Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233362e302f32332d3233203d3e20323637363735.roa
File:                     34352e3232342e3233362e302f32332d3233203d3e20323637363735.roa (raw, json)
Hash identifier:          2rUl/X6afBWSVatPZLktBuS8CgfhryRsoJU8wjkuVSs=
Subject key identifier:   01:4F:FC:5A:EA:D5:CC:44:4A:61:D3:90:4C:3E:96:1C:77:AB:A0:36
Certificate issuer:       /CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
Certificate serial:       1561249B1C7359605D31CE3F26BA32DBA6E5650F
Authority key identifier: F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233362e302f32332d3233203d3e20323637363735.roa
Signing time:             Thu 04 Apr 2024 18:16:24 +0000
ROA not before:           Thu 04 Apr 2024 18:11:24 +0000
ROA not after:            Thu 03 Apr 2025 18:16:24 +0000
asID:                     267675
IP address blocks:        45.224.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.crl
                          rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:61:24:9b:1c:73:59:60:5d:31:ce:3f:26:ba:32:db:a6:e5:65:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
        Validity
            Not Before: Apr  4 18:11:24 2024 GMT
            Not After : Apr  3 18:16:24 2025 GMT
        Subject: CN=014FFC5AEAD5CC444A61D3904C3E961C77ABA036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:d2:dd:86:5b:5f:5b:40:7e:d9:bd:87:1a:
                    12:26:77:95:0f:3c:41:33:38:e3:3f:12:ba:ec:ec:
                    00:72:76:e7:55:b3:a1:3c:92:b0:b4:17:1b:43:7f:
                    ce:9f:df:29:4a:bf:69:b5:76:7b:cc:52:19:20:96:
                    d0:d5:8b:ff:c4:1b:d2:81:d0:0c:38:e1:6d:0d:f2:
                    11:22:b6:13:88:b2:c2:86:c3:81:df:6e:5f:00:bf:
                    07:26:5a:a3:8d:58:27:75:66:69:af:7b:86:5d:4b:
                    31:93:34:27:44:f7:c2:82:73:1f:da:f3:ac:79:9b:
                    15:07:e7:68:42:ca:c8:f7:e0:7e:22:6b:4c:8d:86:
                    4a:06:a5:86:c4:01:12:83:24:6a:fb:b1:03:39:f5:
                    78:76:1a:e5:12:4d:a1:46:76:f0:5d:ae:3a:2c:06:
                    56:b5:d6:83:f1:b8:cc:8c:8d:7b:31:a2:79:af:1c:
                    9e:33:68:52:f9:78:a6:36:97:80:c1:cb:7c:4a:0a:
                    f8:71:42:e6:24:41:15:75:e9:f7:66:41:cd:10:3c:
                    1c:5f:50:3b:bb:bd:05:bf:dd:b4:cc:80:53:f0:a7:
                    d1:a3:bc:6a:a9:8d:3a:99:a1:50:49:4a:52:a6:1b:
                    a4:e6:b5:a1:f7:c7:4b:78:6f:a6:e0:db:57:82:9e:
                    81:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4F:FC:5A:EA:D5:CC:44:4A:61:D3:90:4C:3E:96:1C:77:AB:A0:36
            X509v3 Authority Key Identifier:
                keyid:F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233362e302f32332d3233203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:a6:b0:76:e4:a7:a4:7f:83:d6:c7:1e:d8:c4:db:2c:a3:21:
         b9:5c:be:e1:83:d8:10:a0:0b:2c:f6:13:b8:cc:5f:67:98:82:
         dc:2f:5f:e3:7b:88:d9:0e:86:9c:09:50:52:b8:0f:74:17:e8:
         4d:1c:20:03:f2:fa:b6:5c:cd:d4:af:da:c4:12:d4:1a:5e:d3:
         bf:59:cc:21:ac:72:e6:f8:de:ad:e2:97:4d:b0:23:6c:cc:44:
         ba:df:79:12:86:1b:7d:2b:9d:ff:7b:b5:29:b8:7c:65:5a:62:
         cf:56:f6:da:7b:08:42:48:de:ad:33:e7:85:cb:b0:12:94:90:
         94:5b:55:b1:eb:6c:71:2e:d4:98:68:e1:52:f8:1e:24:9c:8c:
         21:61:66:de:2f:18:b2:cd:75:b9:4b:9c:98:ad:7f:5f:f6:63:
         92:ad:53:5d:df:b2:7a:0d:e5:38:79:e6:c3:45:d0:85:b0:e0:
         b8:6c:3e:c4:a2:29:97:5e:8a:55:e8:d2:84:ac:a3:c8:a9:29:
         dc:0a:e5:2c:d1:01:6b:db:06:01:9c:42:4e:fc:76:00:b2:3d:
         25:b9:cb:78:f3:d8:28:a6:80:09:73:ce:d2:5a:18:d7:b6:b4:
         be:1f:bf:ec:d4:8f:60:6f:be:2f:ed:95:49:07:62:47:b9:d2:
         8f:cd:04:6b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFWEkmxxzWWBdMc4/Jroy26blZQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY3NDE5ODlFODM5QjY3QjU3QzhBNTlBRjlCMDc5N0VB
OURFREZCNzAeFw0yNDA0MDQxODExMjRaFw0yNTA0MDMxODE2MjRaMDMxMTAvBgNV
BAMTKDAxNEZGQzVBRUFENUNDNDQ0QTYxRDM5MDRDM0U5NjFDNzdBQkEwMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGCdLdhltfW0B+2b2HGhImd5UP
PEEzOOM/Errs7ABydudVs6E8krC0FxtDf86f3ylKv2m1dnvMUhkgltDVi//EG9KB
0Aw44W0N8hEithOIssKGw4Hfbl8AvwcmWqONWCd1Zmmve4ZdSzGTNCdE98KCcx/a
86x5mxUH52hCysj34H4ia0yNhkoGpYbEARKDJGr7sQM59Xh2GuUSTaFGdvBdrjos
Bla11oPxuMyMjXsxonmvHJ4zaFL5eKY2l4DBy3xKCvhxQuYkQRV16fdmQc0QPBxf
UDu7vQW/3bTMgFPwp9GjvGqpjTqZoVBJSlKmG6TmtaH3x0t4b6bg21eCnoEjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAU/8WurVzERKYdOQTD6WHHeroDYwHwYDVR0j
BBgwFoAU9nQZieg5tntXyKWa+bB5fqne37cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFpaTmMxa1gxaUZNMjFraUQ4NmR3bjRGU3gxZFdFNFB5MW1US2VOM1Q0
Y2EvMS9GNjc0MTk4OUU4MzlCNjdCNTdDOEE1OUFGOUIwNzk3RUE5REVERkI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2NzQxOTg5RTgzOUI2N0I1
N0M4QTU5QUY5QjA3OTdFQTlERURGQjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaWk5jMWtYMWlGTTIxa2lEODZkd240RlN4MWRXRTRQeTFtVEtlTjNUNGNhLzEv
MzQzNTJlMzIzMjM0MmUzMjMzMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczNjM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt4OwwDQYJKoZIhvcNAQELBQADggEBAIGmsHbk
p6R/g9bHHtjE2yyjIblcvuGD2BCgCyz2E7jMX2eYgtwvX+N7iNkOhpwJUFK4D3QX
6E0cIAPy+rZczdSv2sQS1Bpe079ZzCGscub43q3il02wI2zMRLrfeRKGG30rnf97
tSm4fGVaYs9W9tp7CEJI3q0z54XLsBKUkJRbVbHrbHEu1Jho4VL4HiScjCFhZt4v
GLLNdblLnJitf1/2Y5KtU13fsnoN5Th55sNF0IWw4LhsPsSiKZdeilXo0oSso8ip
KdwK5SzRAWvbBgGcQk78dgCyPSW5y3jz2CimgAlzztJaGNe2tL4fv+zUj2Bvvi/t
lUkHYke50o/NBGs=
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:45 2024 by rpki-client on console-ams.rpki-client.org