Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/34352e3137392e3231322e302f32322d3332203d3e20323639313033.roa
File:                     34352e3137392e3231322e302f32322d3332203d3e20323639313033.roa (raw, json)
Hash identifier:          bF8jdgP21ds28/Sm19mkH3KFquAJR3FIxHkXVV451es=
Subject key identifier:   17:2E:42:0F:D8:91:B5:B5:1F:3F:2A:AE:84:A9:13:D2:92:C0:B4:01
Certificate issuer:       /CN=C37D443ACE2088B9542008EA9127A8D95802391D
Certificate serial:       4BD8D7608C86F750086427FEDB4D2546642D3B35
Authority key identifier: C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/34352e3137392e3231322e302f32322d3332203d3e20323639313033.roa
Signing time:             Mon 14 Oct 2024 17:05:34 +0000
ROA not before:           Mon 14 Oct 2024 17:00:34 +0000
ROA not after:            Mon 13 Oct 2025 17:05:34 +0000
asID:                     269103
IP address blocks:        45.179.212.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.crl
                          rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d8:d7:60:8c:86:f7:50:08:64:27:fe:db:4d:25:46:64:2d:3b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37D443ACE2088B9542008EA9127A8D95802391D
        Validity
            Not Before: Oct 14 17:00:34 2024 GMT
            Not After : Oct 13 17:05:34 2025 GMT
        Subject: CN=172E420FD891B5B51F3F2AAE84A913D292C0B401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:11:8d:3d:0f:6c:25:df:4f:16:12:44:09:
                    28:9a:c6:3c:d3:6d:45:6e:08:9c:55:16:b6:dc:f6:
                    81:1d:e1:61:a4:0e:07:04:c5:4e:6a:a8:ac:36:d8:
                    3e:66:10:a9:bc:56:ef:ca:4c:ef:b3:e5:75:d0:63:
                    94:37:e8:bd:1e:82:74:ef:ce:04:8a:f7:01:d6:03:
                    83:c4:1d:e4:f4:de:b6:df:0a:e0:dd:56:ed:56:ac:
                    32:d9:5f:36:87:3e:11:46:c2:89:7b:a9:a4:12:02:
                    59:99:e3:f9:5c:46:86:cd:2b:1a:4c:ea:1f:a3:f5:
                    28:3c:bf:10:76:9e:42:70:be:24:47:44:2f:80:bf:
                    de:97:7a:c4:e5:4a:0e:ca:e3:0d:68:9f:a8:24:2f:
                    99:49:6f:99:53:0d:44:fb:28:c8:c3:68:02:ac:2d:
                    d8:a1:8e:d9:c4:72:cb:d5:5e:e4:49:a5:7a:a0:ef:
                    ab:d3:5b:ee:bc:7f:10:a9:5b:24:b2:d7:3a:64:b0:
                    c2:d4:8c:d9:e4:ad:2f:cd:04:f2:6f:02:17:74:5d:
                    46:45:bd:12:e5:9e:f9:dc:02:eb:70:8b:f5:80:eb:
                    a3:b6:2c:03:8c:6d:f0:88:38:e1:a9:65:24:d6:86:
                    e3:4b:fd:c8:a0:7a:22:a9:df:ee:0c:12:2e:1e:47:
                    d9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2E:42:0F:D8:91:B5:B5:1F:3F:2A:AE:84:A9:13:D2:92:C0:B4:01
            X509v3 Authority Key Identifier:
                keyid:C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/34352e3137392e3231322e302f32322d3332203d3e20323639313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:6c:46:fc:fb:96:62:ce:63:95:62:fa:b4:cf:83:e5:f6:b4:
         cf:21:39:c8:79:22:f2:ca:c4:e5:fb:33:10:4a:59:56:39:ff:
         53:9f:0c:be:f3:aa:3d:b8:68:ff:3c:85:2d:57:b8:3f:99:86:
         d4:d4:8c:e5:86:47:8c:42:a7:0d:b9:b7:9f:40:b5:52:42:66:
         02:1b:6f:42:29:4a:91:ff:c3:d0:5e:a0:04:62:57:3e:ee:d5:
         42:78:4d:b2:0e:12:ce:a6:d7:13:19:5b:f5:4a:db:12:b3:13:
         fa:dd:8d:24:a8:77:87:41:0a:0d:1c:0d:56:a6:c1:6b:cf:78:
         42:05:89:fa:6b:97:39:4d:fd:ed:bc:7a:da:f3:54:84:90:d0:
         46:02:ad:f4:7c:e3:f9:4b:23:81:ed:9f:28:b7:e7:61:d6:58:
         fb:16:b2:68:d2:4a:ec:ac:0d:02:04:ab:d4:c7:94:7b:23:22:
         b4:6b:44:14:41:14:82:7a:b0:90:a3:9f:57:58:af:7e:5d:fd:
         d6:80:53:35:cd:48:78:d3:0e:68:95:56:10:78:3d:6e:5c:e6:
         b7:32:8d:1c:50:6d:d8:d4:aa:f3:39:3f:cb:b3:e1:0d:10:94:
         6a:16:aa:9e:bf:d8:82:01:44:6b:f4:ec:e8:62:30:81:c6:b1:
         2b:8d:c6:b5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUS9jXYIyG91AIZCf+200lRmQtOzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3RDQ0M0FDRTIwODhCOTU0MjAwOEVBOTEyN0E4RDk1
ODAyMzkxRDAeFw0yNDEwMTQxNzAwMzRaFw0yNTEwMTMxNzA1MzRaMDMxMTAvBgNV
BAMTKDE3MkU0MjBGRDg5MUI1QjUxRjNGMkFBRTg0QTkxM0QyOTJDMEI0MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ihGNPQ9sJd9PFhJECSiaxjzT
bUVuCJxVFrbc9oEd4WGkDgcExU5qqKw22D5mEKm8Vu/KTO+z5XXQY5Q36L0egnTv
zgSK9wHWA4PEHeT03rbfCuDdVu1WrDLZXzaHPhFGwol7qaQSAlmZ4/lcRobNKxpM
6h+j9Sg8vxB2nkJwviRHRC+Av96XesTlSg7K4w1on6gkL5lJb5lTDUT7KMjDaAKs
LdihjtnEcsvVXuRJpXqg76vTW+68fxCpWySy1zpksMLUjNnkrS/NBPJvAhd0XUZF
vRLlnvncAutwi/WA66O2LAOMbfCIOOGpZSTWhuNL/cigeiKp3+4MEi4eR9kNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFy5CD9iRtbUfPyquhKkT0pLAtAEwHwYDVR0j
BBgwFoAUw31EOs4giLlUIAjqkSeo2VgCOR0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkM4ZlBmVDZNVkZtTWp3V0JQMk5CM0xrYm81M0RLOTM5ZFlram5TQk02
c3UvMC9DMzdENDQzQUNFMjA4OEI5NTQyMDA4RUE5MTI3QThEOTU4MDIzOTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzN0Q0NDNBQ0UyMDg4Qjk1
NDIwMDhFQTkxMjdBOEQ5NTgwMjM5MUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JDOGZQZlQ2TVZGbU1qd1dCUDJOQjNMa2JvNTNESzkzOWRZa2puU0JNNnN1LzAv
MzQzNTJlMzEzNzM5MmUzMjMxMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzMTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIts9QwDQYJKoZIhvcNAQELBQADggEBAEdsRvz7
lmLOY5Vi+rTPg+X2tM8hOch5IvLKxOX7MxBKWVY5/1OfDL7zqj24aP88hS1XuD+Z
htTUjOWGR4xCpw25t59AtVJCZgIbb0IpSpH/w9BeoARiVz7u1UJ4TbIOEs6m1xMZ
W/VK2xKzE/rdjSSod4dBCg0cDVamwWvPeEIFifprlzlN/e28etrzVISQ0EYCrfR8
4/lLI4Htnyi352HWWPsWsmjSSuysDQIEq9THlHsjIrRrRBRBFIJ6sJCjn1dYr35d
/daAUzXNSHjTDmiVVhB4PW5c5rcyjRxQbdjUqvM5P8uz4Q0QlGoWqp6/2IIBRGv0
7OhiMIHGsSuNxrU=
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:43 2024 by rpki-client on console-ams.rpki-client.org