Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37322e302f32322d3232203d3e20323637363638.roa
File:                     34352e3232342e37322e302f32322d3232203d3e20323637363638.roa (raw, json)
Hash identifier:          e+VSyNBJcOk0Oj/8b7eDcS0qhRCM2QMFd5TMgo5RyuQ=
Subject key identifier:   2B:EB:2B:2F:A6:65:1C:CD:6B:15:8C:E0:E9:EE:46:C5:87:07:6F:C7
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       7A5AF56F8F1CE358BAF88B5FB49CEFF1997436C0
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37322e302f32322d3232203d3e20323637363638.roa
Signing time:             Thu 15 Aug 2024 20:08:02 +0000
ROA not before:           Thu 15 Aug 2024 20:03:02 +0000
ROA not after:            Thu 14 Aug 2025 20:08:02 +0000
asID:                     267668
IP address blocks:        45.224.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5a:f5:6f:8f:1c:e3:58:ba:f8:8b:5f:b4:9c:ef:f1:99:74:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Aug 15 20:03:02 2024 GMT
            Not After : Aug 14 20:08:02 2025 GMT
        Subject: CN=2BEB2B2FA6651CCD6B158CE0E9EE46C587076FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4a:51:e2:58:ec:7d:36:9a:6d:ec:0a:48:22:
                    69:b9:83:ff:57:1c:67:58:27:45:a5:47:bb:8d:80:
                    5f:fe:07:17:5d:9e:39:22:88:92:62:05:23:f4:c7:
                    f6:78:0e:d4:a2:22:49:e4:21:e0:42:9a:90:1b:65:
                    20:16:3e:61:be:4d:bb:8c:07:ee:3d:91:02:9d:7b:
                    0e:cf:61:5e:ee:43:81:bf:a1:52:c8:37:84:d4:95:
                    da:24:ec:9a:f3:17:0c:fd:54:32:49:7f:ce:1d:10:
                    a7:10:35:a1:44:d8:4a:cd:b5:f6:8d:f7:d0:c0:6c:
                    65:df:84:3b:40:a0:de:06:80:05:48:e3:6c:34:08:
                    7d:0b:71:c1:4c:b3:69:7d:0e:f2:85:4c:2c:da:e4:
                    4f:48:12:02:84:27:1f:97:61:0f:e7:85:d7:52:c5:
                    8f:73:03:ba:75:6e:49:0b:7a:18:00:5b:8b:5a:f7:
                    5d:a1:55:f1:65:3e:8e:65:4a:f7:05:c5:8c:e7:9b:
                    a6:6d:fc:28:ff:9d:25:cf:fd:8c:e1:92:97:d8:94:
                    ee:e4:af:3c:46:f3:71:31:7a:ab:dd:e6:32:1a:ac:
                    f8:bc:8f:f4:b0:05:df:68:e8:bc:43:fa:df:e9:ac:
                    e1:e9:b7:f7:6a:68:04:12:7c:ca:7c:51:6a:15:ca:
                    e7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EB:2B:2F:A6:65:1C:CD:6B:15:8C:E0:E9:EE:46:C5:87:07:6F:C7
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37322e302f32322d3232203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:88:70:e4:8c:f3:7e:56:96:73:f2:00:ed:61:49:96:fd:36:
         4c:e4:ba:70:d0:77:41:c6:17:3b:d2:5e:52:9f:2e:26:00:71:
         3a:66:50:cb:27:dd:7a:ec:da:c7:e6:71:6e:bc:cc:6d:f9:26:
         83:7a:c6:bc:78:96:cb:36:3f:47:04:ac:84:6a:05:dd:c7:af:
         2f:69:04:f6:ff:bc:46:23:de:52:71:2b:df:cb:4c:9c:b3:f6:
         a5:6e:f9:ce:b5:3a:46:e0:73:55:94:bd:0c:83:cc:bc:6a:5a:
         54:be:e0:b3:30:18:ec:8a:92:48:2c:55:70:1d:80:32:7e:db:
         a9:1b:4b:20:be:02:33:4c:9d:5f:7d:4f:5d:da:04:1d:96:7a:
         23:de:b6:96:4e:ba:38:7d:55:c4:da:90:40:75:6c:ed:9f:bb:
         70:39:79:23:37:22:99:6f:7e:cd:b9:c2:46:9e:3d:e0:f7:7c:
         03:4e:c1:8c:a1:b0:a6:e0:83:19:d7:58:15:1e:d5:5a:c5:45:
         7e:86:c6:58:04:ca:f6:67:53:81:7c:e7:b3:c6:66:49:a7:d7:
         17:0f:64:82:77:0b:9f:54:03:68:bd:2f:b5:d7:65:d0:a2:69:
         8c:59:65:2e:f1:61:81:55:67:11:56:b2:75:30:a2:3a:23:19:
         ce:12:6b:74
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUelr1b48c41i6+ItftJzv8Zl0NsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4RjBBMjE1MkYxQThFNEQ1QjMwOTc3NDI3MkRCNzBE
OEJERTA1RDAeFw0yNDA4MTUyMDAzMDJaFw0yNTA4MTQyMDA4MDJaMDMxMTAvBgNV
BAMTKDJCRUIyQjJGQTY2NTFDQ0Q2QjE1OENFMEU5RUU0NkM1ODcwNzZGQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrSlHiWOx9Nppt7ApIImm5g/9X
HGdYJ0WlR7uNgF/+BxddnjkiiJJiBSP0x/Z4DtSiIknkIeBCmpAbZSAWPmG+TbuM
B+49kQKdew7PYV7uQ4G/oVLIN4TUldok7JrzFwz9VDJJf84dEKcQNaFE2ErNtfaN
99DAbGXfhDtAoN4GgAVI42w0CH0LccFMs2l9DvKFTCza5E9IEgKEJx+XYQ/nhddS
xY9zA7p1bkkLehgAW4ta912hVfFlPo5lSvcFxYznm6Zt/Cj/nSXP/YzhkpfYlO7k
rzxG83Exeqvd5jIarPi8j/SwBd9o6LxD+t/prOHpt/dqaAQSfMp8UWoVyufHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUK+srL6ZlHM1rFYzg6e5GxYcHb8cwHwYDVR0j
BBgwFoAU548KIVLxqOTVswl3QnLbcNi94F0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVVicEZZS1RRc21WcG45b3dqcUN2TnlxQ3NCM1hkNzJOVzVnWkd5aWt5
TGEvMS9FNzhGMEEyMTUyRjFBOEU0RDVCMzA5Nzc0MjcyREI3MEQ4QkRFMDVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OEYwQTIxNTJGMUE4RTRE
NUIzMDk3NzQyNzJEQjcwRDhCREUwNUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VVYnBGWUtUUXNtVnBuOW93anFDdk55cUNzQjNYZDcyTlc1Z1pHeWlreUxhLzEv
MzQzNTJlMzIzMjM0MmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3
MzYzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeBIMA0GCSqGSIb3DQEBCwUAA4IBAQAbiHDkjPN+
VpZz8gDtYUmW/TZM5Lpw0HdBxhc70l5Sny4mAHE6ZlDLJ9167NrH5nFuvMxt+SaD
esa8eJbLNj9HBKyEagXdx68vaQT2/7xGI95ScSvfy0ycs/albvnOtTpG4HNVlL0M
g8y8alpUvuCzMBjsipJILFVwHYAyftupG0sgvgIzTJ1ffU9d2gQdlnoj3raWTro4
fVXE2pBAdWztn7twOXkjNyKZb37NucJGnj3g93wDTsGMobCm4IMZ11gVHtVaxUV+
hsZYBMr2Z1OBfOezxmZJp9cXD2SCdwufVANovS+112XQommMWWUu8WGBVWcRVrJ1
MKI6IxnOEmt0
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org