Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233382e34382e302f32322d3232203d3e20323733363833.roa
File:                     34352e3233382e34382e302f32322d3232203d3e20323733363833.roa (raw, json)
Hash identifier:          lVkDdPbm3ik4EJJyGz7ciZ+jVjG1JWXcSIuVUQHUpqQ=
Subject key identifier:   EA:97:62:6C:B1:C6:B2:03:7B:04:36:B5:D7:EB:CD:27:02:84:93:80
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       31276B1EEFA19F713BF5E8BD8453B35708AAFAD9
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233382e34382e302f32322d3232203d3e20323733363833.roa
Signing time:             Fri 23 Aug 2024 19:44:56 +0000
ROA not before:           Fri 23 Aug 2024 19:39:56 +0000
ROA not after:            Fri 22 Aug 2025 19:44:56 +0000
asID:                     273683
IP address blocks:        45.238.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 17:44:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:27:6b:1e:ef:a1:9f:71:3b:f5:e8:bd:84:53:b3:57:08:aa:fa:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Aug 23 19:39:56 2024 GMT
            Not After : Aug 22 19:44:56 2025 GMT
        Subject: CN=EA97626CB1C6B2037B0436B5D7EBCD2702849380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:65:ea:97:7f:ad:01:d0:1f:82:aa:03:a3:a7:
                    f2:35:d8:2c:fb:dd:d6:d6:13:30:08:af:a1:76:9e:
                    28:4a:57:03:38:89:12:fb:f7:da:d2:45:c1:77:f0:
                    21:f4:b4:88:97:39:70:74:64:ad:6d:5e:ed:1f:95:
                    bb:ba:62:cf:7d:73:1a:5a:96:45:e8:09:5b:6d:43:
                    f1:c5:68:d2:01:bf:10:2a:3b:f2:9a:b0:38:3b:64:
                    f0:b1:b1:f8:41:ad:34:88:b9:fb:a4:27:61:94:79:
                    f7:b0:78:99:c1:69:45:78:9f:ff:dc:02:56:5f:63:
                    ea:44:d7:04:24:08:37:5b:d8:80:00:78:be:68:f3:
                    91:c9:c0:7d:59:b4:ee:17:57:cd:8e:73:45:42:f3:
                    f5:80:56:c3:59:5d:a8:6d:b5:d9:ae:fc:c4:d0:5d:
                    cd:78:57:0b:5b:ed:f4:8c:84:4c:d5:ba:ca:9f:ba:
                    1e:63:73:45:72:d4:2a:92:bb:07:a4:27:da:a7:19:
                    cd:21:f8:15:e5:fa:1b:b9:52:50:33:fb:08:e2:d3:
                    b0:1e:68:81:59:b2:1a:4b:24:3e:2a:37:65:14:fc:
                    cb:42:46:45:2e:d7:5b:83:38:46:1e:e5:81:6b:2d:
                    7e:69:f8:24:66:92:44:e8:78:04:e5:42:b3:89:21:
                    20:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:97:62:6C:B1:C6:B2:03:7B:04:36:B5:D7:EB:CD:27:02:84:93:80
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233382e34382e302f32322d3232203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:9f:11:5e:f3:a0:53:66:fa:21:69:da:3a:b3:66:e9:50:e5:
         2c:ef:1d:57:2e:26:9a:35:a5:23:16:9d:9c:ee:6c:eb:37:14:
         8f:f8:76:e0:de:f2:73:5a:ff:c5:44:2e:42:5a:07:73:bb:ef:
         9c:7a:65:b3:71:a7:18:f9:55:3e:6c:19:30:c4:0d:1d:de:3d:
         11:6d:5b:0d:67:cc:be:a2:c1:4c:a1:7d:4b:fa:45:88:bd:c3:
         89:77:b3:17:85:d2:78:2a:f4:e3:b8:aa:64:e9:bc:f5:5d:da:
         5d:6b:47:18:fa:ba:2b:cd:33:a0:cc:71:fc:d3:59:ac:d4:ea:
         ff:5b:11:ae:72:83:b1:2c:b0:b2:24:11:9b:62:06:f8:c5:2a:
         07:f5:96:37:bf:e0:32:a7:9f:d6:33:51:55:ed:d7:2a:49:55:
         7d:36:ae:b1:ba:98:f6:79:56:be:56:1d:70:d2:f5:12:03:d3:
         a8:e5:c1:c4:7d:41:24:98:99:a0:41:12:7f:fb:e5:6e:eb:dd:
         06:3c:bc:42:02:b7:4d:22:55:56:b2:4b:13:3e:ac:55:c4:d5:
         6c:8e:11:c5:83:89:e1:a0:a4:2d:ec:7b:ee:a1:21:c0:30:31:
         c0:eb:0d:64:63:43:7d:01:b4:00:4f:30:e9:35:65:2a:81:c8:
         c2:94:d9:a9
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUMSdrHu+hn3E79ei9hFOzVwiq+tkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNDA4MjMxOTM5NTZaFw0yNTA4MjIxOTQ0NTZaMDMxMTAvBgNV
BAMTKEVBOTc2MjZDQjFDNkIyMDM3QjA0MzZCNUQ3RUJDRDI3MDI4NDkzODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZeqXf60B0B+CqgOjp/I12Cz7
3dbWEzAIr6F2nihKVwM4iRL799rSRcF38CH0tIiXOXB0ZK1tXu0flbu6Ys99cxpa
lkXoCVttQ/HFaNIBvxAqO/KasDg7ZPCxsfhBrTSIufukJ2GUefeweJnBaUV4n//c
AlZfY+pE1wQkCDdb2IAAeL5o85HJwH1ZtO4XV82Oc0VC8/WAVsNZXahttdmu/MTQ
Xc14Vwtb7fSMhEzVusqfuh5jc0Vy1CqSuwekJ9qnGc0h+BXl+hu5UlAz+wji07Ae
aIFZshpLJD4qN2UU/MtCRkUu11uDOEYe5YFrLX5p+CRmkkToeATlQrOJISCBAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU6pdibLHGsgN7BDa11+vNJwKEk4AwHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzQz
NTJlMzIzMzM4MmUzNDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMzMzYz
ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCLe4wMA0GCSqGSIb3DQEBCwUAA4IBAQCmnxFe86BTZvoh
ado6s2bpUOUs7x1XLiaaNaUjFp2c7mzrNxSP+Hbg3vJzWv/FRC5CWgdzu++cemWz
cacY+VU+bBkwxA0d3j0RbVsNZ8y+osFMoX1L+kWIvcOJd7MXhdJ4KvTjuKpk6bz1
Xdpda0cY+rorzTOgzHH801ms1Or/WxGucoOxLLCyJBGbYgb4xSoH9ZY3v+Ayp5/W
M1FV7dcqSVV9Nq6xupj2eVa+Vh1w0vUSA9Oo5cHEfUEkmJmgQRJ/++Vu690GPLxC
ArdNIlVWsksTPqxVxNVsjhHFg4nhoKQt7HvuoSHAMDHA6w1kY0N9AbQATzDpNWUq
gcjClNmp
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:55:25 2025 by rpki-client