Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37342e302f32342d3234203d3e20323639353137.roa
File:                     34352e3138382e37342e302f32342d3234203d3e20323639353137.roa (raw, json)
Hash identifier:          1eFPujXKnS8Gfxdk6oH1O9OdLGfRS62qG9PDP8Ge7kM=
Subject key identifier:   01:71:2F:0E:A8:B0:7B:D3:A2:AC:15:D8:5F:11:9A:3F:FE:88:B3:10
Certificate issuer:       /CN=C47A0E8B419D9A48CB19E98AFC4DE74B767C9441
Certificate serial:       392EA4F4AB60B51DD6707486760341DEF90E716A
Authority key identifier: C4:7A:0E:8B:41:9D:9A:48:CB:19:E9:8A:FC:4D:E7:4B:76:7C:94:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37342e302f32342d3234203d3e20323639353137.roa
Signing time:             Sun 03 Nov 2024 18:49:43 +0000
ROA not before:           Sun 03 Nov 2024 18:44:43 +0000
ROA not after:            Sun 02 Nov 2025 18:49:43 +0000
asID:                     269517
IP address blocks:        45.188.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.crl
                          rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:2e:a4:f4:ab:60:b5:1d:d6:70:74:86:76:03:41:de:f9:0e:71:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47A0E8B419D9A48CB19E98AFC4DE74B767C9441
        Validity
            Not Before: Nov  3 18:44:43 2024 GMT
            Not After : Nov  2 18:49:43 2025 GMT
        Subject: CN=01712F0EA8B07BD3A2AC15D85F119A3FFE88B310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:20:70:31:a1:5d:8f:82:f3:40:d9:47:23:4f:
                    ba:71:97:1c:de:d8:f0:c4:10:3c:49:dd:38:61:59:
                    f7:e1:82:59:0d:6a:48:3f:16:e7:a4:0c:f9:b2:74:
                    ef:2e:cf:74:74:88:d4:66:2d:93:54:f2:c4:96:13:
                    d6:26:49:13:27:2d:f8:98:aa:39:cc:4f:66:34:e6:
                    da:29:63:31:fb:3d:57:4e:f9:81:2d:0c:93:6e:f1:
                    1a:07:6d:a9:64:36:73:63:8d:c7:f0:8d:32:7a:75:
                    95:73:8a:d7:d5:9b:00:54:07:66:26:99:6b:84:63:
                    67:1d:11:d2:5a:3f:58:a4:5b:14:9f:e5:d3:a0:38:
                    f2:dd:a6:28:d5:8c:37:20:c3:0c:59:4b:6d:90:21:
                    e8:c5:69:11:89:bf:21:6f:75:42:fa:70:7d:03:71:
                    ed:6f:cd:12:b3:c1:71:5b:49:66:a6:09:75:25:4f:
                    08:e0:45:e3:9c:fc:d9:cb:e0:2a:b8:aa:3a:af:06:
                    c7:b5:df:ef:5d:f9:0f:77:71:21:cf:9f:a6:9d:fc:
                    c6:43:24:59:43:36:df:24:a4:f9:4f:93:2a:04:4a:
                    bc:2d:92:12:70:9b:4e:5c:e1:11:87:81:f0:d7:8c:
                    77:c5:f0:cb:e5:3c:aa:bc:c3:6f:95:83:f1:73:42:
                    0d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:71:2F:0E:A8:B0:7B:D3:A2:AC:15:D8:5F:11:9A:3F:FE:88:B3:10
            X509v3 Authority Key Identifier:
                keyid:C4:7A:0E:8B:41:9D:9A:48:CB:19:E9:8A:FC:4D:E7:4B:76:7C:94:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37342e302f32342d3234203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:6e:11:a2:1e:e3:15:88:fb:f7:22:c0:fc:1f:64:7c:00:23:
         af:f5:3f:cd:e5:0d:89:1a:cc:11:32:29:0a:a7:25:4c:61:94:
         a4:8b:64:b1:34:8e:ad:8f:86:9d:81:f1:ab:0d:1c:2e:aa:73:
         c9:c9:49:01:37:f8:d9:c6:28:bc:bd:3f:db:e4:77:e9:16:a5:
         3f:32:b3:86:7e:fb:3f:d0:de:35:00:a9:99:d3:96:d4:a8:97:
         92:61:4a:33:3e:5a:41:b2:c2:8b:fc:e9:ef:72:71:fa:06:39:
         66:a0:74:5a:8e:e3:61:83:77:ee:5c:f0:b6:b3:c5:27:ce:22:
         5f:a7:33:2d:8b:5b:01:5b:15:64:94:16:68:6e:6f:aa:ae:d2:
         ac:ee:0d:64:7c:80:ad:7f:54:c6:00:ca:20:04:50:9f:b5:e4:
         1e:04:d0:ba:a9:ca:01:28:07:40:fe:dc:4e:18:a1:1b:19:d4:
         30:4d:6a:67:fb:72:30:e1:2d:08:5a:11:c5:de:bc:34:df:af:
         3b:ba:9d:26:4e:61:b8:8d:12:c6:e9:75:97:c6:c9:98:e7:ed:
         05:32:65:e3:cf:35:89:01:2a:cc:16:97:88:bd:fd:6c:5e:d9:
         f8:da:31:cd:f0:ac:ff:b8:2b:c0:71:43:2f:8c:3e:f1:64:d2:
         91:31:79:8e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOS6k9KtgtR3WcHSGdgNB3vkOcWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3QTBFOEI0MTlEOUE0OENCMTlFOThBRkM0REU3NEI3
NjdDOTQ0MTAeFw0yNDExMDMxODQ0NDNaFw0yNTExMDIxODQ5NDNaMDMxMTAvBgNV
BAMTKDAxNzEyRjBFQThCMDdCRDNBMkFDMTVEODVGMTE5QTNGRkU4OEIzMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpIHAxoV2PgvNA2UcjT7pxlxze
2PDEEDxJ3ThhWffhglkNakg/FuekDPmydO8uz3R0iNRmLZNU8sSWE9YmSRMnLfiY
qjnMT2Y05topYzH7PVdO+YEtDJNu8RoHbalkNnNjjcfwjTJ6dZVzitfVmwBUB2Ym
mWuEY2cdEdJaP1ikWxSf5dOgOPLdpijVjDcgwwxZS22QIejFaRGJvyFvdUL6cH0D
ce1vzRKzwXFbSWamCXUlTwjgReOc/NnL4Cq4qjqvBse13+9d+Q93cSHPn6ad/MZD
JFlDNt8kpPlPkyoESrwtkhJwm05c4RGHgfDXjHfF8MvlPKq8w2+Vg/FzQg0xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAXEvDqiwe9OirBXYXxGaP/6IsxAwHwYDVR0j
BBgwFoAUxHoOi0GdmkjLGemK/E3nS3Z8lEEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBMZzZuYmRKZ3ZWaGs5cGQxeVJ2ZlZMeXJYc1FUQUdwbnVNOFA5Yk1v
dmIvMC9DNDdBMEU4QjQxOUQ5QTQ4Q0IxOUU5OEFGQzRERTc0Qjc2N0M5NDQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0N0EwRThCNDE5RDlBNDhD
QjE5RTk4QUZDNERFNzRCNzY3Qzk0NDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VwTGc2bmJkSmd2VmhrOXBkMXlSdmZWTHlyWHNRVEFHcG51TThQOWJNb3ZiLzAv
MzQzNTJlMzEzODM4MmUzNzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzUzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbxKMA0GCSqGSIb3DQEBCwUAA4IBAQCGbhGiHuMV
iPv3IsD8H2R8ACOv9T/N5Q2JGswRMikKpyVMYZSki2SxNI6tj4adgfGrDRwuqnPJ
yUkBN/jZxii8vT/b5HfpFqU/MrOGfvs/0N41AKmZ05bUqJeSYUozPlpBssKL/Onv
cnH6BjlmoHRajuNhg3fuXPC2s8UnziJfpzMti1sBWxVklBZobm+qrtKs7g1kfICt
f1TGAMogBFCfteQeBNC6qcoBKAdA/txOGKEbGdQwTWpn+3Iw4S0IWhHF3rw03687
up0mTmG4jRLG6XWXxsmY5+0FMmXjzzWJASrMFpeIvf1sXtn42jHN8Kz/uCvAcUMv
jD7xZNKRMXmO
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:42 2024 by rpki-client on console-ams.rpki-client.org