Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/34352e3138342e34382e302f32322d3234203d3e20323639333134.roa
File:                     34352e3138342e34382e302f32322d3234203d3e20323639333134.roa (raw, json)
Hash identifier:          UG+YTCF5O7QhmRHjLjpTgcSd6rJoV6gPLUohedzzmwY=
Subject key identifier:   B6:89:80:B8:09:80:F6:BB:61:21:18:00:8B:44:54:8B:61:80:B9:26
Certificate issuer:       /CN=2A6491204C711A84AD522B857DDD79956488BAA2
Certificate serial:       7BC0CC4E1633F6EC7CDBF2AA292B2DD8A26B5EC6
Authority key identifier: 2A:64:91:20:4C:71:1A:84:AD:52:2B:85:7D:DD:79:95:64:88:BA:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6491204C711A84AD522B857DDD79956488BAA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/34352e3138342e34382e302f32322d3234203d3e20323639333134.roa
Signing time:             Thu 04 Apr 2024 11:53:25 +0000
ROA not before:           Thu 04 Apr 2024 11:48:25 +0000
ROA not after:            Thu 03 Apr 2025 11:53:25 +0000
asID:                     269314
IP address blocks:        45.184.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.crl
                          rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6491204C711A84AD522B857DDD79956488BAA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c0:cc:4e:16:33:f6:ec:7c:db:f2:aa:29:2b:2d:d8:a2:6b:5e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6491204C711A84AD522B857DDD79956488BAA2
        Validity
            Not Before: Apr  4 11:48:25 2024 GMT
            Not After : Apr  3 11:53:25 2025 GMT
        Subject: CN=B68980B80980F6BB612118008B44548B6180B926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:6f:c5:89:35:77:58:13:5c:f5:72:c7:61:
                    e1:30:20:df:39:aa:42:25:fe:ed:ef:7c:71:57:f9:
                    13:2a:5d:66:46:a3:55:71:35:06:9a:c8:7f:2b:87:
                    bf:ad:28:b0:42:28:33:14:08:5e:b0:03:06:26:42:
                    f0:1e:da:b2:37:4a:3d:95:c4:fc:bb:1e:20:35:4a:
                    50:52:67:97:cb:a8:95:70:11:10:41:a8:9b:b5:f3:
                    71:a2:6b:16:0d:14:b0:5d:ff:af:a5:06:35:8f:47:
                    a1:7f:3d:2f:c8:28:ab:34:3f:48:37:de:c4:ba:e9:
                    5b:18:77:f6:4e:3d:fd:55:24:2c:85:cd:08:a2:a6:
                    9f:79:78:07:b9:a9:02:74:6f:13:9e:b2:d1:91:6e:
                    c5:e0:07:4f:ff:84:62:32:77:0a:a8:94:de:a5:0d:
                    97:7b:55:ed:0b:91:76:b9:b8:95:62:e4:c1:74:8d:
                    2b:09:a3:cb:3e:80:85:d2:8e:3e:2e:21:0d:d2:1c:
                    e1:d6:9c:1f:8f:d7:2d:60:bb:7c:6d:94:8b:ed:be:
                    8d:67:b8:ee:99:3b:e2:77:c3:92:36:72:c9:7c:a7:
                    41:85:18:d9:81:c4:50:b4:7b:ee:ba:24:d0:59:78:
                    ae:b9:d2:87:d3:74:a3:7d:41:93:f9:b7:69:1a:06:
                    7a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:89:80:B8:09:80:F6:BB:61:21:18:00:8B:44:54:8B:61:80:B9:26
            X509v3 Authority Key Identifier:
                keyid:2A:64:91:20:4C:71:1A:84:AD:52:2B:85:7D:DD:79:95:64:88:BA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6491204C711A84AD522B857DDD79956488BAA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/34352e3138342e34382e302f32322d3234203d3e20323639333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:97:96:f3:05:f7:e7:f8:f9:7a:fe:b4:a5:c7:70:e8:34:51:
         26:18:91:57:af:bb:08:60:5f:e5:a2:c0:54:da:34:68:f0:1a:
         b9:81:9d:7e:0b:af:5b:7b:0b:d2:5c:e8:1a:dc:12:32:e8:be:
         8e:b9:4b:d3:4b:2c:7f:3d:4d:9b:c1:9a:ea:bf:e8:e2:f3:f1:
         4c:85:a2:74:83:f8:2a:7b:3a:e2:df:ad:dd:c5:fb:12:57:bc:
         fb:5a:60:46:ff:a8:08:92:5d:95:33:78:aa:33:96:4f:c2:3d:
         fc:dc:cb:47:0e:f9:a1:69:04:d9:72:91:55:89:c4:9f:82:1c:
         85:4d:ec:6b:1a:0d:4f:54:7f:64:7a:6e:01:ad:8d:4d:e4:04:
         e7:1e:69:6c:dd:0f:c8:d1:bf:3e:76:79:51:e2:1e:b2:66:f5:
         43:5f:74:53:a4:5f:88:27:4c:ca:4f:82:7e:e7:9a:b6:8a:60:
         d1:62:80:64:e9:61:7e:bf:72:2c:51:ee:d5:a5:91:83:e0:f6:
         31:59:f5:e8:ca:20:35:e9:ba:e2:c3:b6:46:7d:08:c8:a7:8c:
         15:6b:92:82:1f:15:52:be:08:8e:d1:26:10:bc:c0:2e:f0:f5:
         ad:b0:c4:b2:25:1d:c1:15:11:a4:72:ca:42:6c:75:6e:7c:87:
         e3:23:c0:b2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUe8DMThYz9ux82/KqKSst2KJrXsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2NDkxMjA0QzcxMUE4NEFENTIyQjg1N0RERDc5OTU2
NDg4QkFBMjAeFw0yNDA0MDQxMTQ4MjVaFw0yNTA0MDMxMTUzMjVaMDMxMTAvBgNV
BAMTKEI2ODk4MEI4MDk4MEY2QkI2MTIxMTgwMDhCNDQ1NDhCNjE4MEI5MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsYm/FiTV3WBNc9XLHYeEwIN85
qkIl/u3vfHFX+RMqXWZGo1VxNQaayH8rh7+tKLBCKDMUCF6wAwYmQvAe2rI3Sj2V
xPy7HiA1SlBSZ5fLqJVwERBBqJu183GiaxYNFLBd/6+lBjWPR6F/PS/IKKs0P0g3
3sS66VsYd/ZOPf1VJCyFzQiipp95eAe5qQJ0bxOestGRbsXgB0//hGIydwqolN6l
DZd7Ve0LkXa5uJVi5MF0jSsJo8s+gIXSjj4uIQ3SHOHWnB+P1y1gu3xtlIvtvo1n
uO6ZO+J3w5I2csl8p0GFGNmBxFC0e+66JNBZeK650ofTdKN9QZP5t2kaBnpfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtomAuAmA9rthIRgAi0RUi2GAuSYwHwYDVR0j
BBgwFoAUKmSRIExxGoStUiuFfd15lWSIuqIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGp0VWRQR0h2cHJBQzhvQ2pVdUxxaU1mQjNQbkhEelhTNVppSjhnRlc0
RDYvMS8yQTY0OTEyMDRDNzExQTg0QUQ1MjJCODU3RERENzk5NTY0ODhCQUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjQ5MTIwNEM3MTFBODRB
RDUyMkI4NTdEREQ3OTk1NjQ4OEJBQTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RqdFVkUEdIdnByQUM4b0NqVXVMcWlNZkIzUG5IRHpYUzVaaUo4Z0ZXNEQ2LzEv
MzQzNTJlMzEzODM0MmUzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzMzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbgwMA0GCSqGSIb3DQEBCwUAA4IBAQCRl5bzBffn
+Pl6/rSlx3DoNFEmGJFXr7sIYF/losBU2jRo8Bq5gZ1+C69bewvSXOga3BIy6L6O
uUvTSyx/PU2bwZrqv+ji8/FMhaJ0g/gqezri363dxfsSV7z7WmBG/6gIkl2VM3iq
M5ZPwj383MtHDvmhaQTZcpFVicSfghyFTexrGg1PVH9kem4BrY1N5ATnHmls3Q/I
0b8+dnlR4h6yZvVDX3RTpF+IJ0zKT4J+55q2imDRYoBk6WF+v3IsUe7VpZGD4PYx
WfXoyiA16briw7ZGfQjIp4wVa5KCHxVSvgiO0SYQvMAu8PWtsMSyJR3BFRGkcspC
bHVufIfjI8Cy
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:56 2024 by rpki-client on console-ams.rpki-client.org