Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/34352e3232352e31362e302f32322d3232203d3e20323636393230.roa
File:                     34352e3232352e31362e302f32322d3232203d3e20323636393230.roa (raw, json)
Hash identifier:          W2piEFnPzmhxpL9zerGPsTow291IZMh98uhvkn7Kp2U=
Subject key identifier:   3E:97:5C:2F:68:30:0A:B0:E1:18:B5:50:4D:02:1A:0E:7F:BF:BB:B0
Certificate issuer:       /CN=B7A663920AEF637DF79AA0A99AF488170644C538
Certificate serial:       7797AD920887EC01FACE5A060DB3B1D91B6FAE10
Authority key identifier: B7:A6:63:92:0A:EF:63:7D:F7:9A:A0:A9:9A:F4:88:17:06:44:C5:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/34352e3232352e31362e302f32322d3232203d3e20323636393230.roa
Signing time:             Thu 04 Apr 2024 21:15:13 +0000
ROA not before:           Thu 04 Apr 2024 21:10:13 +0000
ROA not after:            Thu 03 Apr 2025 21:15:13 +0000
asID:                     266920
IP address blocks:        45.225.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.crl
                          rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:97:ad:92:08:87:ec:01:fa:ce:5a:06:0d:b3:b1:d9:1b:6f:ae:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A663920AEF637DF79AA0A99AF488170644C538
        Validity
            Not Before: Apr  4 21:10:13 2024 GMT
            Not After : Apr  3 21:15:13 2025 GMT
        Subject: CN=3E975C2F68300AB0E118B5504D021A0E7FBFBBB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:26:f5:d5:aa:b7:ec:18:02:06:1e:e5:5f:
                    6d:4b:18:1d:65:9a:15:fc:0c:67:8e:27:25:70:b4:
                    3a:f6:a8:dd:1f:b5:27:46:39:74:00:e6:88:0c:10:
                    38:90:80:c3:03:df:e6:58:40:af:01:35:91:ae:4d:
                    a0:ad:6e:c5:ff:c1:02:ca:01:18:df:cc:fd:7b:4a:
                    26:d2:d6:02:09:a7:ba:fc:a7:70:52:45:50:ee:85:
                    e2:66:5a:bd:fc:e4:c3:e8:5b:34:25:27:c2:89:33:
                    4e:ee:00:92:7a:b6:c6:8a:3e:63:79:67:fc:8b:42:
                    6a:49:de:1e:28:c5:13:d5:c5:66:e9:db:c9:ce:33:
                    1a:55:cd:9c:47:17:0a:67:88:48:d5:16:35:7d:77:
                    62:f0:1d:eb:5b:74:67:44:4d:0e:22:da:16:32:4b:
                    c5:68:8f:17:f0:64:23:19:e4:d9:31:5c:b6:10:b1:
                    08:a2:82:05:f4:8e:68:7a:47:b7:6b:aa:af:09:d4:
                    4f:fc:c9:57:c4:2a:ad:e5:29:b1:27:38:fa:cc:fa:
                    e7:ef:08:29:33:84:b7:d7:53:2f:20:cb:f4:92:73:
                    42:ef:6b:37:56:19:cf:b2:ba:a6:8d:84:3a:93:79:
                    38:5a:ad:10:66:a7:37:ae:09:34:f0:ab:a6:7b:0d:
                    4c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:97:5C:2F:68:30:0A:B0:E1:18:B5:50:4D:02:1A:0E:7F:BF:BB:B0
            X509v3 Authority Key Identifier:
                keyid:B7:A6:63:92:0A:EF:63:7D:F7:9A:A0:A9:9A:F4:88:17:06:44:C5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/34352e3232352e31362e302f32322d3232203d3e20323636393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:5a:fa:66:53:73:d6:d4:f3:6c:a4:90:fc:5b:32:05:64:43:
         85:f5:63:72:1f:82:f1:4d:b6:7e:c5:9b:10:50:e3:38:c6:a7:
         11:f3:2b:9a:d1:5a:3d:eb:e6:b7:50:10:fa:2e:5a:38:6e:79:
         44:be:ed:a2:0b:f1:19:19:81:4e:35:60:1c:13:a9:85:5b:f8:
         5e:30:b0:bd:68:3e:5a:23:5e:c4:63:fa:d7:20:97:5b:b5:e5:
         23:01:ef:55:19:75:4d:26:8a:79:39:5b:7a:87:8b:07:cb:b0:
         c3:1e:da:56:09:b0:bb:cd:16:10:20:d8:fb:e6:26:47:4c:8a:
         72:f8:60:4d:e6:c4:b7:2d:a8:01:fa:79:9f:bd:19:37:3e:65:
         48:69:27:cb:34:97:f6:a8:48:88:30:f5:a4:52:36:39:c6:37:
         29:c3:2f:84:74:f7:fd:db:51:b2:57:3c:17:26:45:82:6e:20:
         d8:e0:43:e7:ca:6f:64:66:6a:67:fc:a1:74:e7:34:86:cc:47:
         b1:a7:2f:e1:e0:14:c1:e0:93:17:e3:a0:61:a9:82:8d:d8:2e:
         9a:de:b2:79:1b:1f:a7:79:f9:4d:f3:af:7b:07:b9:c9:24:4a:
         1c:be:95:06:5b:a4:a4:87:ea:2a:b6:d9:42:60:19:e5:cc:5c:
         1c:4c:00:dd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUd5etkgiH7AH6zloGDbOx2RtvrhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdBNjYzOTIwQUVGNjM3REY3OUFBMEE5OUFGNDg4MTcw
NjQ0QzUzODAeFw0yNDA0MDQyMTEwMTNaFw0yNTA0MDMyMTE1MTNaMDMxMTAvBgNV
BAMTKDNFOTc1QzJGNjgzMDBBQjBFMTE4QjU1MDREMDIxQTBFN0ZCRkJCQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuAyb11aq37BgCBh7lX21LGB1l
mhX8DGeOJyVwtDr2qN0ftSdGOXQA5ogMEDiQgMMD3+ZYQK8BNZGuTaCtbsX/wQLK
ARjfzP17SibS1gIJp7r8p3BSRVDuheJmWr385MPoWzQlJ8KJM07uAJJ6tsaKPmN5
Z/yLQmpJ3h4oxRPVxWbp28nOMxpVzZxHFwpniEjVFjV9d2LwHetbdGdETQ4i2hYy
S8VojxfwZCMZ5NkxXLYQsQiiggX0jmh6R7drqq8J1E/8yVfEKq3lKbEnOPrM+ufv
CCkzhLfXUy8gy/SSc0LvazdWGc+yuqaNhDqTeTharRBmpzeuCTTwq6Z7DUw7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPpdcL2gwCrDhGLVQTQIaDn+/u7AwHwYDVR0j
BBgwFoAUt6ZjkgrvY333mqCpmvSIFwZExTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGhOWVdpM1pYWnFQRXJkUkY4WkRYRVpUeXNoR0E3Q0pEVHJSWjI2QW1h
Q0wvMi9CN0E2NjM5MjBBRUY2MzdERjc5QUEwQTk5QUY0ODgxNzA2NDRDNTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3QTY2MzkyMEFFRjYzN0RG
NzlBQTBBOTlBRjQ4ODE3MDY0NEM1MzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoTllXaTNaWFpxUEVyZFJGOFpEWEVaVHlzaEdBN0NKRFRyUloyNkFtYUNMLzIv
MzQzNTJlMzIzMjM1MmUzMTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2
MzkzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeEQMA0GCSqGSIb3DQEBCwUAA4IBAQCnWvpmU3PW
1PNspJD8WzIFZEOF9WNyH4LxTbZ+xZsQUOM4xqcR8yua0Vo96+a3UBD6Llo4bnlE
vu2iC/EZGYFONWAcE6mFW/heMLC9aD5aI17EY/rXIJdbteUjAe9VGXVNJop5OVt6
h4sHy7DDHtpWCbC7zRYQINj75iZHTIpy+GBN5sS3LagB+nmfvRk3PmVIaSfLNJf2
qEiIMPWkUjY5xjcpwy+EdPf921GyVzwXJkWCbiDY4EPnym9kZmpn/KF05zSGzEex
py/h4BTB4JMX46BhqYKN2C6a3rJ5Gx+neflN8697B7nJJEocvpUGW6Skh+oqttlC
YBnlzFwcTADd
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:21 2024 by rpki-client on console-fra.rpki-client.org