Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35362e302f32342d3234203d3e20323733363833.roa
File:                     34352e3233322e35362e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          O5lIyWAt+ubFSDFkuTg6Q7lcbGzEAeo0cR5AW5kGNqw=
Subject key identifier:   FB:D6:AB:19:CA:AE:65:5C:1E:C4:28:2E:DC:C6:36:F6:4F:FF:4D:66
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       7C43F5002A3A9C8B69480EF9B9537186628A356E
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35362e302f32342d3234203d3e20323733363833.roa
Signing time:             Thu 31 Oct 2024 08:47:57 +0000
ROA not before:           Thu 31 Oct 2024 08:42:57 +0000
ROA not after:            Thu 30 Oct 2025 08:47:57 +0000
asID:                     273683
IP address blocks:        45.232.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:43:f5:00:2a:3a:9c:8b:69:48:0e:f9:b9:53:71:86:62:8a:35:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct 31 08:42:57 2024 GMT
            Not After : Oct 30 08:47:57 2025 GMT
        Subject: CN=FBD6AB19CAAE655C1EC4282EDCC636F64FFF4D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:20:38:df:56:92:7d:c5:a7:cd:9f:7f:57:
                    73:70:6d:df:76:21:5b:cb:9b:48:31:81:db:c5:4d:
                    38:68:e2:64:8a:64:5e:f5:00:00:b5:84:de:97:1c:
                    38:da:81:40:38:2d:0c:66:fc:4d:b0:30:c6:49:ff:
                    d1:14:86:9e:63:d3:33:f6:78:c0:35:b2:2f:af:c8:
                    23:d9:09:0b:4a:bd:3b:c6:26:60:24:a9:3f:2f:24:
                    72:7a:f3:a0:05:83:83:64:85:fe:cd:51:3b:af:6b:
                    cf:1b:f6:a7:ef:44:8f:f8:8d:46:fc:94:08:e0:9c:
                    de:2f:ca:14:2b:05:77:d0:57:ae:5b:cd:d1:28:6e:
                    88:62:98:d6:ad:ba:d1:83:eb:6e:66:3b:5d:91:68:
                    3f:67:f5:dc:c1:d2:84:f2:e7:bf:31:bc:92:f8:e6:
                    24:a4:23:08:00:d2:74:4d:8a:36:51:3b:de:43:e5:
                    f2:6a:f6:20:fd:48:f2:4f:38:7a:72:eb:c6:de:a7:
                    c9:4d:5b:e4:11:e4:e3:80:87:e2:e5:37:d1:aa:40:
                    b2:57:d7:a7:b8:07:41:d6:42:96:b6:26:41:25:a2:
                    69:72:cb:11:39:ce:b3:c9:82:c1:89:34:7d:a3:78:
                    61:c8:3b:79:9b:9a:c7:5a:af:87:25:97:a6:8c:02:
                    38:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D6:AB:19:CA:AE:65:5C:1E:C4:28:2E:DC:C6:36:F6:4F:FF:4D:66
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35362e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:b5:cb:a6:95:d3:3f:29:3f:7a:ef:11:de:b1:eb:a0:cb:d8:
         1d:63:08:ce:95:b7:dc:1a:2c:6e:78:c1:90:32:c7:d4:86:49:
         a6:14:0d:e5:d2:1a:93:f1:b8:35:82:4a:e5:a7:85:57:68:79:
         95:8b:0b:67:dc:b6:7e:23:62:b8:b0:96:a1:e1:b1:c7:19:12:
         fd:9e:1c:57:83:03:4a:52:50:64:af:46:e3:54:29:cd:eb:c8:
         2b:da:3b:b5:61:42:b9:1a:0f:86:a3:19:d7:e9:5c:1f:79:c4:
         4b:fd:45:d7:0e:61:dc:b4:fc:01:5d:7c:d2:d2:c5:e8:33:e1:
         1e:f0:7b:0e:60:e2:f7:77:98:ca:b8:82:88:c5:57:3e:2d:a4:
         2d:73:8d:2b:3d:3c:6d:9b:22:61:42:35:52:4e:5b:e0:b6:5c:
         f1:68:6f:2a:8d:5b:41:8c:7b:01:51:55:a7:1e:b0:fe:cb:0a:
         ce:71:e1:df:e6:6f:b9:7c:4a:58:62:a3:e3:3a:22:b3:f1:b6:
         b4:d3:47:ef:62:48:d2:53:1c:32:f7:f5:56:2e:d7:46:4f:0c:
         d8:b1:7d:d6:53:3f:79:d3:90:d1:e9:fd:2c:2e:a8:59:65:fa:
         8e:a8:cf:da:3a:41:92:40:2e:a3:cc:ea:6d:da:8e:18:af:3d:
         3e:f5:7a:d5
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUfEP1ACo6nItpSA75uVNxhmKKNW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNDEwMzEwODQyNTdaFw0yNTEwMzAwODQ3NTdaMDMxMTAvBgNV
BAMTKEZCRDZBQjE5Q0FBRTY1NUMxRUM0MjgyRURDQzYzNkY2NEZGRjRENjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrfCA431aSfcWnzZ9/V3Nwbd92
IVvLm0gxgdvFTTho4mSKZF71AAC1hN6XHDjagUA4LQxm/E2wMMZJ/9EUhp5j0zP2
eMA1si+vyCPZCQtKvTvGJmAkqT8vJHJ686AFg4Nkhf7NUTuva88b9qfvRI/4jUb8
lAjgnN4vyhQrBXfQV65bzdEobohimNatutGD625mO12RaD9n9dzB0oTy578xvJL4
5iSkIwgA0nRNijZRO95D5fJq9iD9SPJPOHpy68bep8lNW+QR5OOAh+LlN9GqQLJX
16e4B0HWQpa2JkElomlyyxE5zrPJgsGJNH2jeGHIO3mbmsdar4cll6aMAji1AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU+9arGcquZVwexCgu3MY29k//TWYwHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzQz
NTJlMzIzMzMyMmUzNTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzYz
ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQALeg4MA0GCSqGSIb3DQEBCwUAA4IBAQCJtcumldM/KT96
7xHeseugy9gdYwjOlbfcGixueMGQMsfUhkmmFA3l0hqT8bg1gkrlp4VXaHmViwtn
3LZ+I2K4sJah4bHHGRL9nhxXgwNKUlBkr0bjVCnN68gr2ju1YUK5Gg+GoxnX6Vwf
ecRL/UXXDmHctPwBXXzS0sXoM+Ee8HsOYOL3d5jKuIKIxVc+LaQtc40rPTxtmyJh
QjVSTlvgtlzxaG8qjVtBjHsBUVWnHrD+ywrOceHf5m+5fEpYYqPjOiKz8ba000fv
YkjSUxwy9/VWLtdGTwzYsX3WUz9505DR6f0sLqhZZfqOqM/aOkGSQC6jzOpt2o4Y
rz0+9XrV
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:51 2024 by rpki-client on console-ams.rpki-client.org