Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/34352e36352e3233362e302f32322d3234203d3e20323636353236.roa
File:                     34352e36352e3233362e302f32322d3234203d3e20323636353236.roa (raw, json)
Hash identifier:          9n1lDBo1FXRI+JzSvsWz1BWeJxc6LfXeT6LkBIHHQC0=
Subject key identifier:   15:CF:D3:76:A5:B4:21:9E:39:7D:BC:AA:35:F8:2E:5D:96:86:A8:A7
Certificate issuer:       /CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA
Certificate serial:       109E995F256A46C1C2F60B56936E8BEB639A4109
Authority key identifier: 32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/34352e36352e3233362e302f32322d3234203d3e20323636353236.roa
Signing time:             Thu 04 Apr 2024 09:25:12 +0000
ROA not before:           Thu 04 Apr 2024 09:20:12 +0000
ROA not after:            Thu 03 Apr 2025 09:25:12 +0000
asID:                     266526
IP address blocks:        45.65.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl
                          rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9e:99:5f:25:6a:46:c1:c2:f6:0b:56:93:6e:8b:eb:63:9a:41:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA
        Validity
            Not Before: Apr  4 09:20:12 2024 GMT
            Not After : Apr  3 09:25:12 2025 GMT
        Subject: CN=15CFD376A5B4219E397DBCAA35F82E5D9686A8A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:9f:01:82:bc:d4:d1:43:73:a7:e4:69:77:
                    5b:fa:e5:7c:ce:45:0e:0b:90:bc:49:4c:57:61:21:
                    3e:06:5f:11:dc:f5:ff:94:17:e7:e1:6a:77:95:35:
                    e1:98:29:a3:24:b2:00:8c:49:0a:e8:e4:fc:5b:6f:
                    21:1f:4e:44:b8:ee:bd:30:ac:d3:7e:76:ce:dd:c2:
                    d0:2a:68:72:90:7a:4f:3a:be:c3:38:f9:d1:26:a1:
                    76:2e:dc:db:7c:42:9c:3c:9f:b7:e0:b1:bf:06:dc:
                    e8:84:73:d5:d9:8b:b2:16:da:bb:de:a8:7a:e7:b5:
                    6f:b0:35:df:92:67:21:2d:76:a9:70:fc:1f:88:d6:
                    b6:67:36:e2:15:1c:f9:43:5b:f0:6d:bc:fa:51:09:
                    f8:07:21:36:9f:6c:09:9c:7f:3d:1c:f3:80:d6:93:
                    63:ed:d7:8a:65:d6:dc:4d:7f:a4:92:66:27:1f:3e:
                    6b:6d:52:7d:f0:53:bc:fc:21:15:fa:92:ae:e3:4f:
                    0c:9a:44:7d:3e:3c:68:98:aa:ee:a8:0a:fb:28:c5:
                    5d:5e:86:ec:b5:d6:2e:26:49:72:67:67:b1:66:88:
                    68:d9:f1:b0:2f:7b:ef:83:da:08:9d:a5:70:18:af:
                    b9:24:14:47:0f:b7:77:d0:20:dc:ae:89:74:04:11:
                    3b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CF:D3:76:A5:B4:21:9E:39:7D:BC:AA:35:F8:2E:5D:96:86:A8:A7
            X509v3 Authority Key Identifier:
                keyid:32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/34352e36352e3233362e302f32322d3234203d3e20323636353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:46:92:92:e4:f9:5b:2a:49:c9:17:96:76:3b:97:5c:b2:2c:
         fc:c9:1c:c6:5d:4b:91:a4:5e:18:ef:01:49:86:a4:87:56:55:
         da:95:2f:b6:4f:29:07:87:19:1e:1b:e5:87:e9:b6:6e:a4:5f:
         45:7b:94:2d:28:69:1f:5a:51:cd:89:67:ee:bf:0b:e0:4e:50:
         1c:f0:56:c9:da:93:d7:42:a2:9b:3f:cc:3a:1a:6f:39:c1:59:
         f1:81:60:9d:fd:cd:4c:40:94:0d:63:02:16:73:79:e5:30:db:
         65:4c:4f:6c:35:93:2d:3f:7c:52:66:b4:f5:14:8b:f3:8e:de:
         14:74:35:2b:1b:3d:a4:d3:a6:07:12:e7:63:ed:c6:7a:50:33:
         3e:33:e7:b5:a8:36:28:c5:21:3f:40:88:a3:a6:11:54:4f:6b:
         97:a4:5b:6f:fe:34:b9:9c:c5:51:dc:18:03:08:dd:16:e8:ba:
         30:60:ee:92:8f:75:ba:6f:bc:e9:fd:af:40:e9:51:e8:b8:f2:
         a7:bc:71:61:9e:0e:ca:2c:e6:03:b8:1e:f4:e6:77:9a:30:17:
         d2:73:81:cb:55:9f:09:12:66:c8:f6:fa:57:0f:4d:e5:77:87:
         99:5f:e7:2d:04:38:ec:b5:8b:cb:99:80:91:0b:42:08:68:c3:
         24:cf:20:64
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEJ6ZXyVqRsHC9gtWk26L62OaQQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIwNjhDRUIxQjkzMTYxOEZCMjlBMEVDRDUyRjlEMjJG
QjAzMDREQTAeFw0yNDA0MDQwOTIwMTJaFw0yNTA0MDMwOTI1MTJaMDMxMTAvBgNV
BAMTKDE1Q0ZEMzc2QTVCNDIxOUUzOTdEQkNBQTM1RjgyRTVEOTY4NkE4QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tJ8BgrzU0UNzp+Rpd1v65XzO
RQ4LkLxJTFdhIT4GXxHc9f+UF+fhaneVNeGYKaMksgCMSQro5PxbbyEfTkS47r0w
rNN+ds7dwtAqaHKQek86vsM4+dEmoXYu3Nt8Qpw8n7fgsb8G3OiEc9XZi7IW2rve
qHrntW+wNd+SZyEtdqlw/B+I1rZnNuIVHPlDW/BtvPpRCfgHITafbAmcfz0c84DW
k2Pt14pl1txNf6SSZicfPmttUn3wU7z8IRX6kq7jTwyaRH0+PGiYqu6oCvsoxV1e
huy11i4mSXJnZ7FmiGjZ8bAve++D2gidpXAYr7kkFEcPt3fQINyuiXQEETv7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUFc/TdqW0IZ45fbyqNfguXZaGqKcwHwYDVR0j
BBgwFoAUMgaM6xuTFhj7KaDs1S+dIvsDBNowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHRoM2QycFVrOHJyN2N6YzhrM3VFMmVyTkF0UmlzcXBFMmpodnFZY2hG
dFIvMS8zMjA2OENFQjFCOTMxNjE4RkIyOUEwRUNENTJGOUQyMkZCMDMwNERBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyMDY4Q0VCMUI5MzE2MThG
QjI5QTBFQ0Q1MkY5RDIyRkIwMzA0REEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R0aDNkMnBVazhycjdjemM4azN1RTJlck5BdFJpc3FwRTJqaHZxWWNoRnRSLzEv
MzQzNTJlMzYzNTJlMzIzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2
MzUzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUHsMA0GCSqGSIb3DQEBCwUAA4IBAQCZRpKS5Plb
KknJF5Z2O5dcsiz8yRzGXUuRpF4Y7wFJhqSHVlXalS+2TykHhxkeG+WH6bZupF9F
e5QtKGkfWlHNiWfuvwvgTlAc8FbJ2pPXQqKbP8w6Gm85wVnxgWCd/c1MQJQNYwIW
c3nlMNtlTE9sNZMtP3xSZrT1FIvzjt4UdDUrGz2k06YHEudj7cZ6UDM+M+e1qDYo
xSE/QIijphFUT2uXpFtv/jS5nMVR3BgDCN0W6LowYO6Sj3W6b7zp/a9A6VHouPKn
vHFhng7KLOYDuB705neaMBfSc4HLVZ8JEmbI9vpXD03ld4eZX+ctBDjstYvLmYCR
C0IIaMMkzyBk
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:21 2024 by rpki-client on console-fra.rpki-client.org