Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/34352e3138342e3138342e302f32342d3234203d3e20323639333338.roa
File:                     34352e3138342e3138342e302f32342d3234203d3e20323639333338.roa (raw, json)
Hash identifier:          eCu9rsoteDorPMB1WKut9l3seo0iLsgzlcI+Y3FIMZk=
Subject key identifier:   95:0D:D5:A8:B4:38:FD:FD:BA:74:8C:93:8E:FA:5B:07:E1:33:79:7D
Certificate issuer:       /CN=74641B8EAD691A490CFACE3932BAD9C4006F2E67
Certificate serial:       75C82422F9AC8738F63B85BE30A0036E93CEDA5D
Authority key identifier: 74:64:1B:8E:AD:69:1A:49:0C:FA:CE:39:32:BA:D9:C4:00:6F:2E:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74641B8EAD691A490CFACE3932BAD9C4006F2E67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/34352e3138342e3138342e302f32342d3234203d3e20323639333338.roa
Signing time:             Sat 13 Apr 2024 16:15:59 +0000
ROA not before:           Sat 13 Apr 2024 16:10:59 +0000
ROA not after:            Sat 12 Apr 2025 16:15:59 +0000
asID:                     269338
IP address blocks:        45.184.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/74641B8EAD691A490CFACE3932BAD9C4006F2E67.crl
                          rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/74641B8EAD691A490CFACE3932BAD9C4006F2E67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74641B8EAD691A490CFACE3932BAD9C4006F2E67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c8:24:22:f9:ac:87:38:f6:3b:85:be:30:a0:03:6e:93:ce:da:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74641B8EAD691A490CFACE3932BAD9C4006F2E67
        Validity
            Not Before: Apr 13 16:10:59 2024 GMT
            Not After : Apr 12 16:15:59 2025 GMT
        Subject: CN=950DD5A8B438FDFDBA748C938EFA5B07E133797D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:84:7e:5a:40:6b:cd:73:9e:5d:23:2d:4f:22:
                    bd:1b:4c:c5:1c:86:c5:e3:1e:6c:a5:14:86:ff:dc:
                    b8:de:35:7e:f6:50:10:f4:f0:e9:08:1d:68:5f:a9:
                    d1:da:04:f0:a0:ed:b5:0d:3d:3c:c8:d9:6a:f5:a0:
                    d0:27:35:12:6d:8a:60:23:e9:d6:06:e5:d9:5a:87:
                    de:bc:2e:1a:0c:d4:65:dc:7c:68:96:07:f4:1a:ec:
                    02:0d:63:e3:63:62:14:0c:cd:c8:fa:44:3f:72:72:
                    07:63:c9:a9:ff:20:a2:40:6e:fc:c1:f5:53:d4:88:
                    17:01:80:c8:80:62:3d:a9:b1:3b:eb:28:86:26:9c:
                    20:0b:4e:fd:bc:d4:8a:f7:1a:ae:76:06:5f:69:af:
                    8e:81:b3:1f:85:b9:07:88:44:f3:f0:7c:b4:36:cf:
                    1b:a2:52:1d:20:84:9f:d0:96:7d:f3:d9:75:01:af:
                    32:63:af:74:9c:29:aa:58:65:25:c0:13:2d:b9:33:
                    01:93:1d:59:43:b7:a5:a3:d2:00:08:4b:45:94:60:
                    e4:a3:5a:ee:92:22:3d:7e:54:72:f4:be:3e:97:f1:
                    ed:97:a1:a0:8f:6e:26:f3:cb:52:df:11:b4:61:5c:
                    71:6b:fa:54:f6:f3:95:dd:4a:8d:98:08:89:85:d9:
                    29:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0D:D5:A8:B4:38:FD:FD:BA:74:8C:93:8E:FA:5B:07:E1:33:79:7D
            X509v3 Authority Key Identifier:
                keyid:74:64:1B:8E:AD:69:1A:49:0C:FA:CE:39:32:BA:D9:C4:00:6F:2E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/74641B8EAD691A490CFACE3932BAD9C4006F2E67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74641B8EAD691A490CFACE3932BAD9C4006F2E67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/34352e3138342e3138342e302f32342d3234203d3e20323639333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:67:9b:05:01:dd:d8:dd:f0:54:2f:05:f4:05:b4:22:3e:ce:
         cb:f6:bb:72:d5:5c:69:68:61:ba:1b:73:13:37:48:bc:6a:86:
         8d:cf:94:74:7b:0e:ec:6a:28:92:2f:97:4c:20:3a:3f:26:04:
         2e:d8:6a:2f:24:86:34:82:b9:c1:21:1a:b5:97:8a:e4:11:72:
         a3:4c:b2:d0:38:f5:5a:cb:21:1e:eb:be:0f:b7:0b:46:8b:c9:
         cf:78:8b:95:5b:bd:d4:4d:07:7d:3f:ec:dc:a9:d1:31:04:43:
         8f:bf:ba:ca:e7:18:42:79:a5:17:9d:5d:8a:09:45:2f:c1:58:
         59:22:94:7c:40:7f:b9:7d:05:53:f7:ab:3e:0a:11:ad:31:c9:
         25:d9:57:a5:b1:ec:4e:aa:0b:06:9c:3a:85:dd:49:2b:8f:8b:
         0d:6c:1f:cd:91:0f:61:fe:f4:74:2b:58:ef:07:c7:68:78:65:
         06:dc:89:68:1d:18:b6:f7:a1:84:e8:e0:3a:84:d4:21:9a:5c:
         30:93:43:0c:b2:80:b5:b5:b6:f6:db:20:eb:f5:c3:5e:07:10:
         b3:9b:eb:98:d5:d1:53:53:64:79:ea:2a:43:ee:05:8b:37:1b:
         ae:d7:36:2b:f1:23:52:2d:be:90:75:33:5e:3e:48:d7:72:b6:
         93:e0:5e:76
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdcgkIvmshzj2O4W+MKADbpPO2l0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ2NDFCOEVBRDY5MUE0OTBDRkFDRTM5MzJCQUQ5QzQw
MDZGMkU2NzAeFw0yNDA0MTMxNjEwNTlaFw0yNTA0MTIxNjE1NTlaMDMxMTAvBgNV
BAMTKDk1MERENUE4QjQzOEZERkRCQTc0OEM5MzhFRkE1QjA3RTEzMzc5N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUhH5aQGvNc55dIy1PIr0bTMUc
hsXjHmylFIb/3LjeNX72UBD08OkIHWhfqdHaBPCg7bUNPTzI2Wr1oNAnNRJtimAj
6dYG5dlah968LhoM1GXcfGiWB/Qa7AINY+NjYhQMzcj6RD9ycgdjyan/IKJAbvzB
9VPUiBcBgMiAYj2psTvrKIYmnCALTv281Ir3Gq52Bl9pr46Bsx+FuQeIRPPwfLQ2
zxuiUh0ghJ/Qln3z2XUBrzJjr3ScKapYZSXAEy25MwGTHVlDt6Wj0gAIS0WUYOSj
Wu6SIj1+VHL0vj6X8e2XoaCPbibzy1LfEbRhXHFr+lT285XdSo2YCImF2SltAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlQ3VqLQ4/f26dIyTjvpbB+EzeX0wHwYDVR0j
BBgwFoAUdGQbjq1pGkkM+s45MrrZxABvLmcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUpGd2FoZVZIcTZCaHltYTVKYjVzSE1NRVFGcGFzTFZoNFdWaldwMm1R
QjIvMC83NDY0MUI4RUFENjkxQTQ5MENGQUNFMzkzMkJBRDlDNDAwNkYyRTY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0NjQxQjhFQUQ2OTFBNDkw
Q0ZBQ0UzOTMyQkFEOUM0MDA2RjJFNjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKRndhaGVWSHE2Qmh5bWE1SmI1c0hNTUVRRnBhc0xWaDRXVmpXcDJtUUIyLzAv
MzQzNTJlMzEzODM0MmUzMTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMzMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtuLgwDQYJKoZIhvcNAQELBQADggEBAHFnmwUB
3djd8FQvBfQFtCI+zsv2u3LVXGloYbobcxM3SLxqho3PlHR7DuxqKJIvl0wgOj8m
BC7Yai8khjSCucEhGrWXiuQRcqNMstA49VrLIR7rvg+3C0aLyc94i5VbvdRNB30/
7Nyp0TEEQ4+/usrnGEJ5pRedXYoJRS/BWFkilHxAf7l9BVP3qz4KEa0xySXZV6Wx
7E6qCwacOoXdSSuPiw1sH82RD2H+9HQrWO8Hx2h4ZQbciWgdGLb3oYTo4DqE1CGa
XDCTQwyygLW1tvbbIOv1w14HELOb65jV0VNTZHnqKkPuBYs3G67XNivxI1ItvpB1
M14+SNdytpPgXnY=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:17 2024 by rpki-client on console-fra.rpki-client.org