Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134312e302f32342d3234203d3e20323638303131.roa
File:                     34352e3136372e3134312e302f32342d3234203d3e20323638303131.roa (raw, json)
Hash identifier:          xCaWVH8oXiwU4fQD7dNMk2zUR86xZnXGmr/6FWy6yLY=
Subject key identifier:   F4:70:D7:4D:DD:DE:3E:EB:45:38:40:20:41:33:96:11:85:BB:3A:39
Certificate issuer:       /CN=7B02316541C9F170484214259E6C028DF7BB0F4A
Certificate serial:       6FA4B36A226DD78DD0BD6EF16542030C4BE4C580
Authority key identifier: 7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134312e302f32342d3234203d3e20323638303131.roa
Signing time:             Wed 03 Apr 2024 18:31:55 +0000
ROA not before:           Wed 03 Apr 2024 18:26:55 +0000
ROA not after:            Wed 02 Apr 2025 18:31:55 +0000
asID:                     268011
IP address blocks:        45.167.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl
                          rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a4:b3:6a:22:6d:d7:8d:d0:bd:6e:f1:65:42:03:0c:4b:e4:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B02316541C9F170484214259E6C028DF7BB0F4A
        Validity
            Not Before: Apr  3 18:26:55 2024 GMT
            Not After : Apr  2 18:31:55 2025 GMT
        Subject: CN=F470D74DDDDE3EEB453840204133961185BB3A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b2:7a:c4:b1:e3:cf:bd:18:b6:e1:30:3d:90:
                    8b:89:6b:67:9c:3c:ec:c1:e1:4f:83:69:97:90:aa:
                    8f:9b:41:ce:db:7b:f5:6a:26:96:25:9a:ad:60:1d:
                    37:14:86:9b:f0:a1:ce:c7:1e:50:73:0c:f0:2c:b5:
                    92:c4:93:ef:1b:ee:e4:ff:d5:29:a3:8f:63:7b:20:
                    b6:db:a3:8a:dd:6b:33:84:d0:05:d3:79:1c:06:6d:
                    07:da:09:0a:02:95:6d:8d:b4:f2:34:8a:e4:6d:bf:
                    39:b1:0e:25:93:f1:8f:1b:dd:7e:bb:81:81:b4:3a:
                    bd:f1:3a:98:78:80:05:23:4c:d1:f9:62:72:9e:40:
                    e6:41:7a:11:61:5e:74:23:d3:f5:51:47:a0:ab:20:
                    06:e3:dd:20:2f:00:51:8c:3d:f0:a6:4e:a0:60:61:
                    e8:ec:7e:17:96:22:c6:1d:a7:a2:e3:de:6d:55:57:
                    67:97:32:b0:cd:07:a7:8d:1d:50:5e:ec:b4:0a:d6:
                    74:32:8e:6c:d1:e6:0a:4f:9a:69:94:b9:da:90:95:
                    91:7b:8d:91:be:28:e6:e2:8b:ff:57:89:03:c4:17:
                    1a:62:9e:fa:f6:91:fd:a9:ae:52:ea:dc:df:d9:9c:
                    a4:82:b3:86:0e:8e:63:40:5b:3c:03:a9:04:e5:c8:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:70:D7:4D:DD:DE:3E:EB:45:38:40:20:41:33:96:11:85:BB:3A:39
            X509v3 Authority Key Identifier:
                keyid:7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134312e302f32342d3234203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:98:e1:b4:70:f1:60:3a:fa:8a:9f:8f:7f:fc:39:f4:b5:e1:
         75:33:af:dd:4a:ca:77:d4:f3:5b:01:b3:d5:57:21:7b:db:7a:
         44:b7:79:4a:b1:9b:d4:ff:f2:40:4f:db:64:f9:1d:e4:2f:b7:
         8f:04:37:1b:15:51:4c:7c:1d:a2:de:99:18:70:27:d4:5a:5e:
         a3:23:4b:2d:9f:70:17:a6:15:2e:04:12:96:5d:f6:f8:46:31:
         45:23:5c:51:ce:20:34:5c:9e:86:0e:58:51:f1:0d:e4:a0:97:
         0c:4a:1d:d0:ec:64:05:cc:cd:8b:62:69:06:6d:3d:d1:c0:fd:
         7a:31:5b:0f:54:b3:f7:be:36:85:5e:75:56:c1:62:c9:17:e5:
         45:82:9b:e3:8f:9c:8c:36:f8:12:82:71:72:6a:8b:b3:51:24:
         d4:a6:2d:bc:60:6f:09:41:ab:de:87:ce:ab:cd:d4:5a:d7:66:
         0b:71:a9:24:f4:f8:bc:1c:03:61:aa:f9:70:8d:c7:9b:9d:69:
         db:64:57:7c:df:99:44:21:52:ea:ac:c2:87:67:9a:76:1b:26:
         21:cd:10:9a:dc:98:f6:67:37:a2:6d:40:66:92:77:ef:19:eb:
         36:e3:df:f9:5a:8f:e3:ed:a4:ba:c9:25:06:68:2e:44:03:28:
         e4:5e:3e:32
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUb6SzaiJt143QvW7xZUIDDEvkxYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IwMjMxNjU0MUM5RjE3MDQ4NDIxNDI1OUU2QzAyOERG
N0JCMEY0QTAeFw0yNDA0MDMxODI2NTVaFw0yNTA0MDIxODMxNTVaMDMxMTAvBgNV
BAMTKEY0NzBENzRERERERTNFRUI0NTM4NDAyMDQxMzM5NjExODVCQjNBMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXsnrEsePPvRi24TA9kIuJa2ec
POzB4U+DaZeQqo+bQc7be/VqJpYlmq1gHTcUhpvwoc7HHlBzDPAstZLEk+8b7uT/
1Smjj2N7ILbbo4rdazOE0AXTeRwGbQfaCQoClW2NtPI0iuRtvzmxDiWT8Y8b3X67
gYG0Or3xOph4gAUjTNH5YnKeQOZBehFhXnQj0/VRR6CrIAbj3SAvAFGMPfCmTqBg
YejsfheWIsYdp6Lj3m1VV2eXMrDNB6eNHVBe7LQK1nQyjmzR5gpPmmmUudqQlZF7
jZG+KObii/9XiQPEFxpinvr2kf2prlLq3N/ZnKSCs4YOjmNAWzwDqQTlyC3FAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU9HDXTd3ePutFOEAgQTOWEYW7OjkwHwYDVR0j
BBgwFoAUewIxZUHJ8XBIQhQlnmwCjfe7D0owDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby84QTRSanlFaVlrSFhnWkpwWUtWQnlTRTlocnB6cmdlc3JnWTlZVW1WNnp0
LzEvN0IwMjMxNjU0MUM5RjE3MDQ4NDIxNDI1OUU2QzAyOERGN0JCMEY0QS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83QjAyMzE2NTQxQzlGMTcwNDg0
MjE0MjU5RTZDMDI4REY3QkIwRjRBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84
QTRSanlFaVlrSFhnWkpwWUtWQnlTRTlocnB6cmdlc3JnWTlZVW1WNnp0LzEvMzQz
NTJlMzEzNjM3MmUzMTM0MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzgz
MDMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAtp40wDQYJKoZIhvcNAQELBQADggEBAFWY4bRw8WA6
+oqfj3/8OfS14XUzr91KynfU81sBs9VXIXvbekS3eUqxm9T/8kBP22T5HeQvt48E
NxsVUUx8HaLemRhwJ9RaXqMjSy2fcBemFS4EEpZd9vhGMUUjXFHOIDRcnoYOWFHx
DeSglwxKHdDsZAXMzYtiaQZtPdHA/XoxWw9Us/e+NoVedVbBYskX5UWCm+OPnIw2
+BKCcXJqi7NRJNSmLbxgbwlBq96HzqvN1FrXZgtxqST0+LwcA2Gq+XCNx5udadtk
V3zfmUQhUuqswodnmnYbJiHNEJrcmPZnN6JtQGaSd+8Z6zbj3/laj+PtpLrJJQZo
LkQDKORePjI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:39 2024 by rpki-client on console-fra.rpki-client.org