Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/34352e3138372e3233362e302f32322d3234203d3e20323639343839.roa
File:                     34352e3138372e3233362e302f32322d3234203d3e20323639343839.roa (raw, json)
Hash identifier:          R2aIUPU7WPZxyylsLuIaUn+Rf56XgWOoIgTKnwRwBoY=
Subject key identifier:   13:C9:7C:69:23:44:BA:3D:F6:54:03:CD:DE:12:D8:F9:32:5B:C3:6E
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       5AD8C3A19ED08B0CFDA5F7B7C2047D91F6EE61D7
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/34352e3138372e3233362e302f32322d3234203d3e20323639343839.roa
Signing time:             Mon 08 Jul 2024 19:43:04 +0000
ROA not before:           Mon 08 Jul 2024 19:38:04 +0000
ROA not after:            Mon 07 Jul 2025 19:43:04 +0000
asID:                     269489
IP address blocks:        45.187.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Nov 2024 21:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d8:c3:a1:9e:d0:8b:0c:fd:a5:f7:b7:c2:04:7d:91:f6:ee:61:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:04 2024 GMT
            Not After : Jul  7 19:43:04 2025 GMT
        Subject: CN=13C97C692344BA3DF65403CDDE12D8F9325BC36E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:71:28:68:70:29:df:f0:b0:e3:ed:e9:c2:
                    f4:17:13:4c:d8:07:3d:34:7c:ca:a1:04:f0:ab:cd:
                    5e:0a:0f:9d:13:c7:34:61:b9:f6:d2:17:45:8b:57:
                    c3:77:0d:c6:54:2e:01:58:dd:41:71:ba:87:aa:f4:
                    b9:e6:27:86:7f:6b:4e:90:26:4a:50:36:b4:5b:e7:
                    f2:cf:8c:97:fb:07:01:bc:b8:5d:a8:42:66:09:69:
                    a5:e3:6e:aa:f6:c2:6f:91:62:32:91:fa:0f:68:e1:
                    b6:41:57:97:07:72:87:d3:b2:a7:20:fc:29:49:11:
                    83:59:06:c3:09:fb:79:7d:fb:01:70:45:55:6a:fd:
                    33:e9:12:94:d4:d1:87:48:81:16:db:86:f1:22:05:
                    34:c8:62:c9:43:52:cf:e2:8a:3e:04:97:37:aa:3b:
                    81:2a:26:68:62:ea:90:a5:cf:8d:a3:05:8c:9f:1c:
                    ef:9b:2f:1b:9c:07:9c:62:d5:fe:77:0f:81:ff:99:
                    7e:4d:f2:64:06:83:36:93:77:5a:3b:4a:06:9e:23:
                    da:93:03:de:7f:b5:08:38:39:e5:ae:ab:b8:4c:17:
                    26:f2:da:e8:62:da:5d:f9:b1:ef:e1:a8:b7:dc:63:
                    00:b0:45:e7:c2:c2:38:38:c6:7b:3b:5f:89:cb:c0:
                    46:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C9:7C:69:23:44:BA:3D:F6:54:03:CD:DE:12:D8:F9:32:5B:C3:6E
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/34352e3138372e3233362e302f32322d3234203d3e20323639343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:50:f1:8e:98:1d:00:c3:f7:18:6d:ed:b1:dd:9a:c5:02:21:
         34:29:96:d6:83:c7:5e:52:37:3c:b4:e1:45:b3:9b:04:84:b8:
         fb:d2:ec:68:fe:f5:bd:c5:a4:fa:1f:6f:1c:90:57:54:c2:ca:
         6a:75:3e:4d:4f:1c:d4:5a:05:8c:bc:fa:06:03:cf:80:89:8d:
         88:a4:57:f2:e7:35:15:b3:67:f2:60:43:db:d2:cb:fc:93:59:
         2d:45:dc:69:47:74:bd:24:ce:ae:7b:93:3e:52:4e:54:56:e0:
         c1:03:71:35:36:d6:9d:1e:c1:32:96:6c:6d:43:b6:bf:7d:3b:
         a5:5b:92:b8:9d:47:56:c3:98:57:cb:a4:aa:89:4a:55:a0:a7:
         e1:cd:7a:b5:ba:87:91:20:3f:96:a5:6f:1e:49:cc:aa:b6:41:
         ce:74:14:39:f6:f0:73:1c:4e:b4:ec:25:2e:20:9d:9d:96:52:
         dc:fa:c2:8e:82:a9:8b:a7:10:d3:fb:4b:e8:4f:d3:83:98:71:
         5f:72:e3:07:f9:24:48:6b:79:2c:06:b0:a5:37:29:71:0f:b6:
         80:82:dd:09:ba:b9:d9:a0:c9:60:2b:6d:9e:a1:17:f3:c9:76:
         c9:76:6f:41:05:0c:c0:66:10:ab:e1:ab:d8:d5:c1:30:f9:30:
         6b:1f:82:2d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWtjDoZ7Qiwz9pfe3wgR9kfbuYdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERFQjkyRjMzMDdCMEU5NENDNzBEOUIyMUI1MEY2RkUy
MTM1Q0Q5ODAeFw0yNDA3MDgxOTM4MDRaFw0yNTA3MDcxOTQzMDRaMDMxMTAvBgNV
BAMTKDEzQzk3QzY5MjM0NEJBM0RGNjU0MDNDRERFMTJEOEY5MzI1QkMzNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQ3EoaHAp3/Cw4+3pwvQXE0zY
Bz00fMqhBPCrzV4KD50TxzRhufbSF0WLV8N3DcZULgFY3UFxuoeq9LnmJ4Z/a06Q
JkpQNrRb5/LPjJf7BwG8uF2oQmYJaaXjbqr2wm+RYjKR+g9o4bZBV5cHcofTsqcg
/ClJEYNZBsMJ+3l9+wFwRVVq/TPpEpTU0YdIgRbbhvEiBTTIYslDUs/iij4Elzeq
O4EqJmhi6pClz42jBYyfHO+bLxucB5xi1f53D4H/mX5N8mQGgzaTd1o7SgaeI9qT
A95/tQg4OeWuq7hMFyby2uhi2l35se/hqLfcYwCwRefCwjg4xns7X4nLwEY9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUE8l8aSNEuj32VAPN3hLY+TJbw24wHwYDVR0j
BBgwFoAUDeuS8zB7DpTMcNmyG1D2/iE1zZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMi8wREVCOTJGMzMwN0IwRTk0Q0M3MEQ5QjIxQjUwRjZGRTIxMzVDRDk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBERUI5MkYzMzA3QjBFOTRD
QzcwRDlCMjFCNTBGNkZFMjEzNUNEOTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzIv
MzQzNTJlMzEzODM3MmUzMjMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItu+wwDQYJKoZIhvcNAQELBQADggEBADhQ8Y6Y
HQDD9xht7bHdmsUCITQpltaDx15SNzy04UWzmwSEuPvS7Gj+9b3FpPofbxyQV1TC
ymp1Pk1PHNRaBYy8+gYDz4CJjYikV/LnNRWzZ/JgQ9vSy/yTWS1F3GlHdL0kzq57
kz5STlRW4MEDcTU21p0ewTKWbG1Dtr99O6VbkridR1bDmFfLpKqJSlWgp+HNerW6
h5EgP5albx5JzKq2Qc50FDn28HMcTrTsJS4gnZ2WUtz6wo6CqYunENP7S+hP04OY
cV9y4wf5JEhreSwGsKU3KXEPtoCC3Qm6udmgyWArbZ6hF/PJdsl2b0EFDMBmEKvh
q9jVwTD5MGsfgi0=
-----END CERTIFICATE-----
Generated at Sat Nov 16 02:55:59 2024 by rpki-client on console-ams.rpki-client.org