Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132322e302f32332d3233203d3e20323638303730.roa
File:                     34352e3136372e3132322e302f32332d3233203d3e20323638303730.roa (raw, json)
Hash identifier:          HvqcxyvDaQfKotUEWTjIOWuGgoqK+dMCpnLr18gYZqA=
Subject key identifier:   22:5B:8A:3E:00:3C:5B:22:FA:61:36:07:7F:2D:1E:73:A0:31:15:AF
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       350E519B2C2FB947782E2458C940021A2BB6AC4D
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132322e302f32332d3233203d3e20323638303730.roa
Signing time:             Wed 03 Apr 2024 18:31:02 +0000
ROA not before:           Wed 03 Apr 2024 18:26:02 +0000
ROA not after:            Wed 02 Apr 2025 18:31:02 +0000
asID:                     268070
IP address blocks:        45.167.122.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0e:51:9b:2c:2f:b9:47:78:2e:24:58:c9:40:02:1a:2b:b6:ac:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Apr  3 18:26:02 2024 GMT
            Not After : Apr  2 18:31:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:c8:c3:a8:51:6a:f3:9c:d6:5e:ae:bf:3c:
                    d7:bd:66:8b:c6:74:4f:e8:4b:18:8a:ee:15:89:20:
                    a6:67:4e:f4:a2:89:b6:cb:59:16:e8:74:87:82:24:
                    76:81:94:fa:86:85:14:a4:eb:fc:0f:c4:af:0a:74:
                    4a:49:99:e6:6e:a7:6e:fa:50:b9:03:1b:58:65:f8:
                    0a:3e:b8:9e:c5:a9:d8:f6:25:16:45:42:ed:88:16:
                    ee:69:5e:07:9d:df:64:96:fb:40:8b:30:88:e5:63:
                    e9:e7:86:26:dd:4a:ad:07:c9:6b:d1:1c:10:8d:f3:
                    b1:25:c4:62:c8:a3:57:1c:08:58:d3:34:be:02:fc:
                    05:fe:16:a6:bd:b1:57:c9:3a:06:59:c7:70:f8:88:
                    7c:4d:0c:b5:64:93:19:c9:75:b3:74:1d:c3:c8:ac:
                    c3:d0:91:e7:7c:02:cf:b6:4b:d4:59:91:70:12:0a:
                    46:eb:ad:76:f3:2e:f9:92:7b:74:42:5a:1b:d9:92:
                    ad:16:66:1d:90:9a:77:08:c6:f7:b6:9d:ae:b9:94:
                    51:77:06:b7:9b:ac:ca:fb:2b:22:9c:46:34:68:d2:
                    f5:37:b5:5b:c1:ee:c7:05:f6:9e:9a:e0:c6:49:7a:
                    78:f0:e1:d4:45:3c:d6:4c:b4:93:fa:e5:cb:ed:19:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5B:8A:3E:00:3C:5B:22:FA:61:36:07:7F:2D:1E:73:A0:31:15:AF
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132322e302f32332d3233203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:79:7d:5b:1e:59:2c:13:7d:f7:54:0d:96:22:cc:7b:02:25:
         54:78:34:79:ef:e6:f0:cf:35:43:8c:30:d2:04:15:49:6c:53:
         c0:15:fc:a4:92:01:7b:1c:4d:63:5a:38:88:f9:e8:30:e1:d4:
         7d:bf:c0:c1:fd:60:c5:91:b6:69:de:24:d1:63:c9:83:96:7a:
         27:2b:bc:ca:8d:d5:95:09:26:30:c8:87:c2:8a:f8:14:bf:68:
         8d:ac:2b:10:0a:14:66:52:a1:37:b2:53:7c:f5:0b:7c:46:26:
         ff:7e:4b:ea:ff:13:78:0a:db:a6:7a:ad:57:c9:2d:26:04:96:
         65:01:56:13:d8:53:fd:a9:0e:35:bd:2c:e9:7e:24:91:38:68:
         1e:a5:f3:e5:cd:b7:54:98:c2:75:ba:a8:2a:95:ca:9b:e6:de:
         34:cb:5a:c4:21:98:bb:35:13:99:3e:8b:1d:95:4b:1d:89:41:
         8d:9b:ed:8f:95:6d:74:ab:c0:82:fd:c6:c4:52:89:70:e2:aa:
         ca:62:8b:6f:df:ff:6e:ba:33:79:f2:8e:b3:74:fe:d7:a5:27:
         e9:6b:8e:00:0d:f4:d7:4e:b7:33:13:89:45:73:1c:b9:b0:45:
         4f:a5:af:3e:4e:bb:3c:2f:98:22:d7:22:3a:1a:6d:f6:07:37:
         f9:5b:c6:4a
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUNQ5RmywvuUd4LiRYyUACGiu2rE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVDNDIwNTVBRkM1OUExMDRCODdGRDY3MDYzNzUzMzFC
OEY2QkY1NTAeFw0yNDA0MDMxODI2MDJaFw0yNTA0MDIxODMxMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjIxREM4QzNBODUxNkFGMzlD
RDY1RUFFQkYzQ0Q3QkQ2NjhCQzY3NDRGRTg0QjE4OEFFRTE1ODkyMEE2Njc0RUY0
QTI4OUI2Q0I1OTE2RTg3NDg3ODIyNDc2ODE5NEZBODY4NTE0QTRFQkZDMEZDNEFG
MEE3NDRBNDk5OUU2NkVBNzZFRkE1MEI5MDMxQjU4NjVGODBBM0VCODlFQzVBOUQ4
RjYyNTE2NDU0MkVEODgxNkVFNjk1RTA3OURERjY0OTZGQjQwOEIzMDg4RTU2M0U5
RTc4NjI2REQ0QUFEMDdDOTZCRDExQzEwOERGM0IxMjVDNDYyQzhBMzU3MUMwODU4
RDMzNEJFMDJGQzA1RkUxNkE2QkRCMTU3QzkzQTA2NTlDNzcwRjg4ODdDNEQwQ0I1
NjQ5MzE5Qzk3NUIzNzQxREMzQzhBQ0MzRDA5MUU3N0MwMkNGQjY0QkQ0NTk5MTcw
MTIwQTQ2RUJBRDc2RjMyRUY5OTI3Qjc0NDI1QTFCRDk5MkFEMTY2NjFEOTA5QTc3
MDhDNkY3QjY5REFFQjk5NDUxNzcwNkI3OUJBQ0NBRkIyQjIyOUM0NjM0NjhEMkY1
MzdCNTVCQzFFRUM3MDVGNjlFOUFFMEM2NDk3QTc4RjBFMUQ0NDUzQ0Q2NENCNDkz
RkFFNUNCRUQxOTNDQjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsh3Iw6hRavOc1l6uvzzXvWaLxnRP6EsYiu4ViSCmZ070oom2y1kW
6HSHgiR2gZT6hoUUpOv8D8SvCnRKSZnmbqdu+lC5AxtYZfgKPriexanY9iUWRULt
iBbuaV4Hnd9klvtAizCI5WPp54Ym3UqtB8lr0RwQjfOxJcRiyKNXHAhY0zS+AvwF
/hamvbFXyToGWcdw+Ih8TQy1ZJMZyXWzdB3DyKzD0JHnfALPtkvUWZFwEgpG6612
8y75knt0Qlob2ZKtFmYdkJp3CMb3tp2uuZRRdwa3m6zK+ysinEY0aNL1N7Vbwe7H
BfaemuDGSXp48OHURTzWTLST+uXL7Rk8tQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FCJbij4APFsi+mE2B38tHnOgMRWvMB8GA1UdIwQYMBaAFC7EIFWvxZoQS4f9ZwY3
UzG49r9VMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZZRUZWTEtUV1JkRzdv
b0V4OVF6UGdaajhlVzhOZThqN1p3WERSRFA5aWFELzEvMkVDNDIwNTVBRkM1OUEx
MDRCODdGRDY3MDYzNzUzMzFCOEY2QkY1NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yRUM0MjA1NUFGQzU5QTEwNEI4N0ZENjcwNjM3NTMzMUI4RjZC
RjU1LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GWUVGVkxLVFdSZEc3b29FeDlR
elBnWmo4ZVc4TmU4ajdad1hEUkRQOWlhRC8xLzM0MzUyZTMxMzYzNzJlMzEzMjMy
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4MzAzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
Lad6MA0GCSqGSIb3DQEBCwUAA4IBAQBteX1bHlksE333VA2WIsx7AiVUeDR57+bw
zzVDjDDSBBVJbFPAFfykkgF7HE1jWjiI+egw4dR9v8DB/WDFkbZp3iTRY8mDlnon
K7zKjdWVCSYwyIfCivgUv2iNrCsQChRmUqE3slN89Qt8Rib/fkvq/xN4Ctumeq1X
yS0mBJZlAVYT2FP9qQ41vSzpfiSROGgepfPlzbdUmMJ1uqgqlcqb5t40y1rEIZi7
NROZPosdlUsdiUGNm+2PlW10q8CC/cbEUolw4qrKYotv3/9uujN58o6zdP7XpSfp
a44ADfTXTrczE4lFcxy5sEVPpa8+Trs8L5gi1yI6Gm32Bzf5W8ZK
-----END CERTIFICATE-----
Generated at Sat Jun 29 11:04:23 2024 by rpki-client on console-fra.rpki-client.org