Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/34352e362e35322e302f32322d3332203d3e2030.roa
File:                     34352e362e35322e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier:          /ptriq3Oy9qYlx3o1rBgND6AbDNGGMwp/sx6FmzfKkk=
Subject key identifier:   43:77:B6:12:DB:60:61:27:04:F2:49:07:9F:0D:23:BE:C2:69:78:F2
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       1AF6F660B7EE62E1B36626DB48066CCCDCCD00B9
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/34352e362e35322e302f32322d3332203d3e2030.roa
Signing time:             Sat 23 Sep 2023 16:56:01 +0000
ROA not before:           Sat 23 Sep 2023 16:51:01 +0000
ROA not after:            Sat 21 Sep 2024 16:56:01 +0000
asID:                     0
IP address blocks:        45.6.52.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Mar 2024 02:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f6:f6:60:b7:ee:62:e1:b3:66:26:db:48:06:6c:cc:dc:cd:00:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 23 16:51:01 2023 GMT
            Not After : Sep 21 16:56:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:93:c2:89:61:0e:5e:3e:cf:96:d1:9d:25:
                    4e:12:50:57:af:68:e9:eb:09:d5:3b:6a:f9:f7:de:
                    18:4d:91:2e:99:8f:01:68:f1:d0:78:db:44:42:14:
                    ea:ad:2c:3d:0d:c7:6e:80:0e:5b:e2:06:c1:ab:23:
                    2d:ea:91:47:b0:5b:6b:e5:ba:cf:28:ff:7c:4a:5e:
                    7c:6e:98:87:5d:2b:c4:99:5d:92:3b:1b:b4:c6:01:
                    f4:06:27:fa:43:39:fe:8f:29:61:50:db:6e:22:76:
                    f2:cb:81:7d:eb:2c:99:6a:c1:f3:a6:a5:77:54:24:
                    9e:2e:32:b0:ae:04:ad:32:ef:7a:e0:7a:1e:2d:5c:
                    cb:00:5f:8e:4f:40:18:88:eb:d6:ef:eb:23:61:41:
                    85:15:d6:6e:be:16:9c:7c:cd:28:e8:77:7e:91:ab:
                    01:da:2a:61:39:9b:10:e3:7e:0c:9b:17:14:1d:57:
                    e6:a6:f1:4f:f7:d5:e8:8f:c6:0e:93:84:c6:04:34:
                    66:ee:e9:87:dd:7a:9e:1c:de:27:50:1d:c8:44:00:
                    89:be:8d:ef:2f:99:4e:b9:2f:82:1d:65:df:00:f2:
                    86:33:61:e7:72:6b:1a:53:95:af:fc:0a:de:b9:ca:
                    a9:ba:bc:ab:d1:2b:f7:67:42:bb:b8:7a:99:cc:e4:
                    f0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:77:B6:12:DB:60:61:27:04:F2:49:07:9F:0D:23:BE:C2:69:78:F2
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/34352e362e35322e302f32322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:f9:2d:f4:2a:3f:03:84:26:f2:01:aa:7c:b4:6b:1c:c1:fe:
         3e:13:f3:f5:b6:88:4e:4b:64:9c:dc:08:8f:0b:ed:4b:07:d3:
         07:25:eb:34:22:0b:21:c3:38:c9:b1:6c:5d:9e:c2:38:5e:37:
         d3:5c:ae:82:f9:11:7b:39:02:5f:4f:46:6d:d3:14:1a:4c:37:
         93:e5:bd:6c:17:54:28:93:47:cb:44:18:c4:f4:1a:49:a5:df:
         ee:e8:b5:a7:5a:cd:3d:99:ca:c3:60:6b:c4:da:14:a7:5c:13:
         42:e1:eb:93:ea:ed:b0:41:98:37:7a:be:9b:44:73:11:19:17:
         f9:c4:be:05:f0:96:40:ea:dc:e1:23:5c:76:10:a6:e9:0a:91:
         ec:8c:51:c2:25:cb:a1:24:59:79:fe:f1:88:7c:ee:10:bf:f4:
         a4:62:ce:91:ff:f3:1f:1d:6a:d6:2b:ca:6e:9f:18:ac:29:32:
         83:08:07:43:e0:78:1f:f8:1f:f2:4e:5b:e5:25:17:a0:1b:47:
         68:e9:41:df:95:7c:5c:9d:ed:c0:5d:4f:30:9e:9e:e4:9c:d8:
         c0:e8:f3:74:df:58:15:46:8c:c0:bd:8e:d3:56:bd:05:34:02:
         ea:6a:13:18:c4:e4:9d:55:93:e3:fd:b3:e1:0f:db:06:47:85:
         69:13:fe:ba
-----BEGIN CERTIFICATE-----
MIIHMjCCBhqgAwIBAgIUGvb2YLfuYuGzZibbSAZszNzNALkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ4M0I0MTg2QUQ4NDBBN0FDODkxQTAxMDUwMUU0RENE
QThCMzhBOTAeFw0yMzA5MjMxNjUxMDFaFw0yNDA5MjExNjU2MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjhBMzkzQzI4OTYxMEU1RTNF
Q0Y5NkQxOUQyNTRFMTI1MDU3QUY2OEU5RUIwOUQ1M0I2QUY5RjdERTE4NEQ5MTJF
OTk4RjAxNjhGMUQwNzhEQjQ0NDIxNEVBQUQyQzNEMERDNzZFODAwRTVCRTIwNkMx
QUIyMzJERUE5MTQ3QjA1QjZCRTVCQUNGMjhGRjdDNEE1RTdDNkU5ODg3NUQyQkM0
OTk1RDkyM0IxQkI0QzYwMUY0MDYyN0ZBNDMzOUZFOEYyOTYxNTBEQjZFMjI3NkYy
Q0I4MTdERUIyQzk5NkFDMUYzQTZBNTc3NTQyNDlFMkUzMkIwQUUwNEFEMzJFRjdB
RTA3QTFFMkQ1Q0NCMDA1RjhFNEY0MDE4ODhFQkQ2RUZFQjIzNjE0MTg1MTVENjZF
QkUxNjlDN0NDRDI4RTg3NzdFOTFBQjAxREEyQTYxMzk5QjEwRTM3RTBDOUIxNzE0
MUQ1N0U2QTZGMTRGRjdENUU4OEZDNjBFOTM4NEM2MDQzNDY2RUVFOTg3REQ3QTlF
MUNERTI3NTAxREM4NDQwMDg5QkU4REVGMkY5OTRFQjkyRjgyMUQ2NURGMDBGMjg2
MzM2MUU3NzI2QjFBNTM5NUFGRkMwQURFQjlDQUE5QkFCQ0FCRDEyQkY3Njc0MkJC
Qjg3QTk5Q0NFNEYwODEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuKOTwolhDl4+z5bRnSVOElBXr2jp6wnVO2r5994YTZEumY8BaPHQ
eNtEQhTqrSw9DcdugA5b4gbBqyMt6pFHsFtr5brPKP98Sl58bpiHXSvEmV2SOxu0
xgH0Bif6Qzn+jylhUNtuInbyy4F96yyZasHzpqV3VCSeLjKwrgStMu964HoeLVzL
AF+OT0AYiOvW7+sjYUGFFdZuvhacfM0o6Hd+kasB2iphOZsQ434MmxcUHVfmpvFP
99Xoj8YOk4TGBDRm7umH3XqeHN4nUB3IRACJvo3vL5lOuS+CHWXfAPKGM2Hncmsa
U5Wv/Areucqpuryr0Sv3Z0K7uHqZzOTwgQIDAQABo4ICQDCCAjwwHQYDVR0OBBYE
FEN3thLbYGEnBPJJB58NI77CaXjyMB8GA1UdIwQYMBaAFKSDtBhq2ECnrIkaAQUB
5NzaizipMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzEvQTQ4M0I0MTg2QUQ4NDBB
N0FDODkxQTAxMDUwMUU0RENEQThCMzhBOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BNDgzQjQxODZBRDg0MEE3QUM4OTFBMDEwNTAxRTREQ0RBOEIz
OEE5LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1VUJ6SlF6
UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzEvMzQzNTJlMzYyZTM1MzIyZTMwMmYz
MjMyMmQzMzMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0GNDANBgkqhkiG9w0BAQsF
AAOCAQEAHvkt9Co/A4Qm8gGqfLRrHMH+PhPz9baITktknNwIjwvtSwfTByXrNCIL
IcM4ybFsXZ7COF4301yugvkRezkCX09GbdMUGkw3k+W9bBdUKJNHy0QYxPQaSaXf
7ui1p1rNPZnKw2BrxNoUp1wTQuHrk+rtsEGYN3q+m0RzERkX+cS+BfCWQOrc4SNc
dhCm6QqR7IxRwiXLoSRZef7xiHzuEL/0pGLOkf/zHx1q1ivKbp8YrCkygwgHQ+B4
H/gf8k5b5SUXoBtHaOlB35V8XJ3twF1PMJ6e5JzYwOjzdN9YFUaMwL2O01a9BTQC
6moTGMTknVWT4/2z4Q/bBkeFaRP+ug==
-----END CERTIFICATE-----
Generated at Fri Mar 29 06:25:42 2024 by rpki-client on console-ams.rpki-client.org