Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37342e302f32342d3332203d3e203631353931.roa
File:                     34352e3233372e37342e302f32342d3332203d3e203631353931.roa (raw, json)
Hash identifier:          hjbqSotqZ2de73UlLbOpM+FJlBTSRsG9dmUrFizHlgU=
Subject key identifier:   57:76:2D:2F:C8:21:73:B4:C5:79:24:AC:3A:C9:A2:1A:98:7C:FB:D6
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       0708905511AB8234372AB3046A292F9AD9E1C268
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37342e302f32342d3332203d3e203631353931.roa
Signing time:             Mon 12 Aug 2024 20:46:20 +0000
ROA not before:           Mon 12 Aug 2024 20:41:20 +0000
ROA not after:            Mon 11 Aug 2025 20:46:20 +0000
asID:                     61591
IP address blocks:        45.237.74.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:08:90:55:11:ab:82:34:37:2a:b3:04:6a:29:2f:9a:d9:e1:c2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Aug 12 20:41:20 2024 GMT
            Not After : Aug 11 20:46:20 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:be:19:ad:ac:49:5a:9d:78:66:21:4a:cc:b3:
                    5f:ea:8d:23:4c:de:8b:cf:fc:aa:91:ac:c0:dc:59:
                    21:4e:5c:46:20:3c:99:41:09:f0:12:e6:e5:e8:4e:
                    e6:20:40:19:97:2a:8d:d1:83:c1:7a:b3:59:26:86:
                    89:00:15:45:71:bd:ef:19:f2:88:2e:9f:4c:fc:51:
                    be:db:de:b1:5c:92:93:c6:4f:7d:b8:e6:53:4f:69:
                    4a:89:04:fb:15:b3:7a:e0:f8:c4:f4:75:a8:c4:a6:
                    9e:d8:1a:bb:63:5e:f9:27:2c:29:a4:a2:61:95:51:
                    18:08:96:9a:5a:55:c9:3c:3e:8e:62:4b:5c:74:bc:
                    ad:bf:65:ad:e3:4c:bd:9a:38:52:95:fd:42:ae:9e:
                    96:9f:e4:d1:ca:2f:a9:04:81:df:16:97:1c:2a:f7:
                    20:10:ac:95:bd:68:7a:54:41:cb:25:81:05:86:13:
                    fd:b0:ad:7f:ef:c1:38:a4:91:8b:2b:7b:4d:43:bd:
                    5d:a1:88:78:5b:18:4c:83:e7:57:7c:b4:bb:35:88:
                    08:df:83:b0:f2:7c:94:c9:68:ed:a0:1b:46:18:bd:
                    cb:e4:24:d6:f0:9d:a8:90:a1:c0:6a:f9:01:50:d2:
                    56:82:56:dc:3c:f8:b5:f2:86:5b:09:f6:08:7f:26:
                    01:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:76:2D:2F:C8:21:73:B4:C5:79:24:AC:3A:C9:A2:1A:98:7C:FB:D6
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37342e302f32342d3332203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:1e:04:1d:47:c4:35:8d:e8:b0:01:71:88:a8:c1:2d:36:4a:
         ab:1d:9c:3e:9c:cc:9e:87:3e:ee:56:d9:db:7c:77:14:07:22:
         da:fa:43:1a:eb:9d:a3:aa:9e:dd:ab:b7:1f:b4:2e:bd:6f:aa:
         61:82:51:99:5d:69:dc:e5:7a:8d:67:fa:cd:dd:4f:60:24:27:
         c9:23:38:8c:e6:bc:89:47:ef:42:05:52:41:2a:a7:25:ca:65:
         43:59:bf:fb:de:e6:94:84:4b:d9:3e:03:67:45:bf:16:d7:5d:
         94:19:b0:a2:9b:c7:52:a5:c7:51:52:48:54:26:20:ca:f4:e9:
         39:f4:da:6a:7e:42:7e:62:ea:11:b3:43:89:e9:9e:59:7f:39:
         00:bd:dc:bd:f8:9c:bb:a1:df:f9:d9:a9:94:56:82:78:3b:82:
         6a:c2:92:8c:70:51:a8:15:0d:76:bc:f2:61:84:7e:23:66:66:
         05:ad:0a:78:08:db:9f:3b:44:c5:50:63:00:34:78:f8:94:24:
         2d:fa:60:a4:27:19:bd:10:9e:e8:5f:42:d0:8c:b4:37:ac:14:
         41:cd:da:0a:97:11:a8:89:66:cb:64:fa:e8:6d:79:8e:33:fb:
         bd:44:27:f6:b4:de:1b:4e:fb:9a:a3:b0:c3:b2:81:d0:58:9d:
         d5:72:27:0f
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUBwiQVRGrgjQ3KrMEaikvmtnhwmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ0OTBGRDU5MTkzMjc3NkYyRjVGNkNGQjNDNTQzMTU1
MEEwNEY2MjAeFw0yNDA4MTIyMDQxMjBaFw0yNTA4MTEyMDQ2MjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREFCRTE5QURBQzQ5NUE5RDc4
NjYyMTRBQ0NCMzVGRUE4RDIzNENERThCQ0ZGQ0FBOTFBQ0MwREM1OTIxNEU1QzQ2
MjAzQzk5NDEwOUYwMTJFNkU1RTg0RUU2MjA0MDE5OTcyQThERDE4M0MxN0FCMzU5
MjY4Njg5MDAxNTQ1NzFCREVGMTlGMjg4MkU5RjRDRkM1MUJFREJERUIxNUM5Mjkz
QzY0RjdEQjhFNjUzNEY2OTRBODkwNEZCMTVCMzdBRTBGOEM0RjQ3NUE4QzRBNjlF
RDgxQUJCNjM1RUY5MjcyQzI5QTRBMjYxOTU1MTE4MDg5NjlBNUE1NUM5M0MzRThF
NjI0QjVDNzRCQ0FEQkY2NUFERTM0Q0JEOUEzODUyOTVGRDQyQUU5RTk2OUZFNEQx
Q0EyRkE5MDQ4MURGMTY5NzFDMkFGNzIwMTBBQzk1QkQ2ODdBNTQ0MUNCMjU4MTA1
ODYxM0ZEQjBBRDdGRUZDMTM4QTQ5MThCMkI3QjRENDNCRDVEQTE4ODc4NUIxODRD
ODNFNzU3N0NCNEJCMzU4ODA4REY4M0IwRjI3Qzk0Qzk2OEVEQTAxQjQ2MThCRENC
RTQyNEQ2RjA5REE4OTBBMUMwNkFGOTAxNTBEMjU2ODI1NkRDM0NGOEI1RjI4NjVC
MDlGNjA4N0YyNjAxOUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2r4ZraxJWp14ZiFKzLNf6o0jTN6Lz/yqkazA3FkhTlxGIDyZQQnw
Eubl6E7mIEAZlyqN0YPBerNZJoaJABVFcb3vGfKILp9M/FG+296xXJKTxk99uOZT
T2lKiQT7FbN64PjE9HWoxKae2Bq7Y175JywppKJhlVEYCJaaWlXJPD6OYktcdLyt
v2Wt40y9mjhSlf1Crp6Wn+TRyi+pBIHfFpccKvcgEKyVvWh6VEHLJYEFhhP9sK1/
78E4pJGLK3tNQ71doYh4WxhMg+dXfLS7NYgI34Ow8nyUyWjtoBtGGL3L5CTW8J2o
kKHAavkBUNJWglbcPPi18oZbCfYIfyYBnwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FFd2LS/IIXO0xXkkrDrJohqYfPvWMB8GA1UdIwQYMBaAFBRJD9WRkyd28vX2z7PF
QxVQoE9iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNFTlBEMkhld1E3NjRx
dFpOV3ZaNnRXeTd1TkJTelJrTlRNSmRqMThSYVBkLzEvMTQ0OTBGRDU5MTkzMjc3
NkYyRjVGNkNGQjNDNTQzMTU1MEEwNEY2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDQ5MEZENTkxOTMyNzc2RjJGNUY2Q0ZCM0M1NDMxNTUwQTA0
RjYyLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRU5QRDJIZXdRNzY0cXRaTld2
WjZ0V3k3dU5CU3pSa05UTUpkajE4UmFQZC8xLzM0MzUyZTMyMzMzNzJlMzczNDJl
MzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM2MzEzNTM5MzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt7Uow
DQYJKoZIhvcNAQELBQADggEBAGAeBB1HxDWN6LABcYiowS02SqsdnD6czJ6HPu5W
2dt8dxQHItr6QxrrnaOqnt2rtx+0Lr1vqmGCUZldadzleo1n+s3dT2AkJ8kjOIzm
vIlH70IFUkEqpyXKZUNZv/ve5pSES9k+A2dFvxbXXZQZsKKbx1Klx1FSSFQmIMr0
6Tn02mp+Qn5i6hGzQ4npnll/OQC93L34nLuh3/nZqZRWgng7gmrCkoxwUagVDXa8
8mGEfiNmZgWtCngI2587RMVQYwA0ePiUJC36YKQnGb0QnuhfQtCMtDesFEHN2gqX
EaiJZstk+uhteY4z+71EJ/a03htO+5qjsMOygdBYndVyJw8=
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:31 2024 by rpki-client on console-ams.rpki-client.org