Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233332e302f32342d3234203d3e20323637313737.roa
File:                     34352e3233302e3233332e302f32342d3234203d3e20323637313737.roa (raw, json)
Hash identifier:          Myryws5p9y+vDCTuFba8MnHcPjvDEJPjYcJKyFUKEpw=
Subject key identifier:   8B:B1:2A:04:08:63:EA:76:B2:E4:62:16:B6:42:D2:C3:90:EA:74:74
Certificate issuer:       /CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
Certificate serial:       63ED66B210EC987B431129BD10010273194BE2C9
Authority key identifier: 76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233332e302f32342d3234203d3e20323637313737.roa
Signing time:             Thu 04 Apr 2024 13:05:39 +0000
ROA not before:           Thu 04 Apr 2024 13:00:39 +0000
ROA not after:            Thu 03 Apr 2025 13:05:39 +0000
asID:                     267177
IP address blocks:        45.230.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl
                          rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ed:66:b2:10:ec:98:7b:43:11:29:bd:10:01:02:73:19:4b:e2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
        Validity
            Not Before: Apr  4 13:00:39 2024 GMT
            Not After : Apr  3 13:05:39 2025 GMT
        Subject: CN=8BB12A040863EA76B2E46216B642D2C390EA7474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:8e:62:79:18:70:ff:82:36:13:f8:22:d7:
                    51:9c:bb:e6:81:7a:5a:70:40:99:24:29:b9:01:a5:
                    73:be:69:c4:15:70:99:41:2a:b7:ec:d4:a7:5d:9e:
                    a2:4c:06:26:f8:de:31:97:4d:54:60:74:8e:bd:dd:
                    bf:d6:c2:bd:ed:23:26:57:f2:ee:7f:67:11:49:ab:
                    9a:74:2f:74:23:89:3d:cc:1e:6b:a9:92:e9:8e:16:
                    9a:49:33:9a:a5:f2:4c:c4:4e:7f:85:7a:e2:10:8b:
                    73:be:32:fe:42:04:1c:a2:a0:1e:ca:b3:ad:b8:49:
                    ed:34:9c:35:4f:62:f8:3c:f0:52:4e:78:05:17:52:
                    ab:42:1a:12:08:4f:5c:79:41:9b:c7:f7:f6:39:32:
                    d1:2c:56:db:c5:2a:8e:9a:c4:c3:18:2c:e2:58:ec:
                    17:00:4e:f4:d0:10:2f:df:da:bc:6c:cc:37:f2:00:
                    47:84:72:a5:cc:fe:77:7b:ae:41:0d:66:b0:ae:f4:
                    57:ef:82:86:95:83:fa:17:82:67:ce:66:6d:22:2c:
                    39:2a:2a:c6:dc:9e:ea:9d:ef:93:d4:ae:f6:03:7b:
                    71:bb:13:e6:35:c6:15:35:9f:4a:d6:93:76:bb:b2:
                    b8:59:da:9d:fc:2c:0b:fd:90:a1:f3:17:e9:15:da:
                    ec:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B1:2A:04:08:63:EA:76:B2:E4:62:16:B6:42:D2:C3:90:EA:74:74
            X509v3 Authority Key Identifier:
                keyid:76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233332e302f32342d3234203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:b7:e0:63:06:6d:20:a2:a4:08:85:2d:c4:46:56:ef:c5:73:
         be:32:1e:64:0b:10:32:7e:45:0b:6e:95:5c:d9:67:6f:77:e7:
         54:cb:73:ac:df:b6:fc:c5:e4:b3:5f:1e:fb:04:18:1f:b3:e0:
         49:8e:38:13:a7:4f:b2:17:2b:94:1e:f1:cb:d9:36:c2:77:7f:
         7d:5e:88:53:75:d4:7a:6b:c4:f3:66:4d:91:7e:19:df:4c:9a:
         6c:ee:cc:a8:5b:0b:10:d6:ba:c7:dc:c3:4a:ab:c9:dd:9a:b3:
         2b:d0:1a:f3:51:f2:4a:6f:55:23:14:dd:8b:00:34:0d:f9:91:
         65:d1:4f:e0:83:56:63:08:16:84:1d:2f:46:03:66:8e:07:5f:
         ed:35:40:90:e3:5b:27:6a:ab:df:6e:7b:72:7a:35:d9:da:24:
         b8:e6:86:f8:90:a4:00:03:5f:ed:b6:7e:16:38:d2:4c:cd:ac:
         45:a4:93:43:b1:ea:75:55:bb:dc:e4:5e:51:75:a2:bb:7b:d1:
         3c:42:80:20:57:ce:04:55:57:82:a9:7e:28:0f:3d:35:97:72:
         b8:4f:43:03:9f:84:91:e4:82:ab:58:db:b0:fb:9a:ad:db:bd:
         50:c1:c5:a2:ec:20:19:fb:9e:fb:9c:33:d5:86:c7:90:03:9e:
         0b:68:19:2c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY+1mshDsmHtDESm9EAECcxlL4skwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZFQTYxQkI5REFGM0Y1QjU4ODg2Q0MzRTNGNkExN0VC
QkRGRTBBMjAeFw0yNDA0MDQxMzAwMzlaFw0yNTA0MDMxMzA1MzlaMDMxMTAvBgNV
BAMTKDhCQjEyQTA0MDg2M0VBNzZCMkU0NjIxNkI2NDJEMkMzOTBFQTc0NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0mY5ieRhw/4I2E/gi11Gcu+aB
elpwQJkkKbkBpXO+acQVcJlBKrfs1KddnqJMBib43jGXTVRgdI693b/Wwr3tIyZX
8u5/ZxFJq5p0L3QjiT3MHmupkumOFppJM5ql8kzETn+FeuIQi3O+Mv5CBByioB7K
s624Se00nDVPYvg88FJOeAUXUqtCGhIIT1x5QZvH9/Y5MtEsVtvFKo6axMMYLOJY
7BcATvTQEC/f2rxszDfyAEeEcqXM/nd7rkENZrCu9FfvgoaVg/oXgmfOZm0iLDkq
Ksbcnuqd75PUrvYDe3G7E+Y1xhU1n0rWk3a7srhZ2p38LAv9kKHzF+kV2uwHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUi7EqBAhj6nay5GIWtkLSw5DqdHQwHwYDVR0j
BBgwFoAUduphu52vP1tYiGzD4/ahfrvf4KIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05DUm5qTU5VUzhqZlN5RmluTVpQeHZtdmNhdEpabW9Dc3ZjQXdmbmJl
MVcvMS83NkVBNjFCQjlEQUYzRjVCNTg4ODZDQzNFM0Y2QTE3RUJCREZFMEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2RUE2MUJCOURBRjNGNUI1
ODg4NkNDM0UzRjZBMTdFQkJERkUwQTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NOQ1Juak1OVVM4amZTeUZpbk1aUHh2bXZjYXRKWm1vQ3N2Y0F3Zm5iZTFXLzEv
MzQzNTJlMzIzMzMwMmUzMjMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt5ukwDQYJKoZIhvcNAQELBQADggEBADu34GMG
bSCipAiFLcRGVu/Fc74yHmQLEDJ+RQtulVzZZ29351TLc6zftvzF5LNfHvsEGB+z
4EmOOBOnT7IXK5Qe8cvZNsJ3f31eiFN11HprxPNmTZF+Gd9MmmzuzKhbCxDWusfc
w0qryd2asyvQGvNR8kpvVSMU3YsANA35kWXRT+CDVmMIFoQdL0YDZo4HX+01QJDj
Wydqq99ue3J6NdnaJLjmhviQpAADX+22fhY40kzNrEWkk0Ox6nVVu9zkXlF1ort7
0TxCgCBXzgRVV4KpfigPPTWXcrhPQwOfhJHkgqtY27D7mq3bvVDBxaLsIBn7nvuc
M9WGx5ADngtoGSw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:49 2024 by rpki-client on console-fra.rpki-client.org