Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa
File:                     34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa (raw, json)
Hash identifier:          ekqpN325Er5rgfUQrpnvNSOxW5/EO9gNUijdhzNi768=
Subject key identifier:   AD:51:39:92:74:6B:83:20:1A:5F:EC:0D:64:D9:10:4C:4C:E1:25:EB
Certificate issuer:       /CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Certificate serial:       590A184CE92FE80C5B26E7E6421C148FCB4C3293
Authority key identifier: 0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa
Signing time:             Wed 03 Apr 2024 18:30:10 +0000
ROA not before:           Wed 03 Apr 2024 18:25:10 +0000
ROA not after:            Wed 02 Apr 2025 18:30:10 +0000
asID:                     268092
IP address blocks:        45.168.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl
                          rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0a:18:4c:e9:2f:e8:0c:5b:26:e7:e6:42:1c:14:8f:cb:4c:32:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
        Validity
            Not Before: Apr  3 18:25:10 2024 GMT
            Not After : Apr  2 18:30:10 2025 GMT
        Subject: CN=AD513992746B83201A5FEC0D64D9104C4CE125EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3f:a5:b1:45:b3:29:55:3f:78:8b:db:34:21:
                    63:fe:9a:cb:d3:3b:37:6e:ec:27:d5:58:4b:6d:24:
                    d0:6c:0b:7c:5e:53:1d:2d:c7:c1:f5:eb:e9:c4:7d:
                    67:24:52:49:85:67:1f:53:61:4b:cf:d9:34:c1:e4:
                    13:20:b3:7e:84:c3:5a:49:94:7b:c2:51:cd:5e:ef:
                    8f:56:e8:d9:20:85:ba:f0:94:96:86:4d:a4:1e:87:
                    6b:d6:71:4f:19:84:15:2c:f1:c1:b6:aa:70:a1:12:
                    2b:4f:2c:2a:cc:de:34:d1:ec:18:6c:d3:a2:2b:15:
                    a4:5a:eb:67:e3:f8:53:3f:87:1d:1a:3a:8e:15:d5:
                    75:ee:26:35:7c:d4:1b:50:bb:d7:85:6a:2b:67:22:
                    42:42:bd:73:b7:8b:dd:65:e9:6b:fe:93:56:a8:b7:
                    02:54:a5:52:ec:b1:2f:47:a6:92:55:32:88:16:fd:
                    da:2b:3a:35:31:aa:ea:d2:da:4c:e1:0d:c0:fe:ab:
                    80:2b:b8:17:b7:1d:34:09:5c:41:87:91:67:e4:b2:
                    77:4e:11:2b:d3:86:e7:cd:88:ee:0b:f9:c0:af:54:
                    2e:23:e3:4a:4d:6c:22:79:be:77:a6:36:36:c8:ab:
                    ab:21:83:ff:a7:44:32:e3:9d:c9:ba:09:2d:dd:dd:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:51:39:92:74:6B:83:20:1A:5F:EC:0D:64:D9:10:4C:4C:E1:25:EB
            X509v3 Authority Key Identifier:
                keyid:0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:21:cb:9a:87:3b:6d:5b:6b:5a:9b:ba:3f:60:28:ed:ee:7e:
         5c:95:64:0d:af:e3:b5:a2:1b:ef:ae:ca:7f:11:f0:64:4e:6e:
         14:53:db:5b:c7:90:68:51:7a:c9:81:63:42:72:83:2e:aa:74:
         9e:e6:ab:37:e7:70:96:ac:dc:aa:ad:98:ff:f6:9e:e9:81:40:
         d7:99:92:a1:66:f6:11:30:98:d4:b9:c3:31:99:35:a0:2b:e6:
         50:e2:c7:eb:d8:86:be:87:ce:da:b7:a6:fd:ff:f9:62:29:01:
         5c:a2:65:3c:03:38:1d:c1:d0:ff:99:93:de:fb:4e:de:96:0f:
         a7:28:f9:e8:1d:ce:e9:cd:b5:8c:3d:99:69:ec:28:6a:99:79:
         db:06:ee:ae:47:9b:c1:20:b2:70:2a:cf:ca:fe:c8:fd:58:c5:
         92:3c:a3:b3:4d:0a:88:bc:ff:e4:75:45:60:04:ab:50:5e:11:
         5c:82:28:6d:a8:f8:75:bb:87:ba:4d:da:d3:88:71:a4:df:30:
         f1:73:9a:a7:b6:10:07:86:51:c7:51:8f:ba:4d:30:7b:c6:87:
         c2:28:48:71:7d:0d:be:e2:7c:56:75:e4:26:16:44:66:03:84:
         48:b1:ad:1c:53:35:6d:b4:32:08:ee:66:48:84:e6:0d:90:55:
         6c:94:d7:f4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWQoYTOkv6AxbJufmQhwUj8tMMpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMzNzNEOEY3NjhCMTA1REEwMjQwQzZBRUE0MENEMUFE
NzYyRUJBNDAeFw0yNDA0MDMxODI1MTBaFw0yNTA0MDIxODMwMTBaMDMxMTAvBgNV
BAMTKEFENTEzOTkyNzQ2QjgzMjAxQTVGRUMwRDY0RDkxMDRDNENFMTI1RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXP6WxRbMpVT94i9s0IWP+msvT
Ozdu7CfVWEttJNBsC3xeUx0tx8H16+nEfWckUkmFZx9TYUvP2TTB5BMgs36Ew1pJ
lHvCUc1e749W6NkghbrwlJaGTaQeh2vWcU8ZhBUs8cG2qnChEitPLCrM3jTR7Bhs
06IrFaRa62fj+FM/hx0aOo4V1XXuJjV81BtQu9eFaitnIkJCvXO3i91l6Wv+k1ao
twJUpVLssS9HppJVMogW/dorOjUxqurS2kzhDcD+q4AruBe3HTQJXEGHkWfksndO
ESvThufNiO4L+cCvVC4j40pNbCJ5vnemNjbIq6shg/+nRDLjncm6CS3d3Zx9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrVE5knRrgyAaX+wNZNkQTEzhJeswHwYDVR0j
BBgwFoAUDDc9j3aLEF2gJAxq6kDNGtdi66QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NuYUp3ZmpHWVk1VWVObmdkV012ajRxaFpjdGVSVG1qb0xaU1pnaU43
TEsvMS8wQzM3M0Q4Rjc2OEIxMDVEQTAyNDBDNkFFQTQwQ0QxQUQ3NjJFQkE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDMzczRDhGNzY4QjEwNURB
MDI0MEM2QUVBNDBDRDFBRDc2MkVCQTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNTbmFKd2ZqR1lZNVVlTm5nZFdNdmo0cWhaY3RlUlRtam9MWlNaZ2lON0xLLzEv
MzQzNTJlMzEzNjM4MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqNwwDQYJKoZIhvcNAQELBQADggEBAEMhy5qH
O21ba1qbuj9gKO3uflyVZA2v47WiG++uyn8R8GRObhRT21vHkGhResmBY0Jygy6q
dJ7mqzfncJas3KqtmP/2numBQNeZkqFm9hEwmNS5wzGZNaAr5lDix+vYhr6Hztq3
pv3/+WIpAVyiZTwDOB3B0P+Zk977Tt6WD6co+egdzunNtYw9mWnsKGqZedsG7q5H
m8EgsnAqz8r+yP1YxZI8o7NNCoi8/+R1RWAEq1BeEVyCKG2o+HW7h7pN2tOIcaTf
MPFzmqe2EAeGUcdRj7pNMHvGh8IoSHF9Db7ifFZ15CYWRGYDhEixrRxTNW20Mgju
ZkiE5g2QVWyU1/Q=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:07 2024 by rpki-client on console-fra.rpki-client.org