Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37322e302f32342d3234203d3e20323637323531.roa
File:                     34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (raw, json)
Hash identifier:          IaO+M/0dGe0MHsmL3brZYR6BQsQKpxk4pS5D8hXmYNg=
Subject key identifier:   84:F6:CC:1F:77:D9:A7:2A:13:61:99:70:8A:3F:A0:88:3F:24:5A:ED
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       4031C221299AE2CBD1129A91131E8C3F843E20EC
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37322e302f32342d3234203d3e20323637323531.roa
Signing time:             Wed 03 Apr 2024 18:32:29 +0000
ROA not before:           Wed 03 Apr 2024 18:27:29 +0000
ROA not after:            Wed 02 Apr 2025 18:32:29 +0000
asID:                     267251
IP address blocks:        45.232.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:31:c2:21:29:9a:e2:cb:d1:12:9a:91:13:1e:8c:3f:84:3e:20:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Apr  3 18:27:29 2024 GMT
            Not After : Apr  2 18:32:29 2025 GMT
        Subject: CN=84F6CC1F77D9A72A136199708A3FA0883F245AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b2:80:19:41:c4:8c:5f:f7:b7:61:b3:07:8d:
                    e3:95:21:f2:cc:11:f3:d5:b3:ec:35:ce:c5:d0:bd:
                    0c:0f:16:94:d4:d8:a9:bf:fc:d3:17:1d:ff:3e:74:
                    28:88:7f:bd:e8:f8:24:e6:5b:53:73:7d:0c:49:a0:
                    eb:29:83:0d:20:9a:4e:38:23:ea:77:09:e3:f0:53:
                    79:9e:fe:c4:07:83:e1:9c:c5:5f:6a:78:7a:6c:50:
                    10:4d:f2:44:53:31:24:7a:09:0d:25:14:bc:b8:17:
                    a1:69:6d:5d:3a:47:76:9c:8a:30:29:61:75:7a:85:
                    f3:d3:57:02:59:82:08:69:7f:88:bd:a2:4a:18:6c:
                    36:41:bd:61:5e:07:61:3a:42:87:43:6f:bf:34:d7:
                    89:3c:8b:df:5e:cd:d8:21:14:6d:75:e4:cc:18:4a:
                    60:21:13:95:7c:31:27:73:30:34:1a:9e:af:e5:91:
                    8a:5b:b5:24:33:7c:2a:38:c4:3a:3d:f8:56:ac:da:
                    3b:a2:59:6b:c7:65:af:2c:cc:65:cb:fa:58:23:68:
                    ba:e7:34:fe:32:e5:e6:6c:f3:44:69:9b:1c:d0:f5:
                    07:ae:63:6d:03:06:d9:39:51:13:d5:dd:c7:7e:63:
                    8e:bb:31:8d:ea:2a:f8:85:58:cc:89:79:4c:c3:d8:
                    28:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F6:CC:1F:77:D9:A7:2A:13:61:99:70:8A:3F:A0:88:3F:24:5A:ED
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37322e302f32342d3234203d3e20323637323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:d2:44:09:1b:a7:30:94:af:a6:dd:8b:2b:3a:17:49:c7:3a:
         48:47:0b:9c:7f:cb:ac:6e:7c:7f:08:17:eb:e0:bc:04:1c:d7:
         c8:15:5c:20:80:f4:02:bc:77:08:bc:43:81:af:31:52:a3:3e:
         1a:3a:43:43:db:5b:70:8a:68:4c:91:be:71:62:cf:72:90:27:
         b1:75:e6:9d:54:03:47:68:26:c1:9c:52:d9:d6:01:1f:ec:f9:
         0d:31:a3:13:63:cd:86:bd:03:de:6c:e9:e3:57:68:d7:5e:7f:
         08:3a:2b:74:6c:1d:a5:e3:2a:04:a3:05:5a:f4:a0:78:41:bb:
         87:ea:53:7f:0d:4e:78:23:b6:6f:6f:2b:27:0d:5a:5e:70:2f:
         65:47:63:80:e0:f7:94:00:2e:fd:ea:d7:08:1f:ed:c7:10:50:
         83:8b:31:54:f3:1c:b9:cc:ed:09:7d:c2:21:a8:1b:97:b7:62:
         72:0d:7f:c3:89:ab:9a:d6:02:0f:d2:f8:a4:f4:7c:95:bf:96:
         83:c9:16:9f:d7:9a:4f:e6:65:9c:53:5a:43:e8:72:bf:2e:ec:
         80:ff:77:29:4f:f0:05:fa:b2:35:3e:be:1a:a9:44:58:65:46:
         a3:be:8f:d7:5d:ce:af:f0:c3:61:5d:22:c1:0e:43:d4:e6:15:
         78:f5:3b:32
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQDHCISma4svREpqREx6MP4Q+IOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZGRDM1NzNBQzQwNkI0RUZCMUY0NTgxNDlDRjczQzMx
QTJGRjRFRjAeFw0yNDA0MDMxODI3MjlaFw0yNTA0MDIxODMyMjlaMDMxMTAvBgNV
BAMTKDg0RjZDQzFGNzdEOUE3MkExMzYxOTk3MDhBM0ZBMDg4M0YyNDVBRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXsoAZQcSMX/e3YbMHjeOVIfLM
EfPVs+w1zsXQvQwPFpTU2Km//NMXHf8+dCiIf73o+CTmW1NzfQxJoOspgw0gmk44
I+p3CePwU3me/sQHg+GcxV9qeHpsUBBN8kRTMSR6CQ0lFLy4F6FpbV06R3acijAp
YXV6hfPTVwJZgghpf4i9okoYbDZBvWFeB2E6QodDb78014k8i99ezdghFG115MwY
SmAhE5V8MSdzMDQanq/lkYpbtSQzfCo4xDo9+Fas2juiWWvHZa8szGXL+lgjaLrn
NP4y5eZs80RpmxzQ9QeuY20DBtk5URPV3cd+Y467MY3qKviFWMyJeUzD2ChzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhPbMH3fZpyoTYZlwij+giD8kWu0wHwYDVR0j
BBgwFoAU3/01c6xAa077H0WBSc9zwxov9O8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwy
a28vMS9ERkZEMzU3M0FDNDA2QjRFRkIxRjQ1ODE0OUNGNzNDMzFBMkZGNEVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGRkQzNTczQUM0MDZCNEVG
QjFGNDU4MTQ5Q0Y3M0MzMUEyRkY0RUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hWZ0VKTW1HZUp2SlBSWEhIbWdIVm02R2M4ZVJaWlNmV2tBdmh2VFFMMmtvLzEv
MzQzNTJlMzIzMzMyMmUzNzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzIzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALehIMA0GCSqGSIb3DQEBCwUAA4IBAQCs0kQJG6cw
lK+m3YsrOhdJxzpIRwucf8usbnx/CBfr4LwEHNfIFVwggPQCvHcIvEOBrzFSoz4a
OkND21twimhMkb5xYs9ykCexdeadVANHaCbBnFLZ1gEf7PkNMaMTY82GvQPebOnj
V2jXXn8IOit0bB2l4yoEowVa9KB4QbuH6lN/DU54I7ZvbysnDVpecC9lR2OA4PeU
AC796tcIH+3HEFCDizFU8xy5zO0JfcIhqBuXt2JyDX/Diaua1gIP0vik9HyVv5aD
yRaf15pP5mWcU1pD6HK/LuyA/3cpT/AF+rI1Pr4aqURYZUajvo/XXc6v8MNhXSLB
DkPU5hV49Tsy
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:52 2024 by rpki-client on console-ams.rpki-client.org