Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/2/AS61592.roa
File:                     AS61592.roa (raw, json)
Hash identifier:          v7QqDr7PMQO79GjVZ20ho0AGsJLSRqkkLvhnheWijBE=
Subject key identifier:   68:DC:7A:9D:9E:1B:8A:0C:75:56:5C:AF:58:10:69:90:34:E3:3B:05
Certificate issuer:       /CN=1836EFADFB51110C70863E841A306704CF99117E
Certificate serial:       13EFA2BCE12F30ADA9B604FD612266205A1844E3
Authority key identifier: 18:36:EF:AD:FB:51:11:0C:70:86:3E:84:1A:30:67:04:CF:99:11:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1836EFADFB51110C70863E841A306704CF99117E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/2/AS61592.roa
Signing time:             Fri 05 Apr 2024 02:25:45 +0000
ROA not before:           Fri 05 Apr 2024 02:20:45 +0000
ROA not after:            Fri 04 Apr 2025 02:25:45 +0000
asID:                     61592
IP address blocks:        45.224.216.0/22 maxlen: 22
                          45.224.216.0/23 maxlen: 23
                          45.224.216.0/24 maxlen: 24
                          45.224.217.0/24 maxlen: 24
                          45.224.218.0/23 maxlen: 23
                          45.224.218.0/24 maxlen: 24
                          45.224.219.0/24 maxlen: 24
                          45.232.188.0/22 maxlen: 22
                          45.232.188.0/23 maxlen: 23
                          45.232.188.0/24 maxlen: 24
                          45.232.189.0/24 maxlen: 24
                          45.232.190.0/23 maxlen: 23
                          45.232.190.0/24 maxlen: 24
                          45.232.191.0/24 maxlen: 24
                          45.234.100.0/22 maxlen: 22
                          45.234.100.0/23 maxlen: 23
                          45.234.100.0/24 maxlen: 24
                          45.234.101.0/24 maxlen: 24
                          45.234.102.0/23 maxlen: 23
                          45.234.102.0/24 maxlen: 24
                          45.234.103.0/24 maxlen: 24
                          2804:4c34::/32 maxlen: 32
                          2804:4c34::/34 maxlen: 34
                          2804:4c34::/36 maxlen: 36
                          2804:4c34:1::/48 maxlen: 48
                          2804:4c34:1000::/36 maxlen: 36
                          2804:4c34:2000::/36 maxlen: 36
                          2804:4c34:3000::/36 maxlen: 36
                          2804:4c34:4000::/34 maxlen: 34
                          2804:4c34:4000::/36 maxlen: 36
                          2804:4c34:4000::/48 maxlen: 48
                          2804:4c34:4001::/48 maxlen: 48
                          2804:4c34:4002::/48 maxlen: 48
                          2804:4c34:4003::/48 maxlen: 48
                          2804:4c34:4004::/48 maxlen: 48
                          2804:4c34:4005::/48 maxlen: 48
                          2804:4c34:4006::/48 maxlen: 48
                          2804:4c34:4007::/48 maxlen: 48
                          2804:4c34:4008::/48 maxlen: 48
                          2804:4c34:4009::/48 maxlen: 48
                          2804:4c34:400a::/48 maxlen: 48
                          2804:4c34:400b::/48 maxlen: 48
                          2804:4c34:400e::/48 maxlen: 48
                          2804:4c34:400f::/48 maxlen: 48
                          2804:4c34:4010::/46 maxlen: 46
                          2804:4c34:4014::/48 maxlen: 48
                          2804:4c34:4015::/48 maxlen: 48
                          2804:4c34:4016::/48 maxlen: 48
                          2804:4c34:5000::/36 maxlen: 36
                          2804:4c34:6000::/36 maxlen: 36
                          2804:4c34:7000::/36 maxlen: 36
                          2804:4c34:8000::/33 maxlen: 33
                          2804:4c34:8000::/34 maxlen: 34
                          2804:4c34:8000::/36 maxlen: 36
                          2804:4c34:9000::/36 maxlen: 36
                          2804:4c34:a000::/36 maxlen: 36
                          2804:4c34:b000::/36 maxlen: 36
                          2804:4c34:c000::/34 maxlen: 34
                          2804:4c34:c000::/36 maxlen: 36
                          2804:4c34:c000::/48 maxlen: 48
                          2804:4c34:c001::/48 maxlen: 48
                          2804:4c34:c002::/48 maxlen: 48
                          2804:4c34:c003::/48 maxlen: 48
                          2804:4c34:c004::/48 maxlen: 48
                          2804:4c34:c005::/48 maxlen: 48
                          2804:4c34:c006::/48 maxlen: 48
                          2804:4c34:c007::/48 maxlen: 48
                          2804:4c34:c009::/48 maxlen: 48
                          2804:4c34:c00a::/48 maxlen: 48
                          2804:4c34:c00b::/48 maxlen: 48
                          2804:4c34:c010::/48 maxlen: 48
                          2804:4c34:c011::/48 maxlen: 48
                          2804:4c34:c012::/48 maxlen: 48
                          2804:4c34:c013::/48 maxlen: 48
                          2804:4c34:c014::/48 maxlen: 48
                          2804:4c34:c015::/48 maxlen: 48
                          2804:4c34:c016::/48 maxlen: 48
                          2804:4c34:c017::/48 maxlen: 48
                          2804:4c34:c018::/48 maxlen: 48
                          2804:4c34:c01a::/48 maxlen: 48
                          2804:4c34:c01b::/48 maxlen: 48
                          2804:4c34:c01c::/48 maxlen: 48
                          2804:4c34:c01d::/48 maxlen: 48
                          2804:4c34:c01e::/48 maxlen: 48
                          2804:4c34:c01f::/48 maxlen: 48
                          2804:4c34:c020::/48 maxlen: 48
                          2804:4c34:c021::/48 maxlen: 48
                          2804:4c34:c022::/48 maxlen: 48
                          2804:4c34:c023::/48 maxlen: 48
                          2804:4c34:c024::/48 maxlen: 48
                          2804:4c34:c025::/48 maxlen: 48
                          2804:4c34:c026::/48 maxlen: 48
                          2804:4c34:c027::/48 maxlen: 48
                          2804:4c34:c028::/48 maxlen: 48
                          2804:4c34:c029::/48 maxlen: 48
                          2804:4c34:c02a::/48 maxlen: 48
                          2804:4c34:c030::/48 maxlen: 48
                          2804:4c34:c032::/47 maxlen: 47
                          2804:4c34:c034::/48 maxlen: 48
                          2804:4c34:c035::/48 maxlen: 48
                          2804:4c34:c036::/48 maxlen: 48
                          2804:4c34:c037::/48 maxlen: 48
                          2804:4c34:c039::/48 maxlen: 48
                          2804:4c34:c03a::/48 maxlen: 48
                          2804:4c34:c03b::/48 maxlen: 48
                          2804:4c34:c03c::/48 maxlen: 48
                          2804:4c34:c03d::/48 maxlen: 48
                          2804:4c34:c03e::/48 maxlen: 48
                          2804:4c34:c03f::/48 maxlen: 48
                          2804:4c34:c040::/44 maxlen: 44
                          2804:4c34:c054::/47 maxlen: 47
                          2804:4c34:c056::/48 maxlen: 48
                          2804:4c34:c057::/48 maxlen: 48
                          2804:4c34:c059::/48 maxlen: 48
                          2804:4c34:c05a::/47 maxlen: 47
                          2804:4c34:d000::/36 maxlen: 36
                          2804:4c34:e000::/36 maxlen: 36
                          2804:4c34:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/2/1836EFADFB51110C70863E841A306704CF99117E.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/2/1836EFADFB51110C70863E841A306704CF99117E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1836EFADFB51110C70863E841A306704CF99117E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ef:a2:bc:e1:2f:30:ad:a9:b6:04:fd:61:22:66:20:5a:18:44:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1836EFADFB51110C70863E841A306704CF99117E
        Validity
            Not Before: Apr  5 02:20:45 2024 GMT
            Not After : Apr  4 02:25:45 2025 GMT
        Subject: CN=68DC7A9D9E1B8A0C75565CAF5810699034E33B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:97:9e:68:44:17:fb:94:4e:8c:6e:7c:bd:
                    d2:f5:8f:38:6e:69:41:28:b0:8b:8a:2d:45:4f:58:
                    c1:38:bc:d6:d6:0b:1f:18:ef:21:61:c0:ff:30:4f:
                    2c:0c:e1:f0:23:2e:14:42:80:b0:c3:9b:ad:d8:bd:
                    c4:4d:9f:10:4a:82:02:6b:49:76:02:e9:5a:71:e9:
                    a7:94:b3:a4:fb:87:d3:87:ca:86:23:1f:2d:51:41:
                    62:0e:a1:c1:07:73:a3:fa:5d:b6:45:95:b5:31:e0:
                    fa:f9:8d:f2:8b:5d:bc:6e:5e:ba:7c:0e:02:3c:65:
                    66:81:5e:f4:b9:7b:26:a8:f8:a8:9e:8a:1b:70:15:
                    5b:1c:20:ac:ca:54:c3:01:b5:cf:d0:6f:92:7d:ce:
                    93:05:57:4a:29:7c:49:b7:b5:af:73:25:b9:ad:18:
                    ba:5f:7d:ab:46:ce:19:42:40:1d:dc:e0:e1:81:38:
                    77:b1:ae:f4:38:37:ad:8a:aa:07:94:84:bb:fa:1b:
                    ad:e9:c1:26:e9:0c:49:d6:a1:f4:dc:5d:dc:b7:53:
                    42:c5:68:b0:b8:70:2e:df:74:e6:20:33:d2:e1:da:
                    85:5d:ad:30:66:98:b8:cb:71:dd:25:83:9a:98:ce:
                    f8:63:d9:5e:c5:b7:07:c6:0e:6b:d6:68:9e:d7:56:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DC:7A:9D:9E:1B:8A:0C:75:56:5C:AF:58:10:69:90:34:E3:3B:05
            X509v3 Authority Key Identifier:
                keyid:18:36:EF:AD:FB:51:11:0C:70:86:3E:84:1A:30:67:04:CF:99:11:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/2/1836EFADFB51110C70863E841A306704CF99117E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1836EFADFB51110C70863E841A306704CF99117E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/2/AS61592.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.216.0/22
                  45.232.188.0/22
                  45.234.100.0/22
                IPv6:
                  2804:4c34::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:4c:ff:bf:69:de:64:14:fa:49:25:bd:25:8b:70:92:21:3e:
         f3:2c:39:07:3a:80:da:f7:5d:d8:45:47:4f:29:30:17:de:d7:
         9d:f3:9b:3f:fb:c2:94:23:36:e4:88:c9:40:14:40:3c:41:00:
         a4:2a:f0:81:90:27:28:22:7d:83:3e:89:5e:8a:54:75:57:2e:
         83:6f:2b:e0:7c:2a:4d:6c:73:e5:d7:09:06:35:bf:dc:a7:38:
         1a:1c:b7:16:d5:7c:3e:1b:32:39:f0:cb:c3:e8:b7:45:32:a8:
         a7:91:e9:ef:3a:a3:bb:dc:3d:80:5b:8a:fe:72:bf:f1:5f:99:
         b9:9c:f4:5b:86:7c:0d:78:e6:44:c5:fe:14:e0:50:bf:c1:e3:
         fc:6d:ef:c2:cd:c4:85:3f:c4:ce:1a:45:5a:c8:00:43:92:75:
         77:2e:77:01:e4:98:41:02:35:2e:f0:18:50:d2:39:fd:0f:3b:
         d8:31:5c:b9:ed:4e:07:a6:ac:78:34:a3:e8:7e:cf:5d:d1:23:
         9e:f9:5b:c7:7b:01:59:de:ba:21:c5:5c:46:c7:d3:c9:14:55:
         21:9f:1a:87:77:4f:7b:fe:1e:7c:ab:47:b9:18:0d:c4:56:38:
         a1:49:86:a9:34:46:94:82:6a:88:8e:89:d3:bb:7f:b5:ba:64:
         43:79:9f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:03 2024 by rpki-client on console-ams.rpki-client.org