Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32342d3234203d3e20323639313834.roa
File:                     34352e3138312e3133322e302f32342d3234203d3e20323639313834.roa (raw, json)
Hash identifier:          Z9F+L701RqgSmJZOtWPkqXhLni+u9eApO7VKcxG7N2U=
Subject key identifier:   32:E4:0B:A5:14:C4:1C:9A:3F:36:7A:3F:A9:FC:EF:CC:39:E7:69:E4
Certificate issuer:       /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial:       22A607743A92EA1D4D05389050BC03379F36D27A
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32342d3234203d3e20323639313834.roa
Signing time:             Fri 05 Apr 2024 02:12:02 +0000
ROA not before:           Fri 05 Apr 2024 02:07:02 +0000
ROA not after:            Fri 04 Apr 2025 02:12:02 +0000
asID:                     269184
IP address blocks:        45.181.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
                          rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a6:07:74:3a:92:ea:1d:4d:05:38:90:50:bc:03:37:9f:36:d2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
        Validity
            Not Before: Apr  5 02:07:02 2024 GMT
            Not After : Apr  4 02:12:02 2025 GMT
        Subject: CN=32E40BA514C41C9A3F367A3FA9FCEFCC39E769E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:53:9b:7a:a1:7f:ed:44:c8:a0:d0:2d:4a:03:
                    bb:f3:75:6f:7d:5f:a5:d0:2b:b3:e1:38:fa:42:6f:
                    bb:7a:8e:1b:ae:72:ce:96:62:01:1e:f0:23:dc:92:
                    56:56:4e:05:1e:45:70:83:c0:dc:fe:a1:ab:e9:59:
                    33:26:f6:b2:1f:97:95:6a:13:71:d5:4b:e1:75:41:
                    2e:8e:ec:0a:d6:79:16:d2:64:b9:21:fa:b6:55:37:
                    15:7f:c7:b8:52:a3:5e:be:d8:f1:ba:c0:18:92:b8:
                    cd:88:08:e2:06:a5:28:55:93:da:29:93:52:a3:9d:
                    66:43:9c:98:da:a5:2f:94:fc:02:1d:52:d0:3c:db:
                    fb:f1:77:7a:8b:f6:45:a5:c1:fc:82:bb:1a:fd:63:
                    05:2a:28:ea:b1:69:6a:8e:84:f0:f4:09:a2:83:6c:
                    fd:46:02:a6:26:36:3d:79:26:e2:aa:6d:4e:38:c9:
                    f3:24:2d:c8:7f:52:2e:f3:24:98:80:02:75:ac:aa:
                    e7:30:21:75:17:ac:da:93:45:f1:72:e0:d0:f5:e2:
                    b5:03:1b:74:c9:ed:cc:bd:02:8b:df:1e:23:19:16:
                    24:ce:48:c1:d8:61:3c:3c:0b:2f:d2:6f:45:a5:5b:
                    d5:41:28:c5:a6:1a:ca:19:54:f7:09:53:87:35:39:
                    d5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E4:0B:A5:14:C4:1C:9A:3F:36:7A:3F:A9:FC:EF:CC:39:E7:69:E4
            X509v3 Authority Key Identifier:
                keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32342d3234203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:db:bb:cb:14:8c:46:a8:61:0f:dd:0d:28:1d:19:7c:cd:8f:
         bf:fc:65:cd:9d:2e:53:a0:f7:e8:6a:7c:0e:54:33:78:b6:6b:
         d2:af:59:48:51:fc:71:2f:7d:7b:0b:6a:15:4d:1c:20:66:fd:
         b0:93:21:83:44:6c:d7:19:b4:5a:cf:ba:9b:10:10:06:02:d8:
         bd:14:2d:20:9b:fe:14:39:24:90:be:68:2b:dc:f6:4a:53:0e:
         89:ab:32:10:a5:98:c7:d5:14:ad:1c:5b:27:9c:9e:d8:92:0f:
         93:ab:62:ee:67:06:34:64:98:11:6e:c1:54:9a:6d:15:82:ed:
         78:65:ea:b4:23:aa:27:24:66:c9:fb:d6:48:a4:3a:3e:4d:84:
         8c:e7:04:59:11:2b:f9:b3:98:ec:5b:2c:d4:68:0c:3a:26:ae:
         37:cc:3e:33:a3:e8:c4:98:22:38:c3:fd:9a:c0:bd:fc:0f:68:
         f6:37:d8:7e:86:e9:0c:eb:c2:11:3b:10:f0:fb:94:72:b0:ea:
         61:fb:55:4e:53:a3:ec:a8:ed:32:10:c3:e7:37:79:7c:88:2e:
         cb:86:46:59:12:74:7e:03:ef:85:9e:1e:76:b7:d0:8c:d9:c6:
         e2:15:e7:44:38:aa:b2:73:ec:0f:1e:0f:a9:f9:58:3b:03:44:
         f4:3d:0c:df
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIqYHdDqS6h1NBTiQULwDN5820nowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE5Q0I5OUQ5OEMxMUY3QUYxQTQwNUI1RDA1MDc1MDZF
NkY4MDhBNzAeFw0yNDA0MDUwMjA3MDJaFw0yNTA0MDQwMjEyMDJaMDMxMTAvBgNV
BAMTKDMyRTQwQkE1MTRDNDFDOUEzRjM2N0EzRkE5RkNFRkNDMzlFNzY5RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNU5t6oX/tRMig0C1KA7vzdW99
X6XQK7PhOPpCb7t6jhuucs6WYgEe8CPcklZWTgUeRXCDwNz+oavpWTMm9rIfl5Vq
E3HVS+F1QS6O7ArWeRbSZLkh+rZVNxV/x7hSo16+2PG6wBiSuM2ICOIGpShVk9op
k1KjnWZDnJjapS+U/AIdUtA82/vxd3qL9kWlwfyCuxr9YwUqKOqxaWqOhPD0CaKD
bP1GAqYmNj15JuKqbU44yfMkLch/Ui7zJJiAAnWsqucwIXUXrNqTRfFy4ND14rUD
G3TJ7cy9AovfHiMZFiTOSMHYYTw8Cy/Sb0WlW9VBKMWmGsoZVPcJU4c1OdV7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMuQLpRTEHJo/Nno/qfzvzDnnaeQwHwYDVR0j
BBgwFoAUKpy5nZjBH3rxpAW10FB1Bub4CKcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0ZZSmkxMlVaZ2pRaUV1dFF3V0s3dUgzWVBIbjkxRng2S3B4MmNBWGRH
ZjQvMS8yQTlDQjk5RDk4QzExRjdBRjFBNDA1QjVEMDUwNzUwNkU2RjgwOEE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBOUNCOTlEOThDMTFGN0FG
MUE0MDVCNUQwNTA3NTA2RTZGODA4QTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dGWUppMTJVWmdqUWlFdXRRd1dLN3VIM1lQSG45MUZ4NktweDJjQVhkR2Y0LzEv
MzQzNTJlMzEzODMxMmUzMTMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAttYQwDQYJKoZIhvcNAQELBQADggEBAKLbu8sU
jEaoYQ/dDSgdGXzNj7/8Zc2dLlOg9+hqfA5UM3i2a9KvWUhR/HEvfXsLahVNHCBm
/bCTIYNEbNcZtFrPupsQEAYC2L0ULSCb/hQ5JJC+aCvc9kpTDomrMhClmMfVFK0c
WyecntiSD5OrYu5nBjRkmBFuwVSabRWC7Xhl6rQjqickZsn71kikOj5NhIznBFkR
K/mzmOxbLNRoDDomrjfMPjOj6MSYIjjD/ZrAvfwPaPY32H6G6QzrwhE7EPD7lHKw
6mH7VU5To+yo7TIQw+c3eXyILsuGRlkSdH4D74WeHna30IzZxuIV50Q4qrJz7A8e
D6n5WDsDRPQ9DN8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org