Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3232392e302f32342d3234203d3e20323632363137.roa
File:                     34352e36352e3232392e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          +WMAKm5asZqJYAbrB8SZTZtkFGqv9d4l6sceo93+hBg=
Subject key identifier:   4F:39:0E:56:15:F7:D2:A5:50:9A:7D:8C:B5:EE:8B:9E:46:BC:A9:F9
Certificate issuer:       /CN=392AEBF74273723B76684580562B17A77CDEF042
Certificate serial:       12B5B25E18A29F86BACD0AB364A156C81254AF0B
Authority key identifier: 39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3232392e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 04 Apr 2024 18:18:27 +0000
ROA not before:           Thu 04 Apr 2024 18:13:27 +0000
ROA not after:            Thu 03 Apr 2025 18:18:27 +0000
asID:                     262617
IP address blocks:        45.65.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b5:b2:5e:18:a2:9f:86:ba:cd:0a:b3:64:a1:56:c8:12:54:af:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392AEBF74273723B76684580562B17A77CDEF042
        Validity
            Not Before: Apr  4 18:13:27 2024 GMT
            Not After : Apr  3 18:18:27 2025 GMT
        Subject: CN=4F390E5615F7D2A5509A7D8CB5EE8B9E46BCA9F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:10:1c:d5:26:41:00:a2:13:76:a9:c5:4a:d0:
                    60:01:5c:99:4e:d7:77:f0:7c:27:32:42:58:9b:26:
                    72:02:5d:63:80:3a:c2:59:89:73:0d:d6:81:cc:e9:
                    fc:bc:69:1f:f6:27:f0:19:0a:ae:ef:cf:35:e9:14:
                    13:fb:dd:96:b7:be:b3:83:3a:31:59:3e:58:df:cc:
                    03:e6:2e:05:41:39:ef:1f:08:37:69:34:49:1d:fb:
                    9e:48:dd:af:04:a9:21:fa:65:e0:af:c2:31:67:7b:
                    69:1f:a4:02:22:ea:23:e3:76:7e:7b:a8:e7:b5:10:
                    36:08:85:a2:07:80:85:bf:21:90:ff:4b:39:c8:58:
                    85:1a:65:61:e8:26:02:b8:06:3c:ca:43:fb:5b:28:
                    39:fd:67:4f:34:04:74:fb:ea:70:d9:74:f6:e7:39:
                    21:9b:7d:f0:fb:1c:0e:b3:27:59:76:69:9e:26:ea:
                    46:42:02:a3:db:78:1f:ac:a4:eb:b7:a9:87:28:51:
                    28:84:cb:c4:0b:0a:f2:01:1d:ec:e5:b2:9b:d7:5e:
                    3a:af:91:94:c5:55:41:e9:93:e5:cd:10:c5:80:8d:
                    18:3d:81:5c:39:2e:46:a1:0f:5a:54:a9:14:02:d7:
                    c6:c0:da:5e:92:b0:52:ed:78:34:1b:6a:63:d1:34:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:39:0E:56:15:F7:D2:A5:50:9A:7D:8C:B5:EE:8B:9E:46:BC:A9:F9
            X509v3 Authority Key Identifier:
                keyid:39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3232392e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:84:ed:95:62:57:64:d1:8b:7d:55:32:f3:0a:53:03:c3:ad:
         fd:7a:82:dc:c3:b4:2f:d7:f3:c1:b7:2f:5e:88:f4:fa:0a:9f:
         f1:4d:6c:29:c5:db:0f:e3:ba:6d:f4:ec:99:ff:69:fe:a1:8f:
         fa:96:50:ac:e7:92:9b:92:89:f1:95:b0:5d:e9:26:42:06:1d:
         b0:1f:c4:b0:37:30:1c:fe:f4:28:bc:5f:50:05:03:7a:1e:3d:
         0f:2c:6d:50:43:08:7f:46:c9:64:2f:aa:e1:f3:8c:9d:1b:04:
         35:71:10:6d:7d:66:10:79:1f:f1:e2:eb:c0:84:c7:50:0b:dd:
         6a:ea:fd:90:a8:59:ba:b7:31:40:41:7f:a4:89:dc:99:b8:cc:
         01:5a:a3:67:a1:6c:86:33:60:48:c1:a9:e4:b5:86:57:87:f9:
         a8:19:29:3f:f1:24:07:fb:71:1e:b4:46:b0:02:9e:09:f6:23:
         a6:75:82:55:25:6d:d4:a4:8f:4b:f0:69:5f:ec:b8:6d:4f:b5:
         00:40:4d:ba:30:40:34:4b:4a:5d:23:1f:94:9f:5c:d2:87:9f:
         92:93:9a:43:5c:9c:b7:da:1c:ea:d9:77:e4:0d:02:a5:35:77:
         9e:fb:af:37:0f:f5:f2:89:62:a7:fa:25:f4:11:35:a7:47:74:
         2a:82:64:98
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUErWyXhiin4a6zQqzZKFWyBJUrwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkyQUVCRjc0MjczNzIzQjc2Njg0NTgwNTYyQjE3QTc3
Q0RFRjA0MjAeFw0yNDA0MDQxODEzMjdaFw0yNTA0MDMxODE4MjdaMDMxMTAvBgNV
BAMTKDRGMzkwRTU2MTVGN0QyQTU1MDlBN0Q4Q0I1RUU4QjlFNDZCQ0E5RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiEBzVJkEAohN2qcVK0GABXJlO
13fwfCcyQlibJnICXWOAOsJZiXMN1oHM6fy8aR/2J/AZCq7vzzXpFBP73Za3vrOD
OjFZPljfzAPmLgVBOe8fCDdpNEkd+55I3a8EqSH6ZeCvwjFne2kfpAIi6iPjdn57
qOe1EDYIhaIHgIW/IZD/SznIWIUaZWHoJgK4BjzKQ/tbKDn9Z080BHT76nDZdPbn
OSGbffD7HA6zJ1l2aZ4m6kZCAqPbeB+spOu3qYcoUSiEy8QLCvIBHezlspvXXjqv
kZTFVUHpk+XNEMWAjRg9gVw5LkahD1pUqRQC18bA2l6SsFLteDQbamPRNPKDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTzkOVhX30qVQmn2Mte6Lnka8qfkwHwYDVR0j
BBgwFoAUOSrr90Jzcjt2aEWAVisXp3ze8EIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJodzNGSzNXUlJZTUF6cW56S2ZZUnNQY2pBWXI1dTNtalA0TnpuNkp2
dEwvMS8zOTJBRUJGNzQyNzM3MjNCNzY2ODQ1ODA1NjJCMTdBNzdDREVGMDQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MkFFQkY3NDI3MzcyM0I3
NjY4NDU4MDU2MkIxN0E3N0NERUYwNDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliaHczRkszV1JSWU1BenFuektmWVJzUGNqQVlyNXUzbWpQNE56bjZKdnRMLzEv
MzQzNTJlMzYzNTJlMzIzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzYzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUHlMA0GCSqGSIb3DQEBCwUAA4IBAQAEhO2VYldk
0Yt9VTLzClMDw639eoLcw7Qv1/PBty9eiPT6Cp/xTWwpxdsP47pt9OyZ/2n+oY/6
llCs55KbkonxlbBd6SZCBh2wH8SwNzAc/vQovF9QBQN6Hj0PLG1QQwh/RslkL6rh
84ydGwQ1cRBtfWYQeR/x4uvAhMdQC91q6v2QqFm6tzFAQX+kidyZuMwBWqNnoWyG
M2BIwanktYZXh/moGSk/8SQH+3EetEawAp4J9iOmdYJVJW3UpI9L8Glf7LhtT7UA
QE26MEA0S0pdIx+Un1zSh5+Sk5pDXJy32hzq2XfkDQKlNXee+683D/XyiWKn+iX0
ETWnR3QqgmSY
-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:08 2024 by rpki-client on console-fra.rpki-client.org