Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa
File:                     34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa (raw, json)
Hash identifier:          fFr/8JYWMgLz+osFkYDKs2BbUOyP9/9RCeJKhH/OIHA=
Subject key identifier:   FE:79:83:06:63:BD:50:77:36:92:FB:33:CF:A0:5D:2A:0C:1D:4A:E9
Certificate issuer:       /CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
Certificate serial:       21ABD12FEF3BB756ADAE44BA9C3E050B0FCA00AC
Authority key identifier: 38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa
Signing time:             Thu 04 Apr 2024 08:21:10 +0000
ROA not before:           Thu 04 Apr 2024 08:16:10 +0000
ROA not after:            Thu 03 Apr 2025 08:21:10 +0000
asID:                     268297
IP address blocks:        45.237.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl
                          rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ab:d1:2f:ef:3b:b7:56:ad:ae:44:ba:9c:3e:05:0b:0f:ca:00:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
        Validity
            Not Before: Apr  4 08:16:10 2024 GMT
            Not After : Apr  3 08:21:10 2025 GMT
        Subject: CN=FE79830663BD50773692FB33CFA05D2A0C1D4AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:af:4a:82:30:c1:4c:27:96:1d:8c:08:df:e9:
                    c0:e8:cc:9c:85:0e:1c:af:6c:5c:0d:7e:d4:b3:b3:
                    63:73:06:ab:b0:ec:ff:b7:d3:d4:de:c8:9a:1f:5c:
                    51:66:b6:34:b1:b4:2a:da:98:9b:82:21:d7:b0:c2:
                    7c:98:6f:67:c6:f3:e2:58:77:c0:a1:79:60:c5:1e:
                    fb:88:8c:7d:53:4f:94:42:45:01:9f:b3:f4:66:32:
                    f8:d6:16:19:47:80:be:b1:d7:6d:4a:9a:7c:d7:a6:
                    90:20:06:0e:1d:8d:2a:92:11:de:d0:a0:03:2e:5a:
                    68:fe:66:87:71:f7:ab:2b:a6:58:75:70:ef:fc:f6:
                    f0:c6:9d:1a:fc:ac:7f:01:1d:44:9c:8a:57:92:d0:
                    a8:04:06:f3:f9:20:09:4a:c2:19:50:ef:98:c4:56:
                    1d:dc:6f:22:ec:32:38:20:d0:68:a7:2c:15:7f:7a:
                    47:56:a3:94:d4:9d:c5:8b:f0:e8:34:1c:05:a1:09:
                    f9:e9:ce:7f:19:06:9c:7b:cb:9a:78:c4:5c:14:a0:
                    2e:12:77:47:07:b2:63:ce:ea:9d:92:93:35:8c:85:
                    76:4e:bd:3f:3c:15:f4:72:7b:de:c6:dd:de:95:5b:
                    e6:74:0c:2b:62:f6:e9:78:1b:4a:86:00:96:0a:da:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:79:83:06:63:BD:50:77:36:92:FB:33:CF:A0:5D:2A:0C:1D:4A:E9
            X509v3 Authority Key Identifier:
                keyid:38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:ec:d8:10:4b:2d:6f:0a:48:d2:07:32:c4:53:84:77:88:d5:
         e8:a9:49:23:38:18:53:45:d6:42:ac:e4:b9:a3:f6:78:a2:7b:
         22:f8:c2:58:da:8d:ac:55:82:b3:73:d9:39:cc:fa:05:22:54:
         f9:59:f2:a0:d4:31:b9:11:36:6a:09:28:63:0a:d2:7b:f3:99:
         9c:1f:fb:e5:4b:99:e1:39:60:35:90:d8:2d:ae:26:dd:1f:09:
         67:13:a7:04:8b:71:5c:57:e6:50:aa:e2:75:2a:e5:3a:82:47:
         53:cb:4e:27:13:09:e5:be:c8:ef:24:54:e8:84:87:36:6f:b2:
         c9:3a:f8:95:89:15:58:53:b0:f1:8f:8e:b9:12:d3:c8:83:d1:
         b3:ad:91:8f:9b:b8:d2:aa:45:00:c8:00:e5:40:a1:87:c8:a6:
         da:33:ed:31:a9:e8:46:9b:6c:1a:b5:18:92:68:c1:2c:73:e2:
         ce:f9:41:0b:80:5c:ea:f9:56:40:d0:fe:6f:0d:f6:0b:0e:03:
         06:b5:eb:66:09:a7:fb:7b:d1:9b:e2:9c:ca:13:22:b1:3e:2f:
         7f:3b:bf:ea:5d:30:d0:0e:3a:d4:50:9b:f8:6e:16:1d:a5:7b:
         c7:38:76:8d:b0:93:e0:09:95:87:44:9d:6a:99:9f:f0:85:41:
         23:19:3c:ab
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIavRL+87t1atrkS6nD4FCw/KAKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhDRDFGNzFDMkE4RTMzRDg4N0MwOTlFQkIwNDZBN0VC
MTBDNkMyMjAeFw0yNDA0MDQwODE2MTBaFw0yNTA0MDMwODIxMTBaMDMxMTAvBgNV
BAMTKEZFNzk4MzA2NjNCRDUwNzczNjkyRkIzM0NGQTA1RDJBMEMxRDRBRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDor0qCMMFMJ5YdjAjf6cDozJyF
DhyvbFwNftSzs2NzBquw7P+309TeyJofXFFmtjSxtCramJuCIdewwnyYb2fG8+JY
d8CheWDFHvuIjH1TT5RCRQGfs/RmMvjWFhlHgL6x121KmnzXppAgBg4djSqSEd7Q
oAMuWmj+Zodx96srplh1cO/89vDGnRr8rH8BHUScileS0KgEBvP5IAlKwhlQ75jE
Vh3cbyLsMjgg0GinLBV/ekdWo5TUncWL8Og0HAWhCfnpzn8ZBpx7y5p4xFwUoC4S
d0cHsmPO6p2SkzWMhXZOvT88FfRye97G3d6VW+Z0DCti9ul4G0qGAJYK2vR/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/nmDBmO9UHc2kvszz6BdKgwdSukwHwYDVR0j
BBgwFoAUOM0fccKo4z2IfAmeuwRqfrEMbCIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN0dENUMW9YWDRrWUNvdGFzenh1a3VydUwxTjNZTk1DNFhzcjhvRHY2
dFYvMS8zOENEMUY3MUMyQThFMzNEODg3QzA5OUVCQjA0NkE3RUIxMEM2QzIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4Q0QxRjcxQzJBOEUzM0Q4
ODdDMDk5RUJCMDQ2QTdFQjEwQzZDMjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzdHRDVDFvWFg0a1lDb3Rhc3p4dWt1cnVMMU4zWU5NQzRYc3I4b0R2NnRWLzEv
MzQzNTJlMzIzMzM3MmUzMjM0MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMjM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt7fgwDQYJKoZIhvcNAQELBQADggEBACDs2BBL
LW8KSNIHMsRThHeI1eipSSM4GFNF1kKs5Lmj9niieyL4wljajaxVgrNz2TnM+gUi
VPlZ8qDUMbkRNmoJKGMK0nvzmZwf++VLmeE5YDWQ2C2uJt0fCWcTpwSLcVxX5lCq
4nUq5TqCR1PLTicTCeW+yO8kVOiEhzZvssk6+JWJFVhTsPGPjrkS08iD0bOtkY+b
uNKqRQDIAOVAoYfIptoz7TGp6EabbBq1GJJowSxz4s75QQuAXOr5VkDQ/m8N9gsO
Awa162YJp/t70ZvinMoTIrE+L387v+pdMNAOOtRQm/huFh2le8c4do2wk+AJlYdE
nWqZn/CFQSMZPKs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:30 2024 by rpki-client on console-fra.rpki-client.org