Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa
File:                     3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa (raw, json)
Hash identifier:          ohu/HzgKjanVIcofoFvOywmN9yyiixt8yScZPQCRLBA=
Subject key identifier:   45:37:9A:D5:DF:63:82:24:91:21:AA:A7:A8:5C:F0:83:FF:A9:DB:0C
Certificate issuer:       /CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
Certificate serial:       38E8E2D833280956EB8113899FD96F607AD925
Authority key identifier: C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa
Signing time:             Thu 04 Apr 2024 08:18:43 +0000
ROA not before:           Thu 04 Apr 2024 08:13:43 +0000
ROA not after:            Thu 03 Apr 2025 08:18:43 +0000
asID:                     61834
IP address blocks:        143.137.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl
                          rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e8:e2:d8:33:28:09:56:eb:81:13:89:9f:d9:6f:60:7a:d9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
        Validity
            Not Before: Apr  4 08:13:43 2024 GMT
            Not After : Apr  3 08:18:43 2025 GMT
        Subject: CN=45379AD5DF6382249121AAA7A85CF083FFA9DB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:ed:d0:e6:9c:1a:cb:33:65:89:fc:1d:c2:
                    9d:d3:81:f3:5e:2f:e9:46:9a:b9:04:08:14:7b:0d:
                    c2:07:ef:13:5d:b4:07:10:d3:39:b9:96:fb:3e:57:
                    52:df:00:75:0b:fd:e9:cd:5d:e4:42:7d:e3:f9:06:
                    25:7f:1e:1d:2a:34:5b:23:12:de:b3:38:f4:73:e0:
                    86:78:b2:e2:c7:50:3c:77:89:ad:03:9b:8f:f2:95:
                    8a:62:ce:64:45:12:56:fa:90:84:cc:59:df:6a:e6:
                    67:85:26:d6:35:1c:be:cf:05:1f:ea:f3:0a:cd:87:
                    35:4c:85:c8:f4:30:0a:9a:47:48:ff:81:fa:0b:42:
                    a3:ab:70:96:c9:6c:bf:8e:cc:0a:9a:dc:b3:30:86:
                    c1:4a:1a:85:4d:d3:39:35:c5:46:4a:7e:c2:6a:c6:
                    ce:26:2d:9b:9a:e9:e1:a1:f3:ee:49:b0:90:f6:9a:
                    4b:ff:99:41:eb:df:74:55:03:42:26:33:7d:7a:1a:
                    c2:bb:d5:7f:97:dd:aa:59:6c:76:cc:fc:0e:87:9f:
                    4c:ae:5b:54:2f:08:43:a7:d6:99:ed:e1:b8:23:72:
                    a3:4a:3c:09:07:8f:5f:26:62:cf:3a:53:ce:83:0e:
                    b6:fc:da:9c:e1:c4:87:25:07:0f:f7:86:2e:ce:0b:
                    fb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:37:9A:D5:DF:63:82:24:91:21:AA:A7:A8:5C:F0:83:FF:A9:DB:0C
            X509v3 Authority Key Identifier:
                keyid:C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:c3:2c:c3:72:19:76:91:bf:23:a8:7f:8f:81:1b:a2:ec:12:
         af:52:4e:63:ec:92:cb:ee:de:0e:8f:07:03:a4:46:54:d9:9c:
         2b:f5:10:08:e0:cf:f4:43:4a:82:3c:7e:45:a8:9d:c0:80:46:
         71:ac:d3:7c:86:5e:ff:0a:73:22:47:f6:7d:46:4b:38:58:ae:
         05:87:41:f6:c3:e2:67:b4:30:9c:a0:c9:b0:25:9e:6c:0d:36:
         66:c9:b0:2b:a6:13:6f:a5:2b:2b:e5:93:88:e9:5e:64:3d:15:
         c3:b0:81:9a:4c:d4:96:9d:fa:f4:9c:5e:72:7c:10:8e:3b:8e:
         eb:18:17:ae:1b:fe:39:51:97:7c:00:6c:5f:61:dc:1e:9c:fb:
         5c:fc:48:01:25:a6:78:9b:b9:a5:f9:ec:5e:97:49:6c:42:b2:
         0b:65:6b:c4:f4:61:6a:47:22:aa:d9:87:92:53:2a:18:7d:13:
         fc:18:8b:6f:0d:bf:9e:46:92:5e:62:fe:01:5d:36:2b:f2:50:
         19:80:da:85:ac:65:00:b6:01:e3:3b:ee:92:59:ec:d8:dc:5b:
         88:ba:25:79:2f:32:5e:c1:f0:c7:2e:1c:01:36:7f:da:d2:b1:
         50:04:0b:73:4a:0e:bf:98:e5:04:4a:8a:a3:50:7f:fb:33:04:
         d5:43:a5:30
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgITOOji2DMoCVbrgROJn9lvYHrZJTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhDMzM2QzY1QUEwQkEzM0M2MjZGQUIwQjlDMjZFMDI2RUI5
MDg0NTRBMB4XDTI0MDQwNDA4MTM0M1oXDTI1MDQwMzA4MTg0M1owMzExMC8GA1UE
AxMoNDUzNzlBRDVERjYzODIyNDkxMjFBQUE3QTg1Q0YwODNGRkE5REIwQzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbz7dDmnBrLM2WJ/B3CndOB814v
6UaauQQIFHsNwgfvE120BxDTObmW+z5XUt8AdQv96c1d5EJ94/kGJX8eHSo0WyMS
3rM49HPghniy4sdQPHeJrQObj/KVimLOZEUSVvqQhMxZ32rmZ4Um1jUcvs8FH+rz
Cs2HNUyFyPQwCppHSP+B+gtCo6twlslsv47MCprcszCGwUoahU3TOTXFRkp+wmrG
ziYtm5rp4aHz7kmwkPaaS/+ZQevfdFUDQiYzfXoawrvVf5fdqllsdsz8DoefTK5b
VC8IQ6fWme3huCNyo0o8CQePXyZizzpTzoMOtvzanOHEhyUHD/eGLs4L+x8CAwEA
AaOCAlEwggJNMB0GA1UdDgQWBBRFN5rV32OCJJEhqqeoXPCD/6nbDDAfBgNVHSME
GDAWgBTDNsZaoLozxib6sLnCbgJuuQhFSjAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby80cEhCMU5XbmJlV0FoQktLVW9kUmtwMVV6MVpyNVBUMkFKVXhrbUEzMWpv
ay8xL0MzMzZDNjVBQTBCQTMzQzYyNkZBQjBCOUMyNkUwMjZFQjkwODQ1NEEuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvQzMzNkM2NUFBMEJBMzNDNjI2
RkFCMEI5QzI2RTAyNkVCOTA4NDU0QS5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGb
BggrBgEFBQcwC4aBjnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHBIQjFOV25iZVdBaEJLS1VvZFJrcDFVejFacjVQVDJBSlV4a21BMzFqb2svMS8z
MTM0MzMyZTMxMzMzNzJlMzEzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYz
MTM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAo+JtDANBgkqhkiG9w0BAQsFAAOCAQEATcMsw3IZ
dpG/I6h/j4EbouwSr1JOY+ySy+7eDo8HA6RGVNmcK/UQCODP9ENKgjx+RaidwIBG
cazTfIZe/wpzIkf2fUZLOFiuBYdB9sPiZ7QwnKDJsCWebA02ZsmwK6YTb6UrK+WT
iOleZD0Vw7CBmkzUlp369JxecnwQjjuO6xgXrhv+OVGXfABsX2HcHpz7XPxIASWm
eJu5pfnsXpdJbEKyC2VrxPRhakciqtmHklMqGH0T/BiLbw2/nkaSXmL+AV02K/JQ
GYDahaxlALYB4zvuklns2NxbiLoleS8yXsHwxy4cATZ/2tKxUAQLc0oOv5jlBEqK
o1B/+zME1UOlMA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:21 2024 by rpki-client on console-fra.rpki-client.org