Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230322e302f32342d3234203d3e20323637303732.roa
File:                     34352e3232352e3230322e302f32342d3234203d3e20323637303732.roa (raw, json)
Hash identifier:          I1aUFC6Tat8DpD2+kF71ZeoTkWcsbSU+Ov21oAfPipU=
Subject key identifier:   C2:1E:2F:C3:DD:6D:86:7E:BE:B0:29:AB:CF:12:E7:A7:62:07:F4:DC
Certificate issuer:       /CN=A942C31B9D70569B2761518A130F2D4756DBFC61
Certificate serial:       08696DF5F3D83D7CDE63970D65689450BD508276
Authority key identifier: A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230322e302f32342d3234203d3e20323637303732.roa
Signing time:             Wed 03 Apr 2024 18:31:37 +0000
ROA not before:           Wed 03 Apr 2024 18:26:37 +0000
ROA not after:            Wed 02 Apr 2025 18:31:37 +0000
asID:                     267072
IP address blocks:        45.225.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl
                          rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:69:6d:f5:f3:d8:3d:7c:de:63:97:0d:65:68:94:50:bd:50:82:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A942C31B9D70569B2761518A130F2D4756DBFC61
        Validity
            Not Before: Apr  3 18:26:37 2024 GMT
            Not After : Apr  2 18:31:37 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:97:35:7c:d6:1f:d1:9d:fa:79:b3:a7:df:
                    09:f9:2f:df:76:e2:41:28:89:55:ab:74:97:ad:d3:
                    6f:1e:c7:e2:a0:15:0f:1a:1f:13:a0:65:dd:17:ae:
                    09:07:85:58:64:16:f4:7b:f6:05:f1:cf:9d:a6:f9:
                    f6:82:86:dd:19:09:cb:51:db:65:e9:f5:38:e2:25:
                    9e:07:a4:98:ae:92:20:a5:f4:ef:53:60:3a:41:78:
                    f6:92:1f:51:8c:dc:d1:09:09:e4:08:f1:38:21:2b:
                    5b:8b:ad:b5:76:3d:5f:ed:fb:07:15:ff:11:ce:27:
                    42:7b:3c:28:02:d0:45:bb:0c:05:4a:ae:d7:35:a5:
                    ac:13:fa:e9:2c:60:48:fd:11:a9:ef:ef:4d:cb:52:
                    2d:ff:5e:e1:41:3f:24:3e:e2:d1:dc:7a:e0:c4:98:
                    66:34:67:07:84:38:c5:07:f8:4b:e7:05:72:bd:b4:
                    50:c7:f5:11:2e:ac:d4:46:42:a1:77:15:f3:fe:85:
                    11:a0:c2:98:0b:0c:b9:29:30:f7:df:ae:31:90:6c:
                    c4:70:f9:50:2b:75:f8:b4:a7:38:f2:4b:b3:04:15:
                    21:5d:1d:ca:40:42:7b:2f:88:41:09:93:b4:f5:cf:
                    72:4f:c8:3f:6a:f3:89:42:a6:ee:aa:a8:93:ee:d7:
                    fd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1E:2F:C3:DD:6D:86:7E:BE:B0:29:AB:CF:12:E7:A7:62:07:F4:DC
            X509v3 Authority Key Identifier:
                keyid:A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230322e302f32342d3234203d3e20323637303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:c1:86:e2:94:5b:3e:f4:0c:10:9e:8e:bb:63:8b:8a:bb:b1:
         cc:89:e7:0a:eb:f3:18:b9:5b:d1:fc:b3:db:d0:27:aa:04:1f:
         51:20:1e:b3:7f:3c:a6:48:c1:58:c8:59:4c:ad:d6:7b:67:99:
         79:b6:8b:a2:d9:ec:3e:ec:43:0c:38:67:32:03:0b:0e:8a:59:
         b6:74:eb:0b:af:0c:48:b3:2f:90:9b:ba:01:25:2e:71:da:d8:
         ac:02:74:71:b6:44:02:8e:71:67:a1:03:a1:9a:e9:24:fc:89:
         85:39:f9:68:30:bf:e8:77:bf:ec:04:e9:96:6e:af:49:90:ca:
         7b:dc:2e:a3:6c:34:5d:04:be:73:fb:23:99:31:2b:c9:3a:2f:
         5d:1e:9c:9a:f4:3f:12:a3:0e:70:4c:16:19:80:87:88:58:59:
         09:f5:4d:b6:64:d3:04:f0:8a:3c:1a:29:fd:36:d5:8b:c6:73:
         8f:45:82:38:37:08:2f:4f:7d:e5:ed:ed:3d:1e:b8:be:c0:a1:
         48:0d:2f:72:12:ab:3b:ff:f0:1b:36:68:a4:d9:b7:68:ed:f2:
         8a:9a:b7:a8:07:8a:71:b7:aa:e0:bd:d6:06:ad:39:49:a2:bc:
         73:44:62:66:7b:46:e8:26:4f:68:bc:28:0c:2c:1d:af:b6:18:
         0d:65:b6:e8
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUCGlt9fPYPXzeY5cNZWiUUL1QgnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk0MkMzMUI5RDcwNTY5QjI3NjE1MThBMTMwRjJENDc1
NkRCRkM2MTAeFw0yNDA0MDMxODI2MzdaFw0yNTA0MDIxODMxMzdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0IxMDk3MzU3Q0Q2MUZEMTlE
RkE3OUIzQTdERjA5RjkyRkRGNzZFMjQxMjg4OTU1QUI3NDk3QUREMzZGMUVDN0Uy
QTAxNTBGMUExRjEzQTA2NUREMTdBRTA5MDc4NTU4NjQxNkY0N0JGNjA1RjFDRjlE
QTZGOUY2ODI4NkREMTkwOUNCNTFEQjY1RTlGNTM4RTIyNTlFMDdBNDk4QUU5MjIw
QTVGNEVGNTM2MDNBNDE3OEY2OTIxRjUxOENEQ0QxMDkwOUU0MDhGMTM4MjEyQjVC
OEJBREI1NzYzRDVGRURGQjA3MTVGRjExQ0UyNzQyN0IzQzI4MDJEMDQ1QkIwQzA1
NEFBRUQ3MzVBNUFDMTNGQUU5MkM2MDQ4RkQxMUE5RUZFRjREQ0I1MjJERkY1RUUx
NDEzRjI0M0VFMkQxREM3QUUwQzQ5ODY2MzQ2NzA3ODQzOEM1MDdGODRCRTcwNTcy
QkRCNDUwQzdGNTExMkVBQ0Q0NDY0MkExNzcxNUYzRkU4NTExQTBDMjk4MEIwQ0I5
MjkzMEY3REZBRTMxOTA2Q0M0NzBGOTUwMkI3NUY4QjRBNzM4RjI0QkIzMDQxNTIx
NUQxRENBNDA0MjdCMkY4ODQxMDk5M0I0RjVDRjcyNEZDODNGNkFGMzg5NDJBNkVF
QUFBODkzRUVEN0ZEMjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyxCXNXzWH9Gd+nmzp98J+S/fduJBKIlVq3SXrdNvHsfioBUPGh8T
oGXdF64JB4VYZBb0e/YF8c+dpvn2gobdGQnLUdtl6fU44iWeB6SYrpIgpfTvU2A6
QXj2kh9RjNzRCQnkCPE4IStbi621dj1f7fsHFf8RzidCezwoAtBFuwwFSq7XNaWs
E/rpLGBI/RGp7+9Ny1It/17hQT8kPuLR3HrgxJhmNGcHhDjFB/hL5wVyvbRQx/UR
LqzURkKhdxXz/oURoMKYCwy5KTD3364xkGzEcPlQK3X4tKc48kuzBBUhXR3KQEJ7
L4hBCZO09c9yT8g/avOJQqbuqqiT7tf9IQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FMIeL8PdbYZ+vrApq88S56diB/TcMB8GA1UdIwQYMBaAFKlCwxudcFabJ2FRihMP
LUdW2/xhMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NxeUNHb1AzTGRuZEJa
enJZVkZoMkQxUHExSnp4V1BHTnNtYlQ4ZFQ5Q3BlLzEvQTk0MkMzMUI5RDcwNTY5
QjI3NjE1MThBMTMwRjJENDc1NkRCRkM2MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BOTQyQzMxQjlENzA1NjlCMjc2MTUxOEExMzBGMkQ0NzU2REJG
QzYxLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DcXlDR29QM0xkbmRCWnpyWVZG
aDJEMVBxMUp6eFdQR05zbWJUOGRUOUNwZS8xLzM0MzUyZTMyMzIzNTJlMzIzMDMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzAzNzMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LeHKMA0GCSqGSIb3DQEBCwUAA4IBAQDGwYbilFs+9AwQno67Y4uKu7HMiecK6/MY
uVvR/LPb0CeqBB9RIB6zfzymSMFYyFlMrdZ7Z5l5toui2ew+7EMMOGcyAwsOilm2
dOsLrwxIsy+Qm7oBJS5x2tisAnRxtkQCjnFnoQOhmukk/ImFOfloML/od7/sBOmW
bq9JkMp73C6jbDRdBL5z+yOZMSvJOi9dHpya9D8Sow5wTBYZgIeIWFkJ9U22ZNME
8Io8Gin9NtWLxnOPRYI4NwgvT33l7e09Hri+wKFIDS9yEqs7//AbNmik2bdo7fKK
mreoB4pxt6rgvdYGrTlJorxzRGJme0boJk9ovCgMLB2vthgNZbbo
-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:39 2024 by rpki-client on console-ams.rpki-client.org