Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/34352e3233322e32342e302f32322d3234203d3e20323637333031.roa
File:                     34352e3233322e32342e302f32322d3234203d3e20323637333031.roa (raw, json)
Hash identifier:          S5I5dGWtw/XptPBrvWCz6D5juozuvXncnntSeiD8lGA=
Subject key identifier:   11:EE:64:2A:E2:A3:42:2C:D3:D0:93:CA:20:32:BD:1E:77:61:CE:54
Certificate issuer:       /CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
Certificate serial:       08034C74FAEF16CC42918CE369057192C6769DF3
Authority key identifier: CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/34352e3233322e32342e302f32322d3234203d3e20323637333031.roa
Signing time:             Thu 04 Apr 2024 03:55:51 +0000
ROA not before:           Thu 04 Apr 2024 03:50:51 +0000
ROA not after:            Thu 03 Apr 2025 03:55:51 +0000
asID:                     267301
IP address blocks:        45.232.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl
                          rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:03:4c:74:fa:ef:16:cc:42:91:8c:e3:69:05:71:92:c6:76:9d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
        Validity
            Not Before: Apr  4 03:50:51 2024 GMT
            Not After : Apr  3 03:55:51 2025 GMT
        Subject: CN=11EE642AE2A3422CD3D093CA2032BD1E7761CE54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:21:b8:01:61:c3:44:a8:15:5d:ba:21:dd:49:
                    b0:02:20:50:f0:d9:e3:48:85:c5:33:49:f0:8d:44:
                    9f:b5:10:dd:ad:ba:7a:da:aa:07:be:87:f7:cc:d9:
                    5e:1e:13:23:86:48:55:3b:cd:98:5a:84:86:06:84:
                    f5:74:e3:ec:12:d1:26:2c:88:4b:c1:0e:ae:fd:c8:
                    32:52:a4:24:0d:aa:32:28:f6:e0:92:91:e4:c6:a0:
                    1d:a7:06:7f:f8:d5:b6:08:5b:45:67:3f:5c:53:ab:
                    b7:22:e4:a1:17:26:46:d0:aa:13:74:8f:be:63:d3:
                    af:11:4e:a0:d9:96:72:92:3b:40:89:46:0e:46:4c:
                    8c:92:d9:3e:32:2f:f3:44:ed:8c:34:60:72:d0:a6:
                    b6:07:11:ff:4a:4a:28:9f:7e:89:f6:af:f8:df:08:
                    90:d9:fa:0d:1a:37:37:4a:e6:34:bc:b7:bc:1a:db:
                    0b:a7:19:dc:3e:04:28:19:51:49:97:65:7f:78:b4:
                    e0:84:72:b8:bb:b7:95:f9:55:ac:2c:16:72:f5:de:
                    71:9a:3a:d6:2a:64:14:59:71:48:11:fa:e4:13:a1:
                    35:74:95:05:df:47:12:41:6d:57:ff:5f:35:19:b5:
                    80:cb:1d:27:3b:00:3d:05:37:d4:eb:25:56:42:35:
                    3b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EE:64:2A:E2:A3:42:2C:D3:D0:93:CA:20:32:BD:1E:77:61:CE:54
            X509v3 Authority Key Identifier:
                keyid:CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/34352e3233322e32342e302f32322d3234203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:f0:f4:23:46:a0:bd:b7:39:3d:2a:0c:c8:d3:ce:50:b7:b1:
         05:5a:6a:72:cf:96:dc:5a:bd:d9:dd:bf:00:2c:b6:b4:74:79:
         b5:14:7d:27:81:cd:de:e9:8a:a9:13:e1:19:a6:4e:45:a8:26:
         39:46:31:f5:7b:b8:c0:da:d7:3f:64:53:be:0b:88:08:34:51:
         5d:f8:56:e4:0d:b7:ff:a8:a6:29:74:24:85:4e:74:58:15:7e:
         60:58:c0:c8:0f:0d:0c:fc:0f:b4:46:3e:28:32:3c:9f:41:cc:
         70:6a:0b:b7:f6:ce:e7:0b:fa:18:20:6a:13:3c:36:67:87:de:
         e8:1f:13:ad:12:a3:44:8a:6e:d6:27:dc:7c:90:69:c5:10:ec:
         83:82:45:14:27:cd:fc:95:e2:65:ec:b1:bf:1d:0f:c1:35:35:
         b1:88:be:77:98:f5:de:9d:76:b3:20:31:9e:80:d7:07:ff:13:
         6c:60:a2:28:06:b2:d4:3d:b3:84:79:57:23:c2:27:ff:63:6d:
         63:e9:1e:01:ea:e7:4a:cb:f0:c5:6a:a9:41:14:2c:20:4e:c6:
         2f:fc:7e:d8:d3:c4:dc:cd:6d:80:18:93:64:52:cd:04:ec:b0:
         e9:5b:6b:81:e9:f1:69:41:84:73:91:f8:62:a8:15:3f:f2:5f:
         f5:df:d7:bf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCANMdPrvFsxCkYzjaQVxksZ2nfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M0RUY1MkEzRDY3RUEyNzUwRjM0MzlCNjI0NTI2MDZD
MTdDNDFBMTAeFw0yNDA0MDQwMzUwNTFaFw0yNTA0MDMwMzU1NTFaMDMxMTAvBgNV
BAMTKDExRUU2NDJBRTJBMzQyMkNEM0QwOTNDQTIwMzJCRDFFNzc2MUNFNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjIbgBYcNEqBVduiHdSbACIFDw
2eNIhcUzSfCNRJ+1EN2tunraqge+h/fM2V4eEyOGSFU7zZhahIYGhPV04+wS0SYs
iEvBDq79yDJSpCQNqjIo9uCSkeTGoB2nBn/41bYIW0VnP1xTq7ci5KEXJkbQqhN0
j75j068RTqDZlnKSO0CJRg5GTIyS2T4yL/NE7Yw0YHLQprYHEf9KSiiffon2r/jf
CJDZ+g0aNzdK5jS8t7wa2wunGdw+BCgZUUmXZX94tOCEcri7t5X5VawsFnL13nGa
OtYqZBRZcUgR+uQToTV0lQXfRxJBbVf/XzUZtYDLHSc7AD0FN9TrJVZCNTsZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEe5kKuKjQizT0JPKIDK9HndhzlQwHwYDVR0j
BBgwFoAUzE71Kj1n6idQ80ObYkUmBsF8QaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRhZnFGWDl6RDljRHV5dHRETFNydjUyTXZTeXBEUU44eEpMVHdoSlRV
cm8vMS9DQzRFRjUyQTNENjdFQTI3NTBGMzQzOUI2MjQ1MjYwNkMxN0M0MUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDNEVGNTJBM0Q2N0VBMjc1
MEYzNDM5QjYyNDUyNjA2QzE3QzQxQTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkYWZxRlg5ekQ5Y0R1eXR0RExTcnY1Mk12U3lwRFFOOHhKTFR3aEpUVXJvLzEv
MzQzNTJlMzIzMzMyMmUzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzMzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLegYMA0GCSqGSIb3DQEBCwUAA4IBAQBx8PQjRqC9
tzk9KgzI085Qt7EFWmpyz5bcWr3Z3b8ALLa0dHm1FH0ngc3e6YqpE+EZpk5FqCY5
RjH1e7jA2tc/ZFO+C4gINFFd+FbkDbf/qKYpdCSFTnRYFX5gWMDIDw0M/A+0Rj4o
MjyfQcxwagu39s7nC/oYIGoTPDZnh97oHxOtEqNEim7WJ9x8kGnFEOyDgkUUJ838
leJl7LG/HQ/BNTWxiL53mPXenXazIDGegNcH/xNsYKIoBrLUPbOEeVcjwif/Y21j
6R4B6udKy/DFaqlBFCwgTsYv/H7Y08TczW2AGJNkUs0E7LDpW2uB6fFpQYRzkfhi
qBU/8l/139e/
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:50 2024 by rpki-client on console-fra.rpki-client.org