Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/1/34352e3233302e36382e302f32322d3234203d3e20323637313538.roa
File:                     34352e3233302e36382e302f32322d3234203d3e20323637313538.roa (raw, json)
Hash identifier:          N98c+2TAGwJlWQPOmRDfYs21u+0Wiqz8nkUy1bSUN4k=
Subject key identifier:   76:93:FA:15:EA:EE:8C:22:0C:AE:D2:17:C0:BF:44:14:8F:5D:59:B1
Certificate issuer:       /CN=FD1925A97D11CC301B6F3B5F085AFBEF958C234D
Certificate serial:       56481F540BFA28E60CE7A997276B3A42D00B5928
Authority key identifier: FD:19:25:A9:7D:11:CC:30:1B:6F:3B:5F:08:5A:FB:EF:95:8C:23:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1925A97D11CC301B6F3B5F085AFBEF958C234D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/1/34352e3233302e36382e302f32322d3234203d3e20323637313538.roa
Signing time:             Thu 04 Apr 2024 11:48:59 +0000
ROA not before:           Thu 04 Apr 2024 11:43:59 +0000
ROA not after:            Thu 03 Apr 2025 11:48:59 +0000
asID:                     267158
IP address blocks:        45.230.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/1/FD1925A97D11CC301B6F3B5F085AFBEF958C234D.crl
                          rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/1/FD1925A97D11CC301B6F3B5F085AFBEF958C234D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1925A97D11CC301B6F3B5F085AFBEF958C234D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:48:1f:54:0b:fa:28:e6:0c:e7:a9:97:27:6b:3a:42:d0:0b:59:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD1925A97D11CC301B6F3B5F085AFBEF958C234D
        Validity
            Not Before: Apr  4 11:43:59 2024 GMT
            Not After : Apr  3 11:48:59 2025 GMT
        Subject: CN=7693FA15EAEE8C220CAED217C0BF44148F5D59B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:bc:4b:9f:9d:d3:ec:4a:a5:a1:ec:8b:f9:
                    1a:3a:4f:b9:7b:d6:6b:8d:3f:a2:52:0d:aa:49:d3:
                    5e:da:97:fc:3f:7e:f1:eb:90:d0:25:f9:0e:e7:c9:
                    75:81:2c:ea:6e:65:45:0c:48:36:68:9b:1a:aa:20:
                    ea:09:54:34:ce:3b:2c:26:a0:78:08:d2:90:0a:12:
                    1d:ae:4c:82:dc:15:be:a9:c7:2b:f9:f7:33:0d:8c:
                    ae:88:62:4e:8f:9a:52:c9:c3:0e:03:25:4d:91:a8:
                    32:3f:a3:9b:05:37:2d:de:e5:af:67:5f:a7:4c:74:
                    c2:e1:c7:dc:49:2e:33:b2:20:3a:51:47:4c:75:58:
                    72:52:75:a9:1e:80:b8:6d:c9:a0:d5:3f:e6:de:6a:
                    0d:0a:7d:b3:80:86:4f:36:8c:8c:a0:c4:50:e5:8d:
                    e6:05:71:b7:aa:53:10:d3:40:06:52:99:ce:c6:e8:
                    ae:3e:e5:2d:77:f1:61:10:3b:2c:a4:43:28:f9:45:
                    1e:4e:11:cc:95:da:0c:c0:40:56:f6:ae:2c:3a:21:
                    40:98:5b:f1:7f:22:10:b0:50:b2:e9:5e:e0:bc:70:
                    bb:c3:cf:7b:ef:cf:1b:2a:f0:56:3f:91:3e:22:79:
                    93:c0:98:7f:97:99:9a:18:c1:fd:6e:1e:c6:94:82:
                    5b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:93:FA:15:EA:EE:8C:22:0C:AE:D2:17:C0:BF:44:14:8F:5D:59:B1
            X509v3 Authority Key Identifier:
                keyid:FD:19:25:A9:7D:11:CC:30:1B:6F:3B:5F:08:5A:FB:EF:95:8C:23:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/1/FD1925A97D11CC301B6F3B5F085AFBEF958C234D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1925A97D11CC301B6F3B5F085AFBEF958C234D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/1/34352e3233302e36382e302f32322d3234203d3e20323637313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:d9:e8:7b:56:ad:9f:42:8c:9e:96:22:ed:a6:1c:7e:26:bb:
         29:6a:25:70:70:bb:69:f8:cf:12:8d:12:85:66:7f:85:3d:dd:
         82:c7:89:52:f9:d3:1d:41:c8:88:a7:e8:7a:d9:16:5f:bc:ec:
         0e:57:33:ae:90:b9:fd:58:ba:71:7c:36:ab:f5:80:43:e4:00:
         11:50:e6:f0:75:b9:ff:19:64:15:8a:19:9e:5d:c0:ad:57:6c:
         8a:95:fa:30:55:a9:d1:5e:b5:4e:f1:64:60:18:e1:f7:cd:94:
         a3:ec:b2:d4:83:ef:07:24:8e:6f:5b:65:10:2c:7e:83:aa:94:
         77:71:cb:fe:88:0a:03:7c:52:9c:ce:b2:a4:34:ac:e3:f6:0e:
         90:a7:de:57:63:05:71:e8:1b:1e:47:3f:f7:be:f8:db:f6:53:
         75:49:3b:22:c1:68:75:57:8e:07:56:c0:1c:81:85:6b:b2:8b:
         25:6b:21:e6:39:e4:eb:dc:17:f3:ac:b5:98:7c:b2:d9:8a:62:
         f6:40:b5:d1:c0:de:b9:e5:83:a0:97:bf:16:99:e5:9d:4a:2c:
         67:48:6d:92:38:b4:30:f8:fb:07:62:c8:81:4d:7a:07:90:9d:
         dd:8e:8a:8e:b6:a9:05:0f:30:29:3f:42:41:e4:61:6f:47:12:
         6f:20:bf:88
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVkgfVAv6KOYM56mXJ2s6QtALWSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQxOTI1QTk3RDExQ0MzMDFCNkYzQjVGMDg1QUZCRUY5
NThDMjM0RDAeFw0yNDA0MDQxMTQzNTlaFw0yNTA0MDMxMTQ4NTlaMDMxMTAvBgNV
BAMTKDc2OTNGQTE1RUFFRThDMjIwQ0FFRDIxN0MwQkY0NDE0OEY1RDU5QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCiLxLn53T7EqloeyL+Ro6T7l7
1muNP6JSDapJ017al/w/fvHrkNAl+Q7nyXWBLOpuZUUMSDZomxqqIOoJVDTOOywm
oHgI0pAKEh2uTILcFb6pxyv59zMNjK6IYk6PmlLJww4DJU2RqDI/o5sFNy3e5a9n
X6dMdMLhx9xJLjOyIDpRR0x1WHJSdakegLhtyaDVP+beag0KfbOAhk82jIygxFDl
jeYFcbeqUxDTQAZSmc7G6K4+5S138WEQOyykQyj5RR5OEcyV2gzAQFb2riw6IUCY
W/F/IhCwULLpXuC8cLvDz3vvzxsq8FY/kT4ieZPAmH+XmZoYwf1uHsaUglv3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdpP6FerujCIMrtIXwL9EFI9dWbEwHwYDVR0j
BBgwFoAU/RklqX0RzDAbbztfCFr775WMI00wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzJORThqMTh5N2FDaTM4VThHdE13ZXJhWDdTcVVnQ3FVYU5VNmtnZGpt
UVQvMS9GRDE5MjVBOTdEMTFDQzMwMUI2RjNCNUYwODVBRkJFRjk1OEMyMzRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEMTkyNUE5N0QxMUNDMzAx
QjZGM0I1RjA4NUFGQkVGOTU4QzIzNEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0cyTkU4ajE4eTdhQ2kzOFU4R3RNd2VyYVg3U3FVZ0NxVWFOVTZrZ2RqbVFULzEv
MzQzNTJlMzIzMzMwMmUzNjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzEzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeZEMA0GCSqGSIb3DQEBCwUAA4IBAQAK2eh7Vq2f
QoyeliLtphx+JrspaiVwcLtp+M8SjRKFZn+FPd2Cx4lS+dMdQciIp+h62RZfvOwO
VzOukLn9WLpxfDar9YBD5AARUObwdbn/GWQVihmeXcCtV2yKlfowVanRXrVO8WRg
GOH3zZSj7LLUg+8HJI5vW2UQLH6DqpR3ccv+iAoDfFKczrKkNKzj9g6Qp95XYwVx
6BseRz/3vvjb9lN1STsiwWh1V44HVsAcgYVrsoslayHmOeTr3BfzrLWYfLLZimL2
QLXRwN655YOgl78WmeWdSixnSG2SOLQw+PsHYsiBTXoHkJ3djoqOtqkFDzApP0JB
5GFvRxJvIL+I
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:14 2024 by rpki-client on console-ams.rpki-client.org