Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/34352e3233332e34342e302f32322d3332203d3e20323637323933.roa
File:                     34352e3233332e34342e302f32322d3332203d3e20323637323933.roa (raw, json)
Hash identifier:          k9iZ8HGmkUkmnQFG9FlRhMyVipbSLx7L0cj+uQIjtq4=
Subject key identifier:   B4:56:E0:F3:F2:25:E2:6E:38:6E:A4:E1:3E:14:D0:2D:BA:23:83:DE
Certificate issuer:       /CN=910494A18C7A628293563A78776F129AEA078B88
Certificate serial:       2AD10F407AFC450DB0CBA4463C53844785C07F8E
Authority key identifier: 91:04:94:A1:8C:7A:62:82:93:56:3A:78:77:6F:12:9A:EA:07:8B:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910494A18C7A628293563A78776F129AEA078B88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/34352e3233332e34342e302f32322d3332203d3e20323637323933.roa
Signing time:             Wed 03 Apr 2024 21:11:23 +0000
ROA not before:           Wed 03 Apr 2024 21:06:23 +0000
ROA not after:            Wed 02 Apr 2025 21:11:23 +0000
asID:                     267293
IP address blocks:        45.233.44.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/910494A18C7A628293563A78776F129AEA078B88.crl
                          rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/910494A18C7A628293563A78776F129AEA078B88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910494A18C7A628293563A78776F129AEA078B88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d1:0f:40:7a:fc:45:0d:b0:cb:a4:46:3c:53:84:47:85:c0:7f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910494A18C7A628293563A78776F129AEA078B88
        Validity
            Not Before: Apr  3 21:06:23 2024 GMT
            Not After : Apr  2 21:11:23 2025 GMT
        Subject: CN=B456E0F3F225E26E386EA4E13E14D02DBA2383DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f1:37:7f:60:f1:66:7e:89:8d:2f:7f:39:fa:
                    f6:8c:7b:0e:98:62:39:2a:02:1f:a5:fe:28:37:a3:
                    8a:c9:66:b5:00:2d:ce:eb:9b:b5:a3:fa:91:a3:81:
                    61:45:40:1f:a8:96:45:34:f4:08:c8:46:3f:6d:e9:
                    e8:6e:a5:55:ba:14:07:d8:f1:05:19:37:fb:9e:7c:
                    f5:0d:93:c9:f1:7d:da:5d:e8:23:c7:e8:27:fe:ae:
                    4a:97:22:aa:a2:26:44:71:1f:cf:5c:0c:26:ac:e9:
                    cb:27:01:63:ca:bf:cd:ac:1b:3a:b5:be:a4:6e:cc:
                    05:ad:c1:af:5b:2e:50:60:d9:47:a1:f3:8d:53:a1:
                    a3:95:7b:08:85:44:d5:24:de:2e:1f:7f:c6:a1:f2:
                    ff:05:29:98:a6:bb:de:34:c2:12:0d:a3:22:ab:90:
                    68:53:e6:c1:9f:91:b4:14:c2:10:1b:63:c1:24:69:
                    b6:16:80:a9:5e:a9:8f:cf:56:a2:8d:ea:ae:38:c6:
                    9c:37:f8:00:60:7b:ab:c1:5b:d1:76:c6:73:d0:3c:
                    02:1b:f8:0e:73:83:50:4c:98:fe:72:bc:fb:c6:a8:
                    c7:e9:55:06:6d:4a:e6:0a:5b:8f:10:7c:20:40:a3:
                    ff:e1:d9:fc:76:cf:be:cc:b0:dc:47:ac:21:f4:72:
                    59:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:56:E0:F3:F2:25:E2:6E:38:6E:A4:E1:3E:14:D0:2D:BA:23:83:DE
            X509v3 Authority Key Identifier:
                keyid:91:04:94:A1:8C:7A:62:82:93:56:3A:78:77:6F:12:9A:EA:07:8B:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/910494A18C7A628293563A78776F129AEA078B88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910494A18C7A628293563A78776F129AEA078B88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/34352e3233332e34342e302f32322d3332203d3e20323637323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:7e:9b:9b:45:4b:1e:7d:4d:4c:d8:5b:e5:4e:fe:09:0c:80:
         8f:20:28:6c:dd:f1:2b:bf:d7:50:f1:50:11:67:13:8d:c8:f0:
         25:db:d7:aa:82:ba:d0:04:f1:fb:ef:79:61:ba:b0:45:41:0f:
         90:a2:70:0f:fe:dc:de:8d:98:d1:76:3c:fc:ca:04:b7:0a:d5:
         40:d9:94:14:83:d6:05:be:10:24:5c:30:05:21:a6:df:d9:5f:
         19:a5:8a:b0:6b:ad:3c:63:59:db:ee:23:1e:7e:9b:cf:69:20:
         67:e0:05:a5:9c:3f:38:cb:34:62:e5:ea:88:84:15:19:25:d3:
         aa:3e:0c:3a:6b:ec:85:ad:ce:6c:09:07:e4:16:67:99:20:84:
         65:65:6b:02:51:fe:06:36:c1:47:ad:dc:9c:8d:a1:9d:67:81:
         7a:11:d1:2f:85:59:f4:ec:14:65:74:a6:17:f4:27:12:b6:07:
         78:a5:d4:d3:cb:e4:51:a2:9e:0c:a0:16:ed:3c:17:a1:67:e1:
         d3:f7:61:f9:a9:ad:58:e1:5e:ea:52:33:58:63:a4:12:a8:b4:
         21:71:bb:95:37:04:86:0d:a5:76:35:a0:91:97:62:95:c0:6d:
         ed:fb:16:70:2d:6a:39:5f:97:a1:c7:53:24:1a:18:70:a1:1d:
         a4:04:2e:c1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKtEPQHr8RQ2wy6RGPFOER4XAf44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTEwNDk0QTE4QzdBNjI4MjkzNTYzQTc4Nzc2RjEyOUFF
QTA3OEI4ODAeFw0yNDA0MDMyMTA2MjNaFw0yNTA0MDIyMTExMjNaMDMxMTAvBgNV
BAMTKEI0NTZFMEYzRjIyNUUyNkUzODZFQTRFMTNFMTREMDJEQkEyMzgzREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8Td/YPFmfomNL385+vaMew6Y
YjkqAh+l/ig3o4rJZrUALc7rm7Wj+pGjgWFFQB+olkU09AjIRj9t6ehupVW6FAfY
8QUZN/uefPUNk8nxfdpd6CPH6Cf+rkqXIqqiJkRxH89cDCas6csnAWPKv82sGzq1
vqRuzAWtwa9bLlBg2Ueh841ToaOVewiFRNUk3i4ff8ah8v8FKZimu940whINoyKr
kGhT5sGfkbQUwhAbY8EkabYWgKleqY/PVqKN6q44xpw3+ABge6vBW9F2xnPQPAIb
+A5zg1BMmP5yvPvGqMfpVQZtSuYKW48QfCBAo//h2fx2z77MsNxHrCH0clkBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtFbg8/Il4m44bqThPhTQLbojg94wHwYDVR0j
BBgwFoAUkQSUoYx6YoKTVjp4d28SmuoHi4gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXUxaHBzemg4M2Vjb2ZDN1FzUGdMRkZxTW8yZHpER3k5bzF4NE15cTlY
UDMvMS85MTA0OTRBMThDN0E2MjgyOTM1NjNBNzg3NzZGMTI5QUVBMDc4Qjg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxMDQ5NEExOEM3QTYyODI5
MzU2M0E3ODc3NkYxMjlBRUEwNzhCODguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl1MWhwc3poODNlY29mQzdRc1BnTEZGcU1vMmR6REd5OW8xeDRNeXE5WFAzLzEv
MzQzNTJlMzIzMzMzMmUzNDM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzIzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeksMA0GCSqGSIb3DQEBCwUAA4IBAQCcfpubRUse
fU1M2FvlTv4JDICPIChs3fErv9dQ8VARZxONyPAl29eqgrrQBPH773lhurBFQQ+Q
onAP/tzejZjRdjz8ygS3CtVA2ZQUg9YFvhAkXDAFIabf2V8ZpYqwa608Y1nb7iMe
fpvPaSBn4AWlnD84yzRi5eqIhBUZJdOqPgw6a+yFrc5sCQfkFmeZIIRlZWsCUf4G
NsFHrdycjaGdZ4F6EdEvhVn07BRldKYX9CcStgd4pdTTy+RRop4MoBbtPBehZ+HT
92H5qa1Y4V7qUjNYY6QSqLQhcbuVNwSGDaV2NaCRl2KVwG3t+xZwLWo5X5ehx1Mk
GhhwoR2kBC7B
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:41 2024 by rpki-client on console-ams.rpki-client.org