Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33382e302f32342d3234203d3e20323638373930.roa
File:                     34352e3137332e33382e302f32342d3234203d3e20323638373930.roa (raw, json)
Hash identifier:          J51LwV7pELREOS75iJQ3thhFeRmo0fkcKk36PHsrW+E=
Subject key identifier:   52:12:2C:74:47:10:49:1B:05:F6:06:8C:E6:67:E2:6F:55:A0:60:D9
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       24ABD7CF62BB02DFBA6E0B9A722ABE80B8560A65
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33382e302f32342d3234203d3e20323638373930.roa
Signing time:             Wed 15 May 2024 14:33:19 +0000
ROA not before:           Wed 15 May 2024 14:28:19 +0000
ROA not after:            Wed 14 May 2025 14:33:19 +0000
asID:                     268790
IP address blocks:        45.173.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ab:d7:cf:62:bb:02:df:ba:6e:0b:9a:72:2a:be:80:b8:56:0a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: May 15 14:28:19 2024 GMT
            Not After : May 14 14:33:19 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:e4:ca:d1:84:ec:94:0f:2f:4e:76:33:90:
                    08:10:fb:4e:00:a6:8a:50:3a:83:a4:e9:74:80:69:
                    02:0a:a6:c6:8f:42:d7:ad:54:4d:d5:68:60:ac:9c:
                    b1:34:d0:b5:3f:b0:39:85:09:1b:5e:21:77:ae:ff:
                    93:e3:e7:ac:da:9d:f3:37:a7:3c:5e:67:31:a8:30:
                    9d:2d:78:8b:77:2d:84:0d:40:42:c6:a1:79:d6:df:
                    27:94:f6:b8:28:fa:71:a7:f2:44:50:48:da:5e:97:
                    80:c2:24:b0:71:66:55:5c:35:1a:b0:ec:12:4f:54:
                    6f:55:57:40:ce:82:37:de:1a:d4:a3:4c:70:f6:bf:
                    40:a2:3a:69:93:37:b6:d6:b0:70:63:44:35:98:7a:
                    60:02:92:b3:46:ed:a1:83:1c:c3:ba:e8:e6:e3:e7:
                    7e:25:35:0d:53:cc:b7:fd:43:f7:92:f6:e5:86:18:
                    df:35:f3:d5:59:ab:b6:84:bb:a4:6a:2c:4e:de:67:
                    0f:db:ee:54:cc:e8:39:04:4c:25:ec:96:aa:6d:f3:
                    82:6b:29:31:42:64:c1:29:e0:3f:bc:36:14:51:40:
                    c3:87:95:db:57:05:07:ef:09:63:2a:e5:45:6e:13:
                    cc:df:05:60:37:4b:7f:1b:1e:9f:d9:17:8e:75:14:
                    2d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:12:2C:74:47:10:49:1B:05:F6:06:8C:E6:67:E2:6F:55:A0:60:D9
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33382e302f32342d3234203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:08:2c:15:ed:d6:7a:f8:d6:4a:e6:90:18:c3:7a:47:a0:39:
         ba:3b:56:91:81:36:c9:51:25:a5:14:13:a1:50:3f:4c:31:1e:
         08:be:4e:e5:9d:e2:86:5e:b5:73:a2:9f:b7:36:17:6e:46:92:
         96:c6:3a:38:d4:9f:38:00:2a:22:83:9b:c2:4f:a2:78:92:e4:
         79:f8:39:bb:6d:4d:38:04:32:f1:a8:1e:f0:78:cc:bf:66:bb:
         78:47:14:1e:3b:ff:f6:e2:e0:b9:64:5a:69:34:ce:21:49:76:
         77:6a:9d:45:64:30:3b:55:c7:2a:a1:21:68:2c:63:59:39:81:
         a7:52:35:40:f1:94:3a:c0:7f:cf:5a:8c:b7:17:cc:26:bf:7c:
         bd:1d:22:4b:6b:19:30:70:98:19:91:22:17:de:88:2b:6e:93:
         93:a6:63:6d:8c:bc:e6:c0:22:78:85:1e:97:86:2e:0d:0d:56:
         ec:ad:14:d6:2f:1b:1c:88:13:9b:0e:33:9a:95:1a:80:cd:ed:
         81:54:d8:fd:d6:47:67:20:80:c7:3a:77:85:f0:d6:1b:33:da:
         d6:fe:f9:bc:94:4a:6b:60:3e:96:97:4d:20:2a:e9:d7:6a:b1:
         e8:12:3b:85:9a:c4:7c:d1:e1:d2:6d:34:6f:3b:69:49:56:54:
         9c:21:d8:10
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUJKvXz2K7At+6bguaciq+gLhWCmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCNEM5MUVCRTA3RDcwN0VFNzc1QTE1N0FBNTgyQkY0
QjUzM0M2MjAeFw0yNDA1MTUxNDI4MTlaFw0yNTA1MTQxNDMzMTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTc3MkU0Q0FEMTg0RUM5NDBG
MkY0RTc2MzM5MDA4MTBGQjRFMDBBNjhBNTAzQTgzQTRFOTc0ODA2OTAyMEFBNkM2
OEY0MkQ3QUQ1NDRERDU2ODYwQUM5Q0IxMzREMEI1M0ZCMDM5ODUwOTFCNUUyMTc3
QUVGRjkzRTNFN0FDREE5REYzMzdBNzNDNUU2NzMxQTgzMDlEMkQ3ODhCNzcyRDg0
MEQ0MDQyQzZBMTc5RDZERjI3OTRGNkI4MjhGQTcxQTdGMjQ0NTA0OERBNUU5Nzgw
QzIyNEIwNzE2NjU1NUMzNTFBQjBFQzEyNEY1NDZGNTU1NzQwQ0U4MjM3REUxQUQ0
QTM0QzcwRjZCRjQwQTIzQTY5OTMzN0I2RDZCMDcwNjM0NDM1OTg3QTYwMDI5MkIz
NDZFREExODMxQ0MzQkFFOEU2RTNFNzdFMjUzNTBENTNDQ0I3RkQ0M0Y3OTJGNkU1
ODYxOERGMzVGM0Q1NTlBQkI2ODRCQkE0NkEyQzRFREU2NzBGREJFRTU0Q0NFODM5
MDQ0QzI1RUM5NkFBNkRGMzgyNkIyOTMxNDI2NEMxMjlFMDNGQkMzNjE0NTE0MEMz
ODc5NURCNTcwNTA3RUYwOTYzMkFFNTQ1NkUxM0NDREYwNTYwMzc0QjdGMUIxRTlG
RDkxNzhFNzUxNDJEMjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAp3LkytGE7JQPL052M5AIEPtOAKaKUDqDpOl0gGkCCqbGj0LXrVRN
1WhgrJyxNNC1P7A5hQkbXiF3rv+T4+es2p3zN6c8XmcxqDCdLXiLdy2EDUBCxqF5
1t8nlPa4KPpxp/JEUEjaXpeAwiSwcWZVXDUasOwST1RvVVdAzoI33hrUo0xw9r9A
ojppkze21rBwY0Q1mHpgApKzRu2hgxzDuujm4+d+JTUNU8y3/UP3kvblhhjfNfPV
Wau2hLukaixO3mcP2+5UzOg5BEwl7JaqbfOCaykxQmTBKeA/vDYUUUDDh5XbVwUH
7wljKuVFbhPM3wVgN0t/Gx6f2ReOdRQtIQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FFISLHRHEEkbBfYGjOZn4m9VoGDZMB8GA1UdIwQYMBaAFNK0yR6+B9cH7ndaFXql
gr9LUzxiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRyeW9HU1o0bmNaN01j
OGRoQ1ViczVWaHNBa1RDMm95QzFoNm1OQzhIVlpYLzEvRDJCNEM5MUVCRTA3RDcw
N0VFNzc1QTE1N0FBNTgyQkY0QjUzM0M2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EMkI0QzkxRUJFMDdENzA3RUU3NzVBMTU3QUE1ODJCRjRCNTMz
QzYyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80cnlvR1NaNG5jWjdNYzhkaENV
YnM1VmhzQWtUQzJveUMxaDZtTkM4SFZaWC8xLzM0MzUyZTMxMzczMzJlMzMzODJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODM3MzkzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2t
JjANBgkqhkiG9w0BAQsFAAOCAQEAFggsFe3WevjWSuaQGMN6R6A5ujtWkYE2yVEl
pRQToVA/TDEeCL5O5Z3ihl61c6KftzYXbkaSlsY6ONSfOAAqIoObwk+ieJLkefg5
u21NOAQy8age8HjMv2a7eEcUHjv/9uLguWRaaTTOIUl2d2qdRWQwO1XHKqEhaCxj
WTmBp1I1QPGUOsB/z1qMtxfMJr98vR0iS2sZMHCYGZEiF96IK26Tk6ZjbYy85sAi
eIUel4YuDQ1W7K0U1i8bHIgTmw4zmpUagM3tgVTY/dZHZyCAxzp3hfDWGzPa1v75
vJRKa2A+lpdNICrp12qx6BI7hZrEfNHh0m00bztpSVZUnCHYEA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:35 2024 by rpki-client on console-ams.rpki-client.org