Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/34352e3232372e3138302e302f32322d3234203d3e20323637303238.roa
File:                     34352e3232372e3138302e302f32322d3234203d3e20323637303238.roa (raw, json)
Hash identifier:          3TBsOiujVLOExYZmU5TPkrt7UaGxliLuKUi6w5j3ZFE=
Subject key identifier:   61:A7:47:7B:93:5B:85:A4:05:E8:26:99:F8:2F:8A:38:DB:EA:2B:CD
Certificate issuer:       /CN=7651A842E34BF1A427ECE613831D697900FC14F9
Certificate serial:       54069F3AC6918ED896A73601FED073A0CD5336CB
Authority key identifier: 76:51:A8:42:E3:4B:F1:A4:27:EC:E6:13:83:1D:69:79:00:FC:14:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7651A842E34BF1A427ECE613831D697900FC14F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/34352e3232372e3138302e302f32322d3234203d3e20323637303238.roa
Signing time:             Thu 04 Apr 2024 16:32:16 +0000
ROA not before:           Thu 04 Apr 2024 16:27:16 +0000
ROA not after:            Thu 03 Apr 2025 16:32:16 +0000
asID:                     267028
IP address blocks:        45.227.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/7651A842E34BF1A427ECE613831D697900FC14F9.crl
                          rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/7651A842E34BF1A427ECE613831D697900FC14F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7651A842E34BF1A427ECE613831D697900FC14F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 14:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:06:9f:3a:c6:91:8e:d8:96:a7:36:01:fe:d0:73:a0:cd:53:36:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7651A842E34BF1A427ECE613831D697900FC14F9
        Validity
            Not Before: Apr  4 16:27:16 2024 GMT
            Not After : Apr  3 16:32:16 2025 GMT
        Subject: CN=61A7477B935B85A405E82699F82F8A38DBEA2BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6a:f2:42:ca:e1:a9:07:dd:09:d7:4c:1a:b8:
                    1f:86:e5:db:61:74:60:9c:5c:cb:8c:df:9c:0f:88:
                    ed:8d:94:23:9d:44:a6:11:24:5e:4c:4c:b7:e7:c7:
                    8f:7a:98:0d:57:37:50:0e:31:99:66:8b:fb:d7:a0:
                    5e:fa:da:70:7d:32:41:75:32:d9:56:98:6a:c2:4c:
                    4c:b3:f3:9d:55:5b:28:fc:bd:6c:40:15:fd:69:54:
                    73:98:cb:40:98:eb:f9:f6:89:db:42:d7:0a:80:e4:
                    95:9b:0e:2d:95:9d:8f:2e:6d:0e:33:d4:f2:33:93:
                    22:e6:9d:8a:de:28:10:2a:3c:bb:9c:3a:7a:6b:26:
                    68:80:cf:64:20:3e:03:bb:b0:bb:ae:cb:aa:15:34:
                    2a:29:92:a5:4e:2e:a1:b1:22:a1:86:df:0e:0c:af:
                    73:c0:9a:2e:68:a7:e1:ce:48:2e:8d:37:5f:9d:19:
                    4c:1e:66:b2:26:ff:7f:a3:55:cf:dd:70:a9:e6:24:
                    0a:72:fa:16:98:41:e5:e7:02:67:48:1d:61:4e:a2:
                    33:66:f6:59:61:35:2b:ed:41:92:22:a8:a0:89:b2:
                    76:4d:e7:26:23:1b:73:41:1a:dd:d7:56:2a:62:e7:
                    1f:d1:d8:11:46:7e:63:9f:fb:26:58:55:75:29:dc:
                    df:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A7:47:7B:93:5B:85:A4:05:E8:26:99:F8:2F:8A:38:DB:EA:2B:CD
            X509v3 Authority Key Identifier:
                keyid:76:51:A8:42:E3:4B:F1:A4:27:EC:E6:13:83:1D:69:79:00:FC:14:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/7651A842E34BF1A427ECE613831D697900FC14F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7651A842E34BF1A427ECE613831D697900FC14F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/34352e3232372e3138302e302f32322d3234203d3e20323637303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:71:ed:1e:49:57:c8:5c:5d:d4:ba:cb:ad:ba:b0:c6:5a:c4:
         3b:b1:34:e3:78:ac:d0:c2:d0:ad:3f:31:07:1f:da:63:42:84:
         45:56:c4:e9:8e:75:ba:9a:b3:1b:34:f1:24:43:e4:fa:f1:6a:
         c1:88:14:e4:d2:f4:ab:6b:1a:33:d2:8c:62:7a:b0:06:bb:ce:
         f6:e9:cc:11:60:bd:bf:91:d1:16:76:e3:9f:17:da:94:29:5f:
         9f:38:ed:25:7b:bf:08:e4:af:54:08:c2:9f:c7:4d:ad:ef:72:
         7a:6a:c2:b5:d7:8e:23:7b:b6:86:9b:ae:90:a8:fc:fb:eb:f0:
         6c:80:e9:36:df:45:56:8f:a1:af:29:30:2b:17:bd:55:ad:e7:
         4f:fd:6a:81:8e:ef:93:fd:b7:8b:0e:c1:95:38:94:30:ad:d5:
         94:3a:c9:13:f5:0d:fe:62:2d:9b:53:50:e1:d1:89:3e:ab:8b:
         1c:de:ad:ba:e8:a7:97:4e:55:b5:b4:fb:b4:29:8f:4b:4d:8b:
         83:9a:45:2c:fd:cc:23:62:85:3d:40:f7:89:a9:a0:91:65:f9:
         c8:dd:35:28:c4:ec:c8:27:df:7b:7d:5a:06:c3:19:43:9c:df:
         88:7a:a9:bb:bd:08:d2:d3:19:ec:30:e0:03:a3:0a:c3:23:8e:
         8c:c1:ac:c1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVAafOsaRjtiWpzYB/tBzoM1TNsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1MUE4NDJFMzRCRjFBNDI3RUNFNjEzODMxRDY5Nzkw
MEZDMTRGOTAeFw0yNDA0MDQxNjI3MTZaFw0yNTA0MDMxNjMyMTZaMDMxMTAvBgNV
BAMTKDYxQTc0NzdCOTM1Qjg1QTQwNUU4MjY5OUY4MkY4QTM4REJFQTJCQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeavJCyuGpB90J10wauB+G5dth
dGCcXMuM35wPiO2NlCOdRKYRJF5MTLfnx496mA1XN1AOMZlmi/vXoF762nB9MkF1
MtlWmGrCTEyz851VWyj8vWxAFf1pVHOYy0CY6/n2idtC1wqA5JWbDi2VnY8ubQ4z
1PIzkyLmnYreKBAqPLucOnprJmiAz2QgPgO7sLuuy6oVNCopkqVOLqGxIqGG3w4M
r3PAmi5op+HOSC6NN1+dGUweZrIm/3+jVc/dcKnmJApy+haYQeXnAmdIHWFOojNm
9llhNSvtQZIiqKCJsnZN5yYjG3NBGt3XVipi5x/R2BFGfmOf+yZYVXUp3N83AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYadHe5NbhaQF6CaZ+C+KONvqK80wHwYDVR0j
BBgwFoAUdlGoQuNL8aQn7OYTgx1peQD8FPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1ZkamRtYXB0MkdSVnVhVG8xZGdYcUtGQk42aHNScXB3V1I1bXdFVGFz
YUIvMS83NjUxQTg0MkUzNEJGMUE0MjdFQ0U2MTM4MzFENjk3OTAwRkMxNEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2NTFBODQyRTM0QkYxQTQy
N0VDRTYxMzgzMUQ2OTc5MDBGQzE0RjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dWZGpkbWFwdDJHUlZ1YVRvMWRnWHFLRkJONmhzUnFwd1dSNW13RVRhc2FCLzEv
MzQzNTJlMzIzMjM3MmUzMTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMDMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt47QwDQYJKoZIhvcNAQELBQADggEBAE9x7R5J
V8hcXdS6y626sMZaxDuxNON4rNDC0K0/MQcf2mNChEVWxOmOdbqasxs08SRD5Prx
asGIFOTS9KtrGjPSjGJ6sAa7zvbpzBFgvb+R0RZ2458X2pQpX5847SV7vwjkr1QI
wp/HTa3vcnpqwrXXjiN7toabrpCo/Pvr8GyA6TbfRVaPoa8pMCsXvVWt50/9aoGO
75P9t4sOwZU4lDCt1ZQ6yRP1Df5iLZtTUOHRiT6rixzerbrop5dOVbW0+7Qpj0tN
i4OaRSz9zCNihT1A94mpoJFl+cjdNSjE7Mgn33t9WgbDGUOc34h6qbu9CNLTGeww
4AOjCsMjjozBrME=
-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:26 2024 by rpki-client on console-fra.rpki-client.org