Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/34352e3232342e3234342e302f32322d3234203d3e20323636393235.roa
File:                     34352e3232342e3234342e302f32322d3234203d3e20323636393235.roa (raw, json)
Hash identifier:          z4T3lYej/Mjuf6/TvSZ4M4vF3+cTCWkUVO5fgIXSIKw=
Subject key identifier:   95:4D:92:F1:95:FA:95:D4:F7:3C:7D:05:F4:BF:B8:1F:4E:59:7B:7F
Certificate issuer:       /CN=FFFC078448D76222F00690DC23A9C960738B25A8
Certificate serial:       095D1BD01F036C0A8A468F18BBABE125D0AD7EC3
Authority key identifier: FF:FC:07:84:48:D7:62:22:F0:06:90:DC:23:A9:C9:60:73:8B:25:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFC078448D76222F00690DC23A9C960738B25A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/34352e3232342e3234342e302f32322d3234203d3e20323636393235.roa
Signing time:             Thu 09 May 2024 13:44:36 +0000
ROA not before:           Thu 09 May 2024 13:39:36 +0000
ROA not after:            Thu 08 May 2025 13:44:36 +0000
asID:                     266925
IP address blocks:        45.224.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/FFFC078448D76222F00690DC23A9C960738B25A8.crl
                          rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/FFFC078448D76222F00690DC23A9C960738B25A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFC078448D76222F00690DC23A9C960738B25A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5d:1b:d0:1f:03:6c:0a:8a:46:8f:18:bb:ab:e1:25:d0:ad:7e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFFC078448D76222F00690DC23A9C960738B25A8
        Validity
            Not Before: May  9 13:39:36 2024 GMT
            Not After : May  8 13:44:36 2025 GMT
        Subject: CN=954D92F195FA95D4F73C7D05F4BFB81F4E597B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:70:3c:80:67:b5:f0:ab:dc:73:7b:8c:67:e4:
                    5d:00:73:83:47:6b:ae:73:80:fb:b4:6e:d2:fc:83:
                    36:74:ad:fc:ef:22:00:c4:b9:9b:1d:6f:3c:b5:55:
                    b5:1f:7c:f0:d4:33:f9:16:3b:71:eb:e1:88:3b:51:
                    3b:e0:d7:4c:07:e1:fd:a3:0f:62:61:f2:99:b3:c1:
                    ac:79:57:1f:81:53:ae:23:e7:85:b8:cb:3b:f3:ec:
                    fb:84:58:b2:2e:dd:c4:e9:e6:82:50:8c:f6:72:84:
                    50:ae:14:06:77:f3:e2:09:e1:36:e9:0d:12:08:f3:
                    e0:37:13:77:ab:9e:9f:bc:11:eb:96:e3:6f:ac:9d:
                    0a:87:0b:91:e4:09:6e:a0:bd:8e:06:fe:d3:bd:2f:
                    22:89:b0:ed:74:b1:9a:a6:e6:02:de:5f:ea:fd:0e:
                    fe:46:3a:76:9a:cc:24:5c:9f:85:c8:e2:68:53:c8:
                    4b:66:b7:09:b8:bb:75:35:39:ef:94:87:73:f3:40:
                    f0:bb:6f:66:c5:ed:7c:80:79:28:f0:68:dd:c3:24:
                    a5:68:62:72:0e:3b:f0:84:38:96:10:de:38:ca:cb:
                    ba:a0:3e:ca:20:ab:1d:60:96:d2:ee:36:9c:87:2b:
                    ea:01:dd:ea:72:7e:81:e8:91:0a:bd:04:1e:24:86:
                    db:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4D:92:F1:95:FA:95:D4:F7:3C:7D:05:F4:BF:B8:1F:4E:59:7B:7F
            X509v3 Authority Key Identifier:
                keyid:FF:FC:07:84:48:D7:62:22:F0:06:90:DC:23:A9:C9:60:73:8B:25:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/FFFC078448D76222F00690DC23A9C960738B25A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFC078448D76222F00690DC23A9C960738B25A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/34352e3232342e3234342e302f32322d3234203d3e20323636393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:5c:74:48:dd:ae:00:58:f2:11:eb:f3:ed:1d:7f:df:67:5a:
         8f:ec:34:85:a9:6b:e9:a6:fb:e0:ac:af:7a:6a:10:f3:28:7b:
         0c:ea:89:11:ec:26:44:9f:32:9e:dc:cb:03:d0:f9:fc:dd:92:
         ff:8b:3a:cb:4f:a7:60:04:6a:09:e3:e5:e4:f0:53:81:ce:e3:
         4b:40:c6:f8:2f:94:95:bb:3d:00:10:58:b1:cb:d0:99:91:fb:
         6f:95:41:77:14:1b:a1:21:2e:18:58:1d:e2:09:79:de:49:2f:
         1d:55:08:d6:f3:f6:61:90:67:c3:4a:54:84:d5:be:c6:65:9b:
         20:09:1e:75:48:b5:80:21:f4:51:55:ae:88:ad:75:47:65:04:
         ae:12:0b:49:3d:ae:a9:50:44:cd:3b:24:36:df:09:51:cd:92:
         32:28:52:d1:8e:65:22:fc:ab:0c:67:6b:5d:6f:b4:31:6d:78:
         38:4c:3c:69:6c:c7:6a:5c:a1:3b:66:67:96:35:14:87:81:d4:
         73:af:ea:08:a2:ac:fa:b2:06:d3:c8:76:3d:04:34:c9:44:e7:
         2a:dc:d2:1b:60:32:07:fc:81:fa:71:de:b8:8e:ca:24:48:07:
         1d:31:d3:aa:17:56:c6:b0:a3:eb:c7:e9:16:76:a3:4c:9d:e8:
         eb:3a:60:a5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCV0b0B8DbAqKRo8Yu6vhJdCtfsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZGQzA3ODQ0OEQ3NjIyMkYwMDY5MERDMjNBOUM5NjA3
MzhCMjVBODAeFw0yNDA1MDkxMzM5MzZaFw0yNTA1MDgxMzQ0MzZaMDMxMTAvBgNV
BAMTKDk1NEQ5MkYxOTVGQTk1RDRGNzNDN0QwNUY0QkZCODFGNEU1OTdCN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPcDyAZ7Xwq9xze4xn5F0Ac4NH
a65zgPu0btL8gzZ0rfzvIgDEuZsdbzy1VbUffPDUM/kWO3Hr4Yg7UTvg10wH4f2j
D2Jh8pmzwax5Vx+BU64j54W4yzvz7PuEWLIu3cTp5oJQjPZyhFCuFAZ38+IJ4Tbp
DRII8+A3E3ernp+8EeuW42+snQqHC5HkCW6gvY4G/tO9LyKJsO10sZqm5gLeX+r9
Dv5GOnaazCRcn4XI4mhTyEtmtwm4u3U1Oe+Uh3PzQPC7b2bF7XyAeSjwaN3DJKVo
YnIOO/CEOJYQ3jjKy7qgPsogqx1gltLuNpyHK+oB3epyfoHokQq9BB4khtv9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlU2S8ZX6ldT3PH0F9L+4H05Ze38wHwYDVR0j
BBgwFoAU//wHhEjXYiLwBpDcI6nJYHOLJagwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlBrR1Y5RTdLNEdMakN4Sml2d0xGTjVyODJKRjg3dUxTQWRycHY2Q2V2
MUIvMS9GRkZDMDc4NDQ4RDc2MjIyRjAwNjkwREMyM0E5Qzk2MDczOEIyNUE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGRkMwNzg0NDhENzYyMjJG
MDA2OTBEQzIzQTlDOTYwNzM4QjI1QTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZQa0dWOUU3SzRHTGpDeEppdndMRk41cjgySkY4N3VMU0FkcnB2NkNldjFCLzEv
MzQzNTJlMzIzMjM0MmUzMjM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzOTMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4PQwDQYJKoZIhvcNAQELBQADggEBAAtcdEjd
rgBY8hHr8+0df99nWo/sNIWpa+mm++Csr3pqEPMoewzqiRHsJkSfMp7cywPQ+fzd
kv+LOstPp2AEagnj5eTwU4HO40tAxvgvlJW7PQAQWLHL0JmR+2+VQXcUG6EhLhhY
HeIJed5JLx1VCNbz9mGQZ8NKVITVvsZlmyAJHnVItYAh9FFVroitdUdlBK4SC0k9
rqlQRM07JDbfCVHNkjIoUtGOZSL8qwxna11vtDFteDhMPGlsx2pcoTtmZ5Y1FIeB
1HOv6giirPqyBtPIdj0ENMlE5yrc0htgMgf8gfpx3riOyiRIBx0x06oXVsawo+vH
6RZ2o0yd6Os6YKU=
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:59 2024 by rpki-client on console-fra.rpki-client.org