8Wdy3eJvVgEkN73LQiBpZWSnSl8ph
oJV1RJM22KwwrI9Yw6FZooV9MwxTicYz67BGUvoDWBQRisUWOk5DCb9NYZVjRpKi
oYvqN7sGZRawp9FkmsuMopDaNdc6uTLu4KGzbirsH1QozgwqCjTjsa0NHQA6Gxpz
wyR0D1Bp7K8h8Zzf91k8GJgh5CAwwJA0Qir+NseD/3ajdyMKjM6nnpK5W1Kdnxkm
PK4ufIGcogzLVI5IjZYwyaNEmiFDFOe0h5MAWx7Xv08/3yrHg/daaf7Wh4zvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUabrLZ309SOsT5TxVFWlmUHfp5LEwHwYDVR0j
BBgwFoAU4Dz1MUhO+QHgCOtoLCjJfUBTa7MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHgzcXh3N0NoUnJlcERFN1hFVEtTd1cxa1FSZFlmTXZVckp4VmZ4U1Z3
aDEvMS9FMDNDRjUzMTQ4NEVGOTAxRTAwOEVCNjgyQzI4Qzk3RDQwNTM2QkIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwM0NGNTMxNDg0RUY5MDFF
MDA4RUI2ODJDMjhDOTdENDA1MzZCQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh4M3F4dzdDaFJyZXBERTdYRVRLU3dXMWtRUmRZZk12VXJKeFZmeFNWd2gxLzEv
MzQzNTJlMzEzNzMyMmUzMTM2MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzNzM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItrKgwDQYJKoZIhvcNAQELBQADggEBAJ0ee+Zc
oDIWpcM/5ByhpegH40YnDtKN4lcJiHH47IslE/k61spZhpG/NdVGOpuk+c7Jdh8e
+X0FKWGBvJ9EYjtVLGT/pSCDh1q5hdshOgJXq5P3XJgmb2AgSLrvn+b5zu8NCNPC
y6LSO3vfAx+tqsvo8WY2Q3rEB3edQtes3+kim2QL20xMbaRzXrs70TC8wbWbQfyD
Ov7DlnmWXovGIBzpsjqcVmo0uSFNW+a0x2L2piSWwZiBExRY/LuRdP7oQ2Q3FmYb
BDgeAX6i4kHv2OBXVGScplFRlKfCp5mZXshEzsGqMzk6Ke5MR8dICWJkym3Rts7f
ajLMP0Ol69TtXZM=
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:33 2024 by rpki-client on console-ams.rpki-client.org