Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/34352e3232362e39382e302f32352d3235203d3e20323637303230.roa
File:                     34352e3232362e39382e302f32352d3235203d3e20323637303230.roa (raw, json)
Hash identifier:          pLqHr93EuVKp/MXuPVnkHfMh85/vltDhcb0qA+Q1l04=
Subject key identifier:   3A:90:55:8A:BA:EC:92:84:4E:1F:F2:F0:7D:E0:A9:93:ED:47:C0:42
Certificate issuer:       /CN=1264AC4645C5D468F6F578F2BECD4FAA697E7333
Certificate serial:       01D96BB675E5961BF6D1CA679857A824A0EEACA2
Authority key identifier: 12:64:AC:46:45:C5:D4:68:F6:F5:78:F2:BE:CD:4F:AA:69:7E:73:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/34352e3232362e39382e302f32352d3235203d3e20323637303230.roa
Signing time:             Tue 12 Nov 2024 02:54:52 +0000
ROA not before:           Tue 12 Nov 2024 02:49:52 +0000
ROA not after:            Tue 11 Nov 2025 02:54:52 +0000
asID:                     267020
IP address blocks:        45.226.98.0/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.crl
                          rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d9:6b:b6:75:e5:96:1b:f6:d1:ca:67:98:57:a8:24:a0:ee:ac:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1264AC4645C5D468F6F578F2BECD4FAA697E7333
        Validity
            Not Before: Nov 12 02:49:52 2024 GMT
            Not After : Nov 11 02:54:52 2025 GMT
        Subject: CN=3A90558ABAEC92844E1FF2F07DE0A993ED47C042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:a2:5d:61:a6:a7:2e:dd:11:74:74:98:ef:
                    6e:6f:68:db:0d:cb:79:97:dd:35:b5:0b:3d:38:08:
                    c4:4b:7b:94:07:98:0a:ba:0a:fb:d8:82:bc:5f:82:
                    5f:7a:fb:87:19:a6:92:fd:9a:22:fa:5c:63:07:1d:
                    5f:73:f8:15:04:ac:d8:a9:de:9b:f1:69:1d:db:96:
                    bd:ba:37:a4:4b:6a:a4:62:8b:f0:fe:15:9f:0e:5b:
                    63:59:c0:01:a1:a1:72:d3:21:e4:77:10:9d:ab:86:
                    9e:7d:64:f5:39:ae:84:52:8d:7a:6c:bc:88:23:c4:
                    ad:8a:94:33:9a:2c:40:95:d5:87:3c:e9:7f:2e:c3:
                    15:8c:40:fc:6f:75:00:2f:0d:2e:9b:8f:3e:c8:66:
                    94:37:8f:66:71:c3:07:dd:12:cd:dd:19:16:3f:4e:
                    f1:a4:7b:d8:13:83:19:c9:0b:08:03:3d:50:eb:08:
                    a8:31:10:98:0f:ad:61:c2:a2:41:17:d0:8e:bc:53:
                    6e:38:eb:a0:d3:e8:ca:98:00:d7:7c:d1:88:fe:c9:
                    1c:bb:dc:b4:4e:34:25:ed:c7:ad:8b:62:05:b8:01:
                    21:76:40:dc:8a:23:b8:e1:b4:6a:d8:e3:96:b9:b4:
                    e5:d0:da:1e:d3:bb:1b:4a:c6:82:ab:16:06:e5:9e:
                    73:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:90:55:8A:BA:EC:92:84:4E:1F:F2:F0:7D:E0:A9:93:ED:47:C0:42
            X509v3 Authority Key Identifier:
                keyid:12:64:AC:46:45:C5:D4:68:F6:F5:78:F2:BE:CD:4F:AA:69:7E:73:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/34352e3232362e39382e302f32352d3235203d3e20323637303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.98.0/25

    Signature Algorithm: sha256WithRSAEncryption
         68:fa:fd:35:20:0b:09:ce:58:c0:0a:02:26:42:f9:5d:f7:bf:
         fa:7f:cb:e8:5b:7d:1d:f2:4a:0f:89:9b:fc:ca:d1:73:de:36:
         39:52:d9:92:40:a9:03:7b:50:e0:6e:d8:03:80:ad:df:52:7c:
         f7:74:b5:b8:d9:c6:fe:0e:4f:51:74:d0:4c:59:f4:a7:19:fd:
         27:87:b9:64:60:e2:0a:6b:e2:bc:5c:88:1f:05:24:bc:2c:44:
         f0:bd:22:b4:bf:f7:0c:45:fb:d6:5a:24:9b:8e:b2:64:b1:91:
         b6:72:d2:12:b9:17:ab:c4:57:72:90:45:48:61:76:c3:66:2f:
         29:58:b0:58:04:72:c7:41:f7:92:63:fc:15:b9:6b:08:c3:e4:
         57:3a:4a:ab:c1:c9:9a:6f:4c:eb:d5:9d:55:72:82:47:a4:17:
         18:c7:f9:d5:bb:55:9d:83:3d:23:e1:87:1d:82:94:d0:b8:c9:
         70:f0:08:b5:78:2b:31:fd:49:22:b6:b1:a5:c9:74:0c:13:53:
         06:ad:1c:54:0b:87:c6:e2:1b:e6:6a:a8:b5:ce:5c:89:63:76:
         51:a9:8c:08:ac:16:f7:22:1d:84:ed:34:7f:9b:4d:28:57:1f:
         0a:51:c4:1d:99:68:67:d5:d1:06:c8:d7:07:d9:06:1a:22:90:
         3c:45:6f:1a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUAdlrtnXllhv20cpnmFeoJKDurKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI2NEFDNDY0NUM1RDQ2OEY2RjU3OEYyQkVDRDRGQUE2
OTdFNzMzMzAeFw0yNDExMTIwMjQ5NTJaFw0yNTExMTEwMjU0NTJaMDMxMTAvBgNV
BAMTKDNBOTA1NThBQkFFQzkyODQ0RTFGRjJGMDdERTBBOTkzRUQ0N0MwNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVL6JdYaanLt0RdHSY725vaNsN
y3mX3TW1Cz04CMRLe5QHmAq6CvvYgrxfgl96+4cZppL9miL6XGMHHV9z+BUErNip
3pvxaR3blr26N6RLaqRii/D+FZ8OW2NZwAGhoXLTIeR3EJ2rhp59ZPU5roRSjXps
vIgjxK2KlDOaLECV1Yc86X8uwxWMQPxvdQAvDS6bjz7IZpQ3j2ZxwwfdEs3dGRY/
TvGke9gTgxnJCwgDPVDrCKgxEJgPrWHCokEX0I68U24466DT6MqYANd80Yj+yRy7
3LRONCXtx62LYgW4ASF2QNyKI7jhtGrY45a5tOXQ2h7TuxtKxoKrFgblnnONAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUOpBVirrskoROH/LwfeCpk+1HwEIwHwYDVR0j
BBgwFoAUEmSsRkXF1Gj29Xjyvs1Pqml+czMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExMS21WdEp5YU1IWjZvQVNQQjlVazJtb1M1R21qV2FrUnZ2NURxQzlt
OEgvMS8xMjY0QUM0NjQ1QzVENDY4RjZGNTc4RjJCRUNENEZBQTY5N0U3MzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyNjRBQzQ2NDVDNUQ0NjhG
NkY1NzhGMkJFQ0Q0RkFBNjk3RTczMzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMTEttVnRKeWFNSFo2b0FTUEI5VWsybW9TNUdtaldha1J2djVEcUM5bThILzEv
MzQzNTJlMzIzMjM2MmUzOTM4MmUzMDJmMzIzNTJkMzIzNTIwM2QzZTIwMzIzNjM3
MzAzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAATAHAwUHLeJiADANBgkqhkiG9w0BAQsFAAOCAQEAaPr9NSAL
Cc5YwAoCJkL5Xfe/+n/L6Ft9HfJKD4mb/MrRc942OVLZkkCpA3tQ4G7YA4Ct31J8
93S1uNnG/g5PUXTQTFn0pxn9J4e5ZGDiCmvivFyIHwUkvCxE8L0itL/3DEX71lok
m46yZLGRtnLSErkXq8RXcpBFSGF2w2YvKViwWARyx0H3kmP8FblrCMPkVzpKq8HJ
mm9M69WdVXKCR6QXGMf51btVnYM9I+GHHYKU0LjJcPAItXgrMf1JIraxpcl0DBNT
Bq0cVAuHxuIb5mqotc5ciWN2UamMCKwW9yIdhO00f5tNKFcfClHEHZloZ9XRBsjX
B9kGGiKQPEVvGg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:31 2024 by rpki-client on console-ams.rpki-client.org