Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/34352e3137302e3139322e302f32322d3232203d3e20323638313739.roa
File:                     34352e3137302e3139322e302f32322d3232203d3e20323638313739.roa (raw, json)
Hash identifier:          FiNJE9KVivfny2JOOIGgMna1OPTNDlnmc+6oPkvabx8=
Subject key identifier:   03:AB:3C:D2:87:00:8D:AB:84:D0:4D:0F:6D:B7:1B:BC:21:71:E1:93
Certificate issuer:       /CN=7CB4975FBB425123F7AC986A071279CDA92B5BCD
Certificate serial:       1A21EFC93149985A1549B0749013F824096D077C
Authority key identifier: 7C:B4:97:5F:BB:42:51:23:F7:AC:98:6A:07:12:79:CD:A9:2B:5B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/34352e3137302e3139322e302f32322d3232203d3e20323638313739.roa
Signing time:             Thu 04 Apr 2024 11:22:43 +0000
ROA not before:           Thu 04 Apr 2024 11:17:43 +0000
ROA not after:            Thu 03 Apr 2025 11:22:43 +0000
asID:                     268179
IP address blocks:        45.170.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.crl
                          rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:21:ef:c9:31:49:98:5a:15:49:b0:74:90:13:f8:24:09:6d:07:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB4975FBB425123F7AC986A071279CDA92B5BCD
        Validity
            Not Before: Apr  4 11:17:43 2024 GMT
            Not After : Apr  3 11:22:43 2025 GMT
        Subject: CN=03AB3CD287008DAB84D04D0F6DB71BBC2171E193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ae:14:5d:d8:6f:81:79:6f:b5:db:ac:fd:4a:
                    cc:b0:9f:eb:ad:bd:1c:af:7f:09:fb:fb:a6:53:31:
                    df:09:f3:53:56:6f:95:c0:06:2b:1c:1c:6c:f1:c9:
                    7a:f0:9d:b4:46:b8:be:15:a4:16:9d:db:8e:b6:48:
                    e6:62:ef:13:16:9b:6f:93:e1:1b:80:aa:ee:06:dd:
                    9a:96:c1:04:b9:b8:74:0e:4e:e5:33:40:76:82:38:
                    63:5c:96:57:e0:ef:a1:28:1c:67:be:f5:b0:d5:ba:
                    26:e8:9a:2f:62:a3:4e:b7:c5:f2:b9:04:be:9f:29:
                    84:ba:c2:3c:b3:da:29:b0:7a:56:0e:fe:66:6d:b0:
                    fa:3e:77:1f:e0:ff:9d:e2:2d:cc:7a:37:a3:cd:48:
                    5b:31:e7:21:60:5e:49:ea:b0:35:16:7c:df:9b:90:
                    1d:3c:92:c3:68:43:ee:90:9c:f2:41:8a:34:8a:82:
                    f9:31:08:88:3b:25:26:a4:cc:11:6e:41:6d:c0:07:
                    c8:51:ae:17:a8:2f:78:c4:d1:70:1e:ed:19:f2:6b:
                    f9:9a:15:a5:d4:a1:7b:3b:3c:ef:39:84:52:ff:c4:
                    f9:b4:ef:a4:c6:cd:05:f1:69:dc:bc:cd:c7:0f:9a:
                    ea:20:7d:be:5a:e2:1a:ef:d4:3a:53:6f:c2:a2:76:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AB:3C:D2:87:00:8D:AB:84:D0:4D:0F:6D:B7:1B:BC:21:71:E1:93
            X509v3 Authority Key Identifier:
                keyid:7C:B4:97:5F:BB:42:51:23:F7:AC:98:6A:07:12:79:CD:A9:2B:5B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/34352e3137302e3139322e302f32322d3232203d3e20323638313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:48:a3:4f:3b:84:a0:bb:2f:c4:80:07:d2:45:f7:fe:81:21:
         b1:de:6b:9b:d2:23:21:6a:c2:47:3b:20:b0:44:ec:f5:e8:d3:
         c4:b4:30:96:5d:85:78:b0:14:4e:b8:22:1c:49:34:74:df:69:
         f0:25:18:cd:de:46:6f:9e:1f:3d:80:c1:28:77:e1:85:fb:62:
         76:ae:50:2b:e9:4e:f1:73:b9:ac:0f:5c:d5:73:fd:28:e3:f0:
         fd:ce:71:8d:ed:7b:c2:c2:09:f3:11:b3:06:a0:03:43:23:e4:
         26:87:d7:47:b9:5f:9b:0e:88:26:ca:17:24:61:3a:7f:6f:24:
         50:ff:fb:64:5e:42:fa:73:c8:32:a7:06:ea:f5:30:ff:7d:c5:
         bd:c7:26:a6:39:2c:39:89:cf:8e:23:a2:04:c8:b6:11:69:ac:
         79:25:d5:67:4f:51:11:04:53:bc:81:b6:7a:67:49:bb:f8:c1:
         41:b7:4b:f8:87:f9:9e:27:0c:56:81:8c:2d:2a:ad:37:c3:43:
         43:62:15:8c:f7:80:34:54:b6:dd:2e:ff:2b:62:d8:ca:84:ff:
         29:9d:c7:45:ee:c8:5a:54:41:b9:e1:61:8b:34:41:49:d0:28:
         84:a3:a3:3b:cb:28:2c:c6:93:86:f5:53:e3:87:05:fb:35:10:
         3d:d0:52:96
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGiHvyTFJmFoVSbB0kBP4JAltB3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCNDk3NUZCQjQyNTEyM0Y3QUM5ODZBMDcxMjc5Q0RB
OTJCNUJDRDAeFw0yNDA0MDQxMTE3NDNaFw0yNTA0MDMxMTIyNDNaMDMxMTAvBgNV
BAMTKDAzQUIzQ0QyODcwMDhEQUI4NEQwNEQwRjZEQjcxQkJDMjE3MUUxOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfrhRd2G+BeW+126z9Ssywn+ut
vRyvfwn7+6ZTMd8J81NWb5XABiscHGzxyXrwnbRGuL4VpBad2462SOZi7xMWm2+T
4RuAqu4G3ZqWwQS5uHQOTuUzQHaCOGNcllfg76EoHGe+9bDVuibomi9io063xfK5
BL6fKYS6wjyz2imwelYO/mZtsPo+dx/g/53iLcx6N6PNSFsx5yFgXknqsDUWfN+b
kB08ksNoQ+6QnPJBijSKgvkxCIg7JSakzBFuQW3AB8hRrheoL3jE0XAe7Rnya/ma
FaXUoXs7PO85hFL/xPm076TGzQXxady8zccPmuogfb5a4hrv1DpTb8KidlYbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUA6s80ocAjauE0E0PbbcbvCFx4ZMwHwYDVR0j
BBgwFoAUfLSXX7tCUSP3rJhqBxJ5zakrW80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzF6eTF1YldXcUgyQUw2SG81TUJ4VUNqaEZpYmFiVlROQzhBOVZUTGpO
MVMvMS83Q0I0OTc1RkJCNDI1MTIzRjdBQzk4NkEwNzEyNzlDREE5MkI1QkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQjQ5NzVGQkI0MjUxMjNG
N0FDOTg2QTA3MTI3OUNEQTkyQjVCQ0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0cxenkxdWJXV3FIMkFMNkhvNU1CeFVDamhGaWJhYlZUTkM4QTlWVExqTjFTLzEv
MzQzNTJlMzEzNzMwMmUzMTM5MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqsAwDQYJKoZIhvcNAQELBQADggEBAChIo087
hKC7L8SAB9JF9/6BIbHea5vSIyFqwkc7ILBE7PXo08S0MJZdhXiwFE64IhxJNHTf
afAlGM3eRm+eHz2AwSh34YX7YnauUCvpTvFzuawPXNVz/Sjj8P3OcY3te8LCCfMR
swagA0Mj5CaH10e5X5sOiCbKFyRhOn9vJFD/+2ReQvpzyDKnBur1MP99xb3HJqY5
LDmJz44jogTIthFprHkl1WdPUREEU7yBtnpnSbv4wUG3S/iH+Z4nDFaBjC0qrTfD
Q0NiFYz3gDRUtt0u/yti2MqE/ymdx0XuyFpUQbnhYYs0QUnQKISjozvLKCzGk4b1
U+OHBfs1ED3QUpY=
-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:14 2024 by rpki-client on console-fra.rpki-client.org