Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134302e302f32322d3232203d3e20323638303131.roa
File:                     34352e3136372e3134302e302f32322d3232203d3e20323638303131.roa (raw, json)
Hash identifier:          3F4yLjspN7vZzijBUu2mb3bx7mDLijK8aqNe9PUQdoY=
Subject key identifier:   F6:B2:E7:FF:88:7B:F7:11:05:1D:CA:71:22:35:EF:AB:66:CC:6D:44
Certificate issuer:       /CN=7B02316541C9F170484214259E6C028DF7BB0F4A
Certificate serial:       7A141A647271739AFD0771D3C6DD2228D05E43B1
Authority key identifier: 7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134302e302f32322d3232203d3e20323638303131.roa
Signing time:             Wed 03 Apr 2024 18:31:56 +0000
ROA not before:           Wed 03 Apr 2024 18:26:56 +0000
ROA not after:            Wed 02 Apr 2025 18:31:56 +0000
asID:                     268011
IP address blocks:        45.167.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl
                          rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:14:1a:64:72:71:73:9a:fd:07:71:d3:c6:dd:22:28:d0:5e:43:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B02316541C9F170484214259E6C028DF7BB0F4A
        Validity
            Not Before: Apr  3 18:26:56 2024 GMT
            Not After : Apr  2 18:31:56 2025 GMT
        Subject: CN=F6B2E7FF887BF711051DCA712235EFAB66CC6D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:98:7f:14:95:e6:3a:9b:00:af:f8:5b:a0:
                    74:6e:5c:df:8e:9f:58:8e:48:94:7e:6a:9d:61:06:
                    b0:09:e0:cb:95:9c:74:57:33:68:7c:4e:89:72:39:
                    80:f6:ff:2c:98:b6:71:2a:64:f3:b6:cc:62:d2:80:
                    4c:40:5a:45:5d:d7:4b:88:5a:fe:55:e2:e1:0e:8f:
                    f2:ad:3b:22:fb:0e:04:1c:e6:51:6a:12:51:57:e7:
                    a8:c3:60:29:b8:20:95:80:2d:88:e7:be:0d:de:73:
                    b6:40:99:0e:bd:23:58:d8:c4:a1:30:c0:2a:da:96:
                    c2:56:ff:a8:61:aa:a6:21:77:f4:79:4c:28:88:b7:
                    9c:df:bf:a7:5a:f2:7a:65:d2:11:7b:1c:ec:e0:c8:
                    9e:95:da:69:31:bf:f8:fc:ed:3b:7d:e5:0a:3f:55:
                    7e:64:69:2a:b4:88:5f:ec:cf:41:20:10:1e:6b:c9:
                    41:01:8d:63:ee:2b:98:53:c4:53:42:2a:41:e8:15:
                    9b:c9:a3:14:6d:2c:a2:fb:f9:f4:dd:3b:84:48:2a:
                    36:47:86:b7:af:e1:f1:ba:d5:fd:34:fc:6f:69:08:
                    d1:22:00:9a:22:c6:ee:dc:99:fd:48:9e:36:d0:be:
                    bd:4e:7a:9f:47:5b:95:4a:1b:d7:aa:8d:2e:cc:b7:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B2:E7:FF:88:7B:F7:11:05:1D:CA:71:22:35:EF:AB:66:CC:6D:44
            X509v3 Authority Key Identifier:
                keyid:7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134302e302f32322d3232203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:fc:50:01:48:b4:e4:15:f0:fa:e0:c7:fd:63:8d:b3:4d:e7:
         fc:9c:2e:8a:83:b4:4f:ed:d4:74:d1:97:16:5e:ba:d9:28:30:
         11:91:77:72:98:22:a0:ce:b3:33:af:15:1a:d6:40:af:cf:0b:
         13:c8:60:ec:8c:c6:41:d7:20:00:4b:b2:75:87:da:c4:0c:b0:
         7e:36:5d:3d:1a:51:bf:cf:3f:6b:d4:f1:2a:53:b3:94:f6:89:
         4a:66:6b:65:7e:11:df:ce:89:0b:10:ea:5b:1d:a1:b0:f7:53:
         b4:24:b1:b6:b7:b1:32:95:7e:14:5b:94:da:5a:49:36:cd:29:
         a7:b9:db:3c:ac:f2:42:ba:f7:0a:f3:6e:0e:a2:11:57:8c:98:
         22:33:db:be:b0:f1:41:80:d8:06:ff:86:01:7b:a9:a2:84:84:
         a8:b7:27:dc:74:88:f7:2f:70:f9:f2:fc:60:61:6d:43:11:ac:
         1e:ae:ef:dc:20:64:15:4c:6d:9d:49:d9:d8:d9:82:5d:62:37:
         e7:06:fd:f2:6f:80:83:de:30:a7:d5:2a:03:32:cd:0c:e3:30:
         b7:f9:04:6f:14:b4:eb:49:68:6c:97:85:8c:96:b2:e7:30:85:
         59:94:88:7d:4d:82:fd:0f:03:13:cd:1e:bd:35:f3:36:55:e3:
         04:24:84:93
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUehQaZHJxc5r9B3HTxt0iKNBeQ7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IwMjMxNjU0MUM5RjE3MDQ4NDIxNDI1OUU2QzAyOERG
N0JCMEY0QTAeFw0yNDA0MDMxODI2NTZaFw0yNTA0MDIxODMxNTZaMDMxMTAvBgNV
BAMTKEY2QjJFN0ZGODg3QkY3MTEwNTFEQ0E3MTIyMzVFRkFCNjZDQzZENDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Mph/FJXmOpsAr/hboHRuXN+O
n1iOSJR+ap1hBrAJ4MuVnHRXM2h8TolyOYD2/yyYtnEqZPO2zGLSgExAWkVd10uI
Wv5V4uEOj/KtOyL7DgQc5lFqElFX56jDYCm4IJWALYjnvg3ec7ZAmQ69I1jYxKEw
wCralsJW/6hhqqYhd/R5TCiIt5zfv6da8npl0hF7HOzgyJ6V2mkxv/j87Tt95Qo/
VX5kaSq0iF/sz0EgEB5ryUEBjWPuK5hTxFNCKkHoFZvJoxRtLKL7+fTdO4RIKjZH
hrev4fG61f00/G9pCNEiAJoixu7cmf1InjbQvr1Oep9HW5VKG9eqjS7Mt/N/AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU9rLn/4h79xEFHcpxIjXvq2bMbUQwHwYDVR0j
BBgwFoAUewIxZUHJ8XBIQhQlnmwCjfe7D0owDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby84QTRSanlFaVlrSFhnWkpwWUtWQnlTRTlocnB6cmdlc3JnWTlZVW1WNnp0
LzEvN0IwMjMxNjU0MUM5RjE3MDQ4NDIxNDI1OUU2QzAyOERGN0JCMEY0QS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83QjAyMzE2NTQxQzlGMTcwNDg0
MjE0MjU5RTZDMDI4REY3QkIwRjRBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84
QTRSanlFaVlrSFhnWkpwWUtWQnlTRTlocnB6cmdlc3JnWTlZVW1WNnp0LzEvMzQz
NTJlMzEzNjM3MmUzMTM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2Mzgz
MDMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAItp4wwDQYJKoZIhvcNAQELBQADggEBABT8UAFItOQV
8Prgx/1jjbNN5/ycLoqDtE/t1HTRlxZeutkoMBGRd3KYIqDOszOvFRrWQK/PCxPI
YOyMxkHXIABLsnWH2sQMsH42XT0aUb/PP2vU8SpTs5T2iUpma2V+Ed/OiQsQ6lsd
obD3U7Qksba3sTKVfhRblNpaSTbNKae52zys8kK69wrzbg6iEVeMmCIz276w8UGA
2Ab/hgF7qaKEhKi3J9x0iPcvcPny/GBhbUMRrB6u79wgZBVMbZ1J2djZgl1iN+cG
/fJvgIPeMKfVKgMyzQzjMLf5BG8UtOtJaGyXhYyWsucwhVmUiH1Ngv0PAxPNHr01
8zZV4wQkhJM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org