Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233342e302f32332d3233203d3e20323637313737.roa
File:                     34352e3233302e3233342e302f32332d3233203d3e20323637313737.roa (raw, json)
Hash identifier:          raAH4EbsY1rpWbGWZLTZsD8Ejf280waYGLHNlBBn39A=
Subject key identifier:   EA:3B:4A:74:61:46:62:C0:D9:69:A3:0D:50:A6:BF:A7:27:06:5C:BE
Certificate issuer:       /CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
Certificate serial:       4642395F7D0CD6C92BF2D9279AFD6773D65098E6
Authority key identifier: 76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233342e302f32332d3233203d3e20323637313737.roa
Signing time:             Thu 04 Apr 2024 13:05:39 +0000
ROA not before:           Thu 04 Apr 2024 13:00:39 +0000
ROA not after:            Thu 03 Apr 2025 13:05:39 +0000
asID:                     267177
IP address blocks:        45.230.234.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl
                          rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:42:39:5f:7d:0c:d6:c9:2b:f2:d9:27:9a:fd:67:73:d6:50:98:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
        Validity
            Not Before: Apr  4 13:00:39 2024 GMT
            Not After : Apr  3 13:05:39 2025 GMT
        Subject: CN=EA3B4A74614662C0D969A30D50A6BFA727065CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:11:74:7d:07:fd:5c:a1:b1:8d:c2:b7:6b:b2:
                    5e:8c:62:a3:5c:ae:87:51:27:67:68:36:04:9e:cf:
                    72:f5:0c:bc:61:9b:f3:4e:83:17:99:e8:04:41:a6:
                    dc:45:2d:b2:56:fa:89:bb:64:95:23:09:20:8c:35:
                    a9:4c:28:1b:c7:30:0d:f1:10:1f:89:74:8d:bc:cc:
                    32:88:c2:7b:79:37:ac:16:1b:69:af:a6:ac:a9:38:
                    59:a9:51:f2:b9:53:72:86:9b:d6:8f:fa:73:bf:b2:
                    f7:a7:b3:c3:fa:ee:cd:0f:a3:af:18:61:b9:b9:8b:
                    47:14:77:10:7f:fc:b6:fb:fe:22:51:4f:d7:f9:b4:
                    54:75:68:88:60:7d:d5:07:f8:37:37:2e:4b:36:c0:
                    8c:40:4a:a0:49:ac:1b:f6:01:5c:67:d7:e1:cb:8a:
                    61:d4:7d:30:23:fe:4c:a4:3d:95:35:4f:94:ba:bf:
                    a3:e8:1a:e3:95:eb:c3:1f:ae:0d:13:3f:34:fb:32:
                    9e:52:d2:fc:49:8e:24:ba:24:a2:f6:54:a3:11:ee:
                    e9:c4:dd:d4:02:33:38:9b:02:c3:14:b0:98:fe:91:
                    c1:1a:28:54:75:c4:4f:a5:c7:d8:56:9f:a7:21:38:
                    ca:64:71:74:1f:e4:45:db:dc:1b:1b:dd:e6:8b:d7:
                    0e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3B:4A:74:61:46:62:C0:D9:69:A3:0D:50:A6:BF:A7:27:06:5C:BE
            X509v3 Authority Key Identifier:
                keyid:76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233342e302f32332d3233203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:9c:8d:1d:03:f4:aa:af:0c:c0:b8:f9:43:c7:78:17:69:1b:
         0c:8e:f1:77:5c:ea:9d:f2:ad:54:29:31:5e:35:f6:c9:8e:36:
         50:4b:0c:b1:54:73:76:99:6f:c4:47:6f:e3:ba:78:ea:95:5a:
         df:67:9b:4d:1d:80:7e:ad:bd:4f:ad:25:82:e8:bd:30:c1:f1:
         70:8a:6d:a1:1a:01:db:8f:c0:2c:7d:a8:bc:ce:3a:1a:45:3d:
         37:c5:84:e5:eb:aa:01:1d:7f:b2:40:f9:1f:22:ea:fe:43:18:
         05:5c:27:8b:a5:cb:0a:59:0e:1d:b6:88:b3:3e:b9:91:4f:2c:
         c1:57:0b:28:3e:ba:34:07:a4:0d:b3:9a:da:72:b2:65:4c:27:
         ec:9a:b8:39:9a:45:5e:24:19:59:62:44:0b:86:29:be:23:f8:
         90:43:95:40:26:4d:ba:03:f2:cf:d1:c8:67:50:73:f3:29:bc:
         14:2d:28:81:12:ab:aa:0a:ee:b6:67:7d:31:7d:85:09:00:5c:
         f2:f0:21:df:06:72:56:3d:53:16:67:03:6a:44:e2:f1:fd:c8:
         18:41:5a:8c:df:69:0c:ca:58:6f:ff:19:0f:83:ae:2c:7d:8a:
         39:77:88:87:9b:bb:14:bc:d1:fa:23:f5:d5:06:c5:08:41:e2:
         1a:27:e5:6e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURkI5X30M1skr8tknmv1nc9ZQmOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZFQTYxQkI5REFGM0Y1QjU4ODg2Q0MzRTNGNkExN0VC
QkRGRTBBMjAeFw0yNDA0MDQxMzAwMzlaFw0yNTA0MDMxMzA1MzlaMDMxMTAvBgNV
BAMTKEVBM0I0QTc0NjE0NjYyQzBEOTY5QTMwRDUwQTZCRkE3MjcwNjVDQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoEXR9B/1cobGNwrdrsl6MYqNc
rodRJ2doNgSez3L1DLxhm/NOgxeZ6ARBptxFLbJW+om7ZJUjCSCMNalMKBvHMA3x
EB+JdI28zDKIwnt5N6wWG2mvpqypOFmpUfK5U3KGm9aP+nO/svens8P67s0Po68Y
Ybm5i0cUdxB//Lb7/iJRT9f5tFR1aIhgfdUH+Dc3Lks2wIxASqBJrBv2AVxn1+HL
imHUfTAj/kykPZU1T5S6v6PoGuOV68Mfrg0TPzT7Mp5S0vxJjiS6JKL2VKMR7unE
3dQCMzibAsMUsJj+kcEaKFR1xE+lx9hWn6chOMpkcXQf5EXb3Bsb3eaL1w4BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6jtKdGFGYsDZaaMNUKa/pycGXL4wHwYDVR0j
BBgwFoAUduphu52vP1tYiGzD4/ahfrvf4KIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05DUm5qTU5VUzhqZlN5RmluTVpQeHZtdmNhdEpabW9Dc3ZjQXdmbmJl
MVcvMS83NkVBNjFCQjlEQUYzRjVCNTg4ODZDQzNFM0Y2QTE3RUJCREZFMEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2RUE2MUJCOURBRjNGNUI1
ODg4NkNDM0UzRjZBMTdFQkJERkUwQTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NOQ1Juak1OVVM4amZTeUZpbk1aUHh2bXZjYXRKWm1vQ3N2Y0F3Zm5iZTFXLzEv
MzQzNTJlMzIzMzMwMmUzMjMzMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt5uowDQYJKoZIhvcNAQELBQADggEBAD6cjR0D
9KqvDMC4+UPHeBdpGwyO8Xdc6p3yrVQpMV419smONlBLDLFUc3aZb8RHb+O6eOqV
Wt9nm00dgH6tvU+tJYLovTDB8XCKbaEaAduPwCx9qLzOOhpFPTfFhOXrqgEdf7JA
+R8i6v5DGAVcJ4ulywpZDh22iLM+uZFPLMFXCyg+ujQHpA2zmtpysmVMJ+yauDma
RV4kGVliRAuGKb4j+JBDlUAmTboD8s/RyGdQc/MpvBQtKIESq6oK7rZnfTF9hQkA
XPLwId8GclY9UxZnA2pE4vH9yBhBWozfaQzKWG//GQ+Drix9ijl3iIebuxS80foj
9dUGxQhB4hon5W4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:14 2024 by rpki-client on console-ams.rpki-client.org