Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231322e302f32332d3233203d3e203631363134.roa
File:                     34352e3233322e3231322e302f32332d3233203d3e203631363134.roa (raw, json)
Hash identifier:          AqMazrgEoqjeWQofvaN8jsz2pWfWOHyousqfXgxvf9U=
Subject key identifier:   6D:12:80:54:EF:1F:6B:DE:D3:D8:3B:03:E6:96:4D:26:12:F2:92:44
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       6B515261C4F19C0DC0F8008DA6801BB81DC2012C
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231322e302f32332d3233203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     61614
IP address blocks:        45.232.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:51:52:61:c4:f1:9c:0d:c0:f8:00:8d:a6:80:1b:b8:1d:c2:01:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:d1:33:ca:06:e5:00:ba:8a:d4:78:e0:6e:
                    63:a7:7a:1e:c8:77:74:bb:bf:41:8b:62:d3:54:dd:
                    2d:d5:bb:a1:44:6d:5e:8c:09:00:d8:a2:ec:36:ad:
                    03:cd:e1:13:b8:65:7a:fd:10:be:36:b8:68:ec:55:
                    42:c2:db:49:b4:a4:49:59:a3:d9:35:65:4e:fa:fd:
                    51:eb:75:e9:48:f7:da:5b:3c:f9:54:c0:7e:f9:34:
                    ef:ca:e9:5d:55:6d:41:87:c5:25:24:89:c4:11:36:
                    42:69:84:02:4b:b8:69:a3:9f:1c:ce:65:e0:b9:b1:
                    5c:e2:b2:75:2f:18:39:fc:fc:11:d7:a3:f8:3f:db:
                    b9:55:c6:2f:2c:22:cb:cd:b7:b6:1c:47:25:43:3b:
                    7c:f4:6f:72:57:15:77:9b:37:6b:e4:fc:4d:54:fd:
                    1d:8e:fe:b0:41:fa:aa:1d:4b:97:09:e2:ac:44:37:
                    4d:58:b4:ed:6a:84:6c:29:eb:17:32:99:42:37:78:
                    08:b6:77:9d:8d:28:9e:ac:fc:80:34:a1:3b:14:39:
                    07:54:7b:47:6a:e7:c4:cf:35:81:a3:75:33:25:51:
                    d7:cc:7c:e9:14:25:aa:00:19:c4:9d:40:d7:7b:fb:
                    4b:b2:27:f6:fa:1d:ad:51:b5:80:82:0a:f4:45:cb:
                    f9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:12:80:54:EF:1F:6B:DE:D3:D8:3B:03:E6:96:4D:26:12:F2:92:44
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231322e302f32332d3233203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:36:c2:aa:e3:8e:b3:3f:bb:21:36:c0:28:56:53:54:a1:4a:
         08:f4:dc:50:20:11:d2:e2:2f:7d:12:53:2e:a2:31:33:5f:8d:
         f7:da:05:5f:ea:2f:0a:a7:e2:3c:6c:5b:1d:fd:1c:d9:20:35:
         5c:0d:dd:fa:46:c0:28:bc:7c:33:2b:30:b6:3d:a5:9c:37:81:
         68:2a:6c:a1:c4:1e:69:45:87:d6:ba:bf:e3:0a:e1:bb:fb:e3:
         c7:33:da:f5:9f:86:8f:f0:4a:33:1a:ea:48:08:a6:4a:83:33:
         47:b7:6f:23:c0:43:06:f8:d8:7f:e4:9e:f3:cf:23:1d:e3:ce:
         58:f7:ad:c9:a0:77:55:2f:25:d4:16:7c:8d:3a:81:07:a5:0c:
         0e:d4:9e:e1:ab:eb:04:41:81:69:36:e5:f4:1f:03:76:f5:f1:
         20:26:ad:01:8b:9a:73:f4:55:ec:7e:78:31:90:c1:07:9e:0d:
         34:f8:0a:6d:a5:0a:3f:0f:de:55:f6:bb:52:d2:f3:26:cb:87:
         4b:30:4e:66:cc:ac:aa:ff:c7:70:b0:bd:78:55:83:66:91:84:
         90:0f:45:b9:c2:28:b4:5b:14:40:5e:db:ca:f1:fd:9c:e9:ee:
         70:d1:95:10:0c:fd:92:e9:dd:a9:66:97:60:16:12:23:01:95:
         89:b6:a5:cd
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUa1FSYcTxnA3A+ACNpoAbuB3CASwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlFMDExQjM4QjNBNjgxMEMxMERFMjg1RkQ4RDI1NkZB
QkNFREJBRjAeFw0yNDA0MDMxODI2MDdaFw0yNTA0MDIxODMxMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzE1RUQxMzNDQTA2RTUwMEJB
OEFENDc4RTA2RTYzQTc3QTFFQzg3Nzc0QkJCRjQxOEI2MkQzNTRERDJERDVCQkEx
NDQ2RDVFOEMwOTAwRDhBMkVDMzZBRDAzQ0RFMTEzQjg2NTdBRkQxMEJFMzZCODY4
RUM1NTQyQzJEQjQ5QjRBNDQ5NTlBM0Q5MzU2NTRFRkFGRDUxRUI3NUU5NDhGN0RB
NUIzQ0Y5NTRDMDdFRjkzNEVGQ0FFOTVENTU2RDQxODdDNTI1MjQ4OUM0MTEzNjQy
Njk4NDAyNEJCODY5QTM5RjFDQ0U2NUUwQjlCMTVDRTJCMjc1MkYxODM5RkNGQzEx
RDdBM0Y4M0ZEQkI5NTVDNjJGMkMyMkNCQ0RCN0I2MUM0NzI1NDMzQjdDRjQ2Rjcy
NTcxNTc3OUIzNzZCRTRGQzRENTRGRDFEOEVGRUIwNDFGQUFBMUQ0Qjk3MDlFMkFD
NDQzNzRENThCNEVENkE4NDZDMjlFQjE3MzI5OTQyMzc3ODA4QjY3NzlEOEQyODlF
QUNGQzgwMzRBMTNCMTQzOTA3NTQ3QjQ3NkFFN0M0Q0YzNTgxQTM3NTMzMjU1MUQ3
Q0M3Q0U5MTQyNUFBMDAxOUM0OUQ0MEQ3N0JGQjRCQjIyN0Y2RkExREFENTFCNTgw
ODIwQUY0NDVDQkY5OTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwV7RM8oG5QC6itR44G5jp3oeyHd0u79Bi2LTVN0t1buhRG1ejAkA
2KLsNq0DzeETuGV6/RC+Nrho7FVCwttJtKRJWaPZNWVO+v1R63XpSPfaWzz5VMB+
+TTvyuldVW1Bh8UlJInEETZCaYQCS7hpo58czmXgubFc4rJ1Lxg5/PwR16P4P9u5
VcYvLCLLzbe2HEclQzt89G9yVxV3mzdr5PxNVP0djv6wQfqqHUuXCeKsRDdNWLTt
aoRsKesXMplCN3gItnedjSierPyANKE7FDkHVHtHaufEzzWBo3UzJVHXzHzpFCWq
ABnEnUDXe/tLsif2+h2tUbWAggr0Rcv5kwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FG0SgFTvH2ve09g7A+aWTSYS8pJEMB8GA1UdIwQYMBaAFKngEbOLOmgQwQ3ihf2N
JW+rztuvMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJuaDlhZDJjNnZTamFQ
NWpUd1RIUXpDRXZLdm9XY3gxSnozaWtIU1NnYXlGLzEvQTlFMDExQjM4QjNBNjgx
MEMxMERFMjg1RkQ4RDI1NkZBQkNFREJBRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BOUUwMTFCMzhCM0E2ODEwQzEwREUyODVGRDhEMjU2RkFCQ0VE
QkFGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ybmg5YWQyYzZ2U2phUDVqVHdU
SFF6Q0V2S3ZvV2N4MUp6M2lrSFNTZ2F5Ri8xLzM0MzUyZTMyMzMzMjJlMzIzMTMy
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMTM2MzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3o
1DANBgkqhkiG9w0BAQsFAAOCAQEAmjbCquOOsz+7ITbAKFZTVKFKCPTcUCAR0uIv
fRJTLqIxM1+N99oFX+ovCqfiPGxbHf0c2SA1XA3d+kbAKLx8Myswtj2lnDeBaCps
ocQeaUWH1rq/4wrhu/vjxzPa9Z+Gj/BKMxrqSAimSoMzR7dvI8BDBvjYf+Se888j
HePOWPetyaB3VS8l1BZ8jTqBB6UMDtSe4avrBEGBaTbl9B8DdvXxICatAYuac/RV
7H54MZDBB54NNPgKbaUKPw/eVfa7UtLzJsuHSzBOZsysqv/HcLC9eFWDZpGEkA9F
ucIotFsUQF7byvH9nOnucNGVEAz9kundqWaXYBYSIwGVibalzQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:38 2024 by rpki-client on console-fra.rpki-client.org