Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/34352e3137382e37362e302f32322d3234203d3e20323639303930.roa
File:                     34352e3137382e37362e302f32322d3234203d3e20323639303930.roa (raw, json)
Hash identifier:          U6eZOVmpL5Dc1YJYioMxWkekB2pSO8NZla9uC+4know=
Subject key identifier:   FC:EE:9A:56:C1:28:6B:D9:5E:08:7F:5C:A5:5C:71:CB:FB:0A:4B:07
Certificate issuer:       /CN=0965831636AD23443B286222863C94DF79675E48
Certificate serial:       2E0881E595B78A1CCDB82A84BCB10CC8BB128045
Authority key identifier: 09:65:83:16:36:AD:23:44:3B:28:62:22:86:3C:94:DF:79:67:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0965831636AD23443B286222863C94DF79675E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/34352e3137382e37362e302f32322d3234203d3e20323639303930.roa
Signing time:             Mon 15 Jul 2024 22:37:27 +0000
ROA not before:           Mon 15 Jul 2024 22:32:27 +0000
ROA not after:            Mon 14 Jul 2025 22:37:27 +0000
asID:                     269090
IP address blocks:        45.178.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/0965831636AD23443B286222863C94DF79675E48.crl
                          rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/0965831636AD23443B286222863C94DF79675E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0965831636AD23443B286222863C94DF79675E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:08:81:e5:95:b7:8a:1c:cd:b8:2a:84:bc:b1:0c:c8:bb:12:80:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0965831636AD23443B286222863C94DF79675E48
        Validity
            Not Before: Jul 15 22:32:27 2024 GMT
            Not After : Jul 14 22:37:27 2025 GMT
        Subject: CN=FCEE9A56C1286BD95E087F5CA55C71CBFB0A4B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:ce:7a:c3:f1:6b:fb:2b:d8:38:1c:8f:fc:
                    9d:4b:1b:03:d2:ef:18:80:b1:af:01:51:a1:ce:49:
                    e5:f9:f8:9d:22:43:a6:3a:4d:96:87:7d:7b:a2:d3:
                    f0:21:89:83:1f:b2:c1:15:e6:2c:1e:d2:b2:81:c9:
                    cf:ba:9b:56:0e:e3:a6:5d:43:d3:14:c9:66:f6:a2:
                    92:c4:6c:00:82:b9:3b:09:7c:ce:60:1b:42:25:37:
                    d3:0c:c6:8e:b6:7a:0c:21:0e:44:3a:74:ec:da:e1:
                    8e:08:fc:65:ab:e9:8a:75:c9:02:e3:df:cc:6c:83:
                    a8:08:cb:e7:0c:af:a0:4c:b3:c0:05:39:11:d7:79:
                    3d:9d:ea:33:b4:51:4b:ab:6a:12:5e:c1:19:2f:74:
                    25:d9:62:d1:3d:ad:ff:92:1e:4b:b7:aa:64:37:40:
                    b0:ea:8c:2f:f0:37:88:e8:b5:88:20:f8:53:9b:57:
                    00:20:d0:47:a3:d9:46:b0:ab:bf:c5:04:1c:b3:4a:
                    8b:7d:4b:81:76:dc:9e:e3:29:65:31:1f:3a:1a:3e:
                    90:3e:07:db:aa:72:a1:a2:56:14:ac:c3:7c:ad:0e:
                    61:40:7d:0f:0a:f5:40:c3:8c:8a:65:bd:98:49:3d:
                    33:b4:e6:1f:af:d0:28:75:b8:ea:ba:5e:62:11:8d:
                    29:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EE:9A:56:C1:28:6B:D9:5E:08:7F:5C:A5:5C:71:CB:FB:0A:4B:07
            X509v3 Authority Key Identifier:
                keyid:09:65:83:16:36:AD:23:44:3B:28:62:22:86:3C:94:DF:79:67:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/0965831636AD23443B286222863C94DF79675E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0965831636AD23443B286222863C94DF79675E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/34352e3137382e37362e302f32322d3234203d3e20323639303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:23:02:35:51:e7:59:71:1b:f2:17:78:c6:05:34:30:1d:be:
         a1:7d:3c:08:7c:8c:03:e1:fd:d0:8a:a0:1e:78:4a:2c:72:d4:
         0f:f7:72:9c:3b:9f:d1:7e:f5:e3:3f:f2:e0:57:e7:0d:cf:b1:
         8f:a3:b3:af:c6:9f:01:52:46:e6:d0:79:16:ca:28:73:e8:21:
         b1:90:e6:06:ab:d8:a5:78:ca:12:e5:23:01:35:08:b8:4a:a5:
         28:31:c8:d1:92:1b:cd:d9:0f:78:14:ed:76:15:fb:bb:ce:3d:
         e5:6c:64:4b:28:8c:ee:18:59:90:70:6c:46:46:fb:eb:58:cc:
         64:2e:77:b4:7d:c9:17:7f:77:84:d8:52:8f:97:1e:5b:1e:5d:
         2b:1d:c0:84:f6:9d:cc:8e:63:c3:60:3b:9d:32:00:a3:a0:e2:
         71:51:3f:42:4a:76:f3:07:c9:f3:dc:71:2c:3e:71:d3:76:52:
         80:b1:3d:f0:82:4c:e5:78:ac:5b:4e:c0:ae:28:99:74:b2:c1:
         5b:00:cd:2a:0e:1c:45:49:ee:72:de:62:9d:5b:62:b8:48:94:
         bc:cc:9e:c2:2c:bd:54:46:55:86:79:09:a8:13:49:60:f8:fb:
         a1:1f:b4:b4:08:87:4b:c8:f6:2a:c1:30:44:40:3a:2c:f1:35:
         c9:b0:73:98
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULgiB5ZW3ihzNuCqEvLEMyLsSgEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk2NTgzMTYzNkFEMjM0NDNCMjg2MjIyODYzQzk0REY3
OTY3NUU0ODAeFw0yNDA3MTUyMjMyMjdaFw0yNTA3MTQyMjM3MjdaMDMxMTAvBgNV
BAMTKEZDRUU5QTU2QzEyODZCRDk1RTA4N0Y1Q0E1NUM3MUNCRkIwQTRCMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1M56w/Fr+yvYOByP/J1LGwPS
7xiAsa8BUaHOSeX5+J0iQ6Y6TZaHfXui0/AhiYMfssEV5iwe0rKByc+6m1YO46Zd
Q9MUyWb2opLEbACCuTsJfM5gG0IlN9MMxo62egwhDkQ6dOza4Y4I/GWr6Yp1yQLj
38xsg6gIy+cMr6BMs8AFORHXeT2d6jO0UUurahJewRkvdCXZYtE9rf+SHku3qmQ3
QLDqjC/wN4jotYgg+FObVwAg0Eej2Uawq7/FBByzSot9S4F23J7jKWUxHzoaPpA+
B9uqcqGiVhSsw3ytDmFAfQ8K9UDDjIplvZhJPTO05h+v0Ch1uOq6XmIRjSmJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/O6aVsEoa9leCH9cpVxxy/sKSwcwHwYDVR0j
BBgwFoAUCWWDFjatI0Q7KGIihjyU33lnXkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFRLODNyVDcxcmZYak44RHpUN0FLdDhxRlh1dnU1SGVLS2h0emczOVFv
a2UvMC8wOTY1ODMxNjM2QUQyMzQ0M0IyODYyMjI4NjNDOTRERjc5Njc1RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5NjU4MzE2MzZBRDIzNDQz
QjI4NjIyMjg2M0M5NERGNzk2NzVFNDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RUSzgzclQ3MXJmWGpOOER6VDdBS3Q4cUZYdXZ1NUhlS0todHpnMzlRb2tlLzAv
MzQzNTJlMzEzNzM4MmUzNzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzAzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbJMMA0GCSqGSIb3DQEBCwUAA4IBAQBkIwI1UedZ
cRvyF3jGBTQwHb6hfTwIfIwD4f3QiqAeeEosctQP93KcO5/RfvXjP/LgV+cNz7GP
o7Ovxp8BUkbm0HkWyihz6CGxkOYGq9ileMoS5SMBNQi4SqUoMcjRkhvN2Q94FO12
Ffu7zj3lbGRLKIzuGFmQcGxGRvvrWMxkLne0fckXf3eE2FKPlx5bHl0rHcCE9p3M
jmPDYDudMgCjoOJxUT9CSnbzB8nz3HEsPnHTdlKAsT3wgkzleKxbTsCuKJl0ssFb
AM0qDhxFSe5y3mKdW2K4SJS8zJ7CLL1URlWGeQmoE0lg+PuhH7S0CIdLyPYqwTBE
QDos8TXJsHOY
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:57 2024 by rpki-client on console-fra.rpki-client.org