Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38302e302f32322d3232203d3e20323634353235.roa
File:                     34352e37312e38302e302f32322d3232203d3e20323634353235.roa (raw, json)
Hash identifier:          DlRSRymUDTIeZ2c1w92fDzmM2VF1q4dhnGNKLmDSJnk=
Subject key identifier:   78:19:0D:64:F0:D6:01:16:5D:91:F0:2C:29:A5:17:A3:5C:F3:11:B4
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       1C124974B78CCCA6DD435A1AEA05E55C897442DC
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38302e302f32322d3232203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 21:09:27 +0000
ROA not before:           Tue 30 Apr 2024 21:04:27 +0000
ROA not after:            Tue 29 Apr 2025 21:09:27 +0000
asID:                     264525
IP address blocks:        45.71.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:12:49:74:b7:8c:cc:a6:dd:43:5a:1a:ea:05:e5:5c:89:74:42:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 21:04:27 2024 GMT
            Not After : Apr 29 21:09:27 2025 GMT
        Subject: CN=78190D64F0D601165D91F02C29A517A35CF311B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5b:bf:2f:87:38:a2:e5:b8:6b:25:8e:36:4c:
                    59:b2:0e:a2:af:46:09:d4:bb:83:ef:dc:62:04:00:
                    f5:96:77:7b:f3:e7:d4:4a:52:f0:e4:7a:a7:97:cd:
                    cd:5d:94:ab:6f:9a:bf:f2:30:a0:9b:22:c0:40:2f:
                    ff:9f:4d:b4:f4:1f:fc:ee:f2:ca:4c:8c:f0:61:cd:
                    24:2d:97:7d:9b:43:10:53:01:71:40:e7:96:37:5a:
                    de:03:6e:d5:57:c9:77:91:37:68:50:77:8d:f9:e5:
                    72:f1:cb:ab:a1:96:61:aa:00:a1:ba:f6:67:1a:c6:
                    ea:82:9a:19:9e:25:97:21:59:2f:6d:ce:09:4c:a4:
                    5d:2e:a1:5d:ac:b0:38:51:9f:99:ee:66:12:b2:d6:
                    48:52:eb:c2:38:25:8e:05:56:89:dd:9f:03:33:8c:
                    bb:be:70:66:de:24:7e:92:a9:39:87:de:f3:8b:ad:
                    e7:e2:94:21:2b:5a:be:de:f3:2a:7d:80:0c:ef:2c:
                    9c:84:e3:8e:73:57:b5:f6:f3:be:72:e6:74:c8:06:
                    86:9f:20:76:12:e4:6c:e2:da:5e:dc:b8:09:42:5b:
                    f4:43:14:1c:7d:39:b7:96:0c:27:68:94:9f:ec:59:
                    78:89:4d:66:d9:92:b0:45:89:26:99:e4:aa:bc:0a:
                    16:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:19:0D:64:F0:D6:01:16:5D:91:F0:2C:29:A5:17:A3:5C:F3:11:B4
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38302e302f32322d3232203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:bb:cf:46:17:4d:8c:eb:46:65:9f:52:64:d4:df:bc:33:76:
         66:71:4f:68:f5:7c:dd:60:16:80:55:a7:1a:23:0f:05:78:f7:
         99:ae:3b:91:50:98:c8:81:fe:10:31:f5:67:d7:7c:35:17:eb:
         76:9d:51:86:c1:fd:91:76:e3:6d:34:47:34:62:a0:94:44:65:
         61:cf:2d:6d:98:21:73:ba:af:60:7d:9f:4a:99:25:f8:39:bd:
         e7:9a:8b:58:fd:3b:eb:0e:2e:cd:ff:c8:46:a6:58:2a:49:04:
         e4:6b:39:cb:7d:7c:cc:3f:92:f0:4a:5e:15:aa:f6:b9:81:0f:
         5c:9c:e5:13:38:53:85:50:bf:9b:8e:23:d1:de:21:5a:bd:b6:
         29:7d:f0:75:a7:7b:8f:d7:f2:94:23:b0:92:29:92:74:c9:6b:
         8e:fc:e4:df:79:b3:75:32:8a:21:51:d5:67:ef:5e:b7:5e:ce:
         3b:d5:25:33:5c:80:17:97:67:35:80:7e:b2:eb:8d:1a:3c:cb:
         c0:36:23:58:82:90:2d:46:e7:4a:ce:3b:30:19:a9:e6:74:60:
         e2:35:28:70:95:dc:61:2d:a4:d6:c4:20:b4:2c:15:72:f6:66:
         86:c6:27:af:de:b8:49:f4:ec:45:65:ee:ac:52:5e:cd:2f:21:
         51:9b:2f:21
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUHBJJdLeMzKbdQ1oa6gXlXIl0QtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjhFQUNCOUY3OEE1NjRBNTU5NDU0RTM1N0UxRTMx
MzQ0QjFDODAeFw0yNDA0MzAyMTA0MjdaFw0yNTA0MjkyMTA5MjdaMDMxMTAvBgNV
BAMTKDc4MTkwRDY0RjBENjAxMTY1RDkxRjAyQzI5QTUxN0EzNUNGMzExQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdW78vhzii5bhrJY42TFmyDqKv
RgnUu4Pv3GIEAPWWd3vz59RKUvDkeqeXzc1dlKtvmr/yMKCbIsBAL/+fTbT0H/zu
8spMjPBhzSQtl32bQxBTAXFA55Y3Wt4DbtVXyXeRN2hQd4355XLxy6uhlmGqAKG6
9mcaxuqCmhmeJZchWS9tzglMpF0uoV2ssDhRn5nuZhKy1khS68I4JY4FVondnwMz
jLu+cGbeJH6SqTmH3vOLrefilCErWr7e8yp9gAzvLJyE445zV7X2875y5nTIBoaf
IHYS5Gzi2l7cuAlCW/RDFBx9ObeWDCdolJ/sWXiJTWbZkrBFiSaZ5Kq8ChbHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUeBkNZPDWARZdkfAsKaUXo1zzEbQwHwYDVR0j
BBgwFoAUuduOrLn3ilZKVZRU41fh4xNEscgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRSd3lFUTVDbkZoZ1JCb0xDdG0xUFJUSlRFcTNDRTdKb0dMYUJoVTQ4
d2kvMC9COURCOEVBQ0I5Rjc4QTU2NEE1NTk0NTRFMzU3RTFFMzEzNDRCMUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REI4RUFDQjlGNzhBNTY0
QTU1OTQ1NEUzNTdFMUUzMTM0NEIxQzguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0Und5RVE1Q25GaGdSQm9MQ3RtMVBSVEpURXEzQ0U3Sm9HTGFCaFU0OHdpLzAv
MzQzNTJlMzczMTJlMzgzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNDM1
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi1HUDANBgkqhkiG9w0BAQsFAAOCAQEAJbvPRhdNjOtG
ZZ9SZNTfvDN2ZnFPaPV83WAWgFWnGiMPBXj3ma47kVCYyIH+EDH1Z9d8NRfrdp1R
hsH9kXbjbTRHNGKglERlYc8tbZghc7qvYH2fSpkl+Dm955qLWP076w4uzf/IRqZY
KkkE5Gs5y318zD+S8EpeFar2uYEPXJzlEzhThVC/m44j0d4hWr22KX3wdad7j9fy
lCOwkimSdMlrjvzk33mzdTKKIVHVZ+9et17OO9UlM1yAF5dnNYB+suuNGjzLwDYj
WIKQLUbnSs47MBmp5nRg4jUocJXcYS2k1sQgtCwVcvZmhsYnr964SfTsRWXurFJe
zS8hUZsvIQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:02 2024 by rpki-client on console-fra.rpki-client.org