Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa
File:                     34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa (raw, json)
Hash identifier:          pUyCQUWFen/5q7gNdiE4VYX+9hZC8w2GxRLFgKQCIR8=
Subject key identifier:   31:16:83:DD:F5:2D:50:2D:79:8B:8A:92:33:0A:0F:EC:96:33:FE:5B
Certificate issuer:       /CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35
Certificate serial:       3C9F61A22C7E0611BDF23A5118EF33FD970B2C44
Authority key identifier: 65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa
Signing time:             Thu 04 Apr 2024 10:48:51 +0000
ROA not before:           Thu 04 Apr 2024 10:43:51 +0000
ROA not after:            Thu 03 Apr 2025 10:48:51 +0000
asID:                     267229
IP address blocks:        45.231.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl
                          rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9f:61:a2:2c:7e:06:11:bd:f2:3a:51:18:ef:33:fd:97:0b:2c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35
        Validity
            Not Before: Apr  4 10:43:51 2024 GMT
            Not After : Apr  3 10:48:51 2025 GMT
        Subject: CN=311683DDF52D502D798B8A92330A0FEC9633FE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:dd:09:28:c9:ea:a8:f8:c7:f3:50:ff:a2:bd:
                    9d:ba:44:d3:eb:5f:2c:19:ef:da:e4:43:a8:34:e1:
                    24:2d:28:0e:99:00:db:63:95:ac:67:29:44:18:fe:
                    89:48:34:4f:3f:0a:0b:64:76:04:6c:ae:eb:77:02:
                    cb:69:92:51:9a:51:29:88:9b:cb:98:0b:9e:3f:ff:
                    0d:65:de:57:eb:44:9f:89:0c:3a:af:4e:8b:6c:60:
                    a9:fa:57:31:8b:42:7e:18:c0:ae:07:63:9c:05:27:
                    bf:35:08:7b:58:09:c4:1c:d6:44:18:c1:63:1e:b8:
                    66:3b:49:21:23:8a:e0:ee:d1:40:db:bd:3f:63:ed:
                    e5:be:c3:ed:7f:67:be:0f:40:9e:4a:00:59:26:d2:
                    3a:a7:b7:0d:12:ff:ff:83:b5:f8:5d:65:b5:43:0f:
                    e4:3f:b7:9b:24:51:34:d5:a2:03:2c:d1:b3:c8:8b:
                    87:79:85:0c:ec:2b:bb:40:74:20:fc:e5:89:ff:a2:
                    ab:8a:47:a7:47:e2:52:27:8d:22:52:85:d7:e2:2d:
                    c7:da:c6:82:a6:ca:5f:3f:50:74:dc:ac:da:ee:c7:
                    a5:68:a3:52:7f:d5:93:24:38:28:7f:e0:4b:d6:64:
                    c5:d0:c7:b5:1f:94:31:fa:fc:64:85:85:a6:7a:6e:
                    78:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:16:83:DD:F5:2D:50:2D:79:8B:8A:92:33:0A:0F:EC:96:33:FE:5B
            X509v3 Authority Key Identifier:
                keyid:65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:33:a5:b2:db:8f:a8:dc:b2:4c:7d:52:d5:2d:e0:cb:ad:9d:
         ce:cf:83:0c:02:ea:e7:f8:77:8e:d6:17:02:70:c6:6d:0c:04:
         a6:8c:c1:c6:5d:e3:0b:9b:65:aa:f6:58:99:af:27:c4:16:3e:
         34:b9:bd:62:cb:e7:a1:ca:c5:ab:c4:ef:6f:8d:30:cd:96:be:
         04:3e:4e:98:ce:85:36:c9:ad:ee:3b:e4:83:25:a9:c3:dc:7a:
         b1:38:df:14:55:25:39:d2:e7:64:4a:c3:81:84:9a:6b:d2:ee:
         8a:43:2c:87:46:3a:04:2f:f4:e6:59:db:35:b7:ba:e6:42:0d:
         2a:05:4f:7c:69:7b:14:26:aa:84:2e:fe:f2:45:25:f9:95:7a:
         a1:0e:87:bb:37:54:3e:62:9f:c6:db:8a:ea:1f:99:3a:a9:74:
         5b:7b:ba:29:f7:6a:1d:fc:f2:4e:a3:6d:fc:46:4e:bd:e2:9f:
         43:98:b9:90:0d:12:27:be:e7:65:c7:5c:fa:a9:1f:c3:76:ac:
         1a:8b:8d:22:be:5c:96:39:94:2b:af:f0:df:b2:d4:5c:0a:96:
         cd:b6:e5:99:29:f9:39:43:7c:67:40:43:f1:3f:18:48:cf:6c:
         bf:56:8c:9b:ce:4f:ec:a0:b5:06:a9:9a:85:7f:c6:cb:df:02:
         54:c3:6d:f8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPJ9hoix+BhG98jpRGO8z/ZcLLEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVEMjYxQURERTJEQThENUE4RDBGNzA5QzM4MEEzRDk2
RERDQkEzNTAeFw0yNDA0MDQxMDQzNTFaFw0yNTA0MDMxMDQ4NTFaMDMxMTAvBgNV
BAMTKDMxMTY4M0RERjUyRDUwMkQ3OThCOEE5MjMzMEEwRkVDOTYzM0ZFNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD23Qkoyeqo+MfzUP+ivZ26RNPr
XywZ79rkQ6g04SQtKA6ZANtjlaxnKUQY/olINE8/CgtkdgRsrut3AstpklGaUSmI
m8uYC54//w1l3lfrRJ+JDDqvTotsYKn6VzGLQn4YwK4HY5wFJ781CHtYCcQc1kQY
wWMeuGY7SSEjiuDu0UDbvT9j7eW+w+1/Z74PQJ5KAFkm0jqntw0S//+DtfhdZbVD
D+Q/t5skUTTVogMs0bPIi4d5hQzsK7tAdCD85Yn/oquKR6dH4lInjSJShdfiLcfa
xoKmyl8/UHTcrNrux6Voo1J/1ZMkOCh/4EvWZMXQx7UflDH6/GSFhaZ6bnjNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMRaD3fUtUC15i4qSMwoP7JYz/lswHwYDVR0j
BBgwFoAUZdJhrd4tqNWo0PcJw4Cj2W3cujUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQktacFQ0bUFKNkIyenRqeVdVazNqZ1FuWTRGTml4elNHb0xXR3pmdU5h
ZXcvMS82NUQyNjFBRERFMkRBOEQ1QThEMEY3MDlDMzgwQTNEOTZERENCQTM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1RDI2MUFEREUyREE4RDVB
OEQwRjcwOUMzODBBM0Q5NkREQ0JBMzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JLWnBUNG1BSjZCMnp0anlXVWszamdRblk0Rk5peHpTR29MV0d6ZnVOYWV3LzEv
MzQzNTJlMzIzMzMxMmUzMjM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMjMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt5/QwDQYJKoZIhvcNAQELBQADggEBALIzpbLb
j6jcskx9UtUt4Mutnc7PgwwC6uf4d47WFwJwxm0MBKaMwcZd4wubZar2WJmvJ8QW
PjS5vWLL56HKxavE72+NMM2WvgQ+TpjOhTbJre475IMlqcPcerE43xRVJTnS52RK
w4GEmmvS7opDLIdGOgQv9OZZ2zW3uuZCDSoFT3xpexQmqoQu/vJFJfmVeqEOh7s3
VD5in8bbiuofmTqpdFt7uin3ah388k6jbfxGTr3in0OYuZANEie+52XHXPqpH8N2
rBqLjSK+XJY5lCuv8N+y1FwKls225Zkp+TlDfGdAQ/E/GEjPbL9WjJvOT+ygtQap
moV/xsvfAlTDbfg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:18 2024 by rpki-client on console-fra.rpki-client.org