Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa
File:                     34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa (raw, json)
Hash identifier:          OFD/HzofbvEm4xhafAD5fAsqvUXipVkfSxFyUOxNTxQ=
Subject key identifier:   A6:35:8B:FA:1E:3D:9B:3D:BF:EF:63:A9:74:1F:11:4A:69:30:B0:B5
Certificate issuer:       /CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E
Certificate serial:       4D1F661F0C8FE46A807E029B9D13F62262FACFAC
Authority key identifier: 4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa
Signing time:             Thu 04 Apr 2024 15:26:58 +0000
ROA not before:           Thu 04 Apr 2024 15:21:58 +0000
ROA not after:            Thu 03 Apr 2025 15:26:58 +0000
asID:                     269153
IP address blocks:        45.180.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl
                          rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1f:66:1f:0c:8f:e4:6a:80:7e:02:9b:9d:13:f6:22:62:fa:cf:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E
        Validity
            Not Before: Apr  4 15:21:58 2024 GMT
            Not After : Apr  3 15:26:58 2025 GMT
        Subject: CN=A6358BFA1E3D9B3DBFEF63A9741F114A6930B0B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b2:b9:4f:19:fa:40:e8:23:70:97:10:f4:64:
                    ee:7b:65:06:15:ae:7a:3a:24:3b:29:b7:b9:3d:6c:
                    23:57:1e:72:76:20:bb:2f:2b:fa:2c:e4:a0:eb:69:
                    a5:f6:b8:26:54:55:05:11:bb:93:35:fc:e9:a0:49:
                    c0:ce:b9:5c:3e:e7:8d:c5:d4:f8:62:b5:d2:9e:0d:
                    d6:ad:ad:e1:ad:ff:86:bd:9a:c1:ca:62:da:e2:f6:
                    b1:21:f5:fb:4a:2b:dc:67:fa:a2:d7:a6:16:93:86:
                    22:f5:72:ed:b2:c2:df:68:f9:a9:e5:89:ee:b8:3b:
                    39:fc:c6:2f:f8:5d:d7:8f:66:3c:5b:e2:58:79:c2:
                    96:aa:c1:99:36:da:3d:43:f1:da:4b:b1:1f:d1:7c:
                    32:48:31:1d:34:46:ec:5d:d1:55:12:4c:16:28:4d:
                    64:3c:4d:16:38:39:39:23:c1:e4:74:c9:d7:46:a2:
                    0e:7a:8f:55:fc:ae:48:bc:ff:52:e9:db:da:03:24:
                    fb:32:e2:39:5e:db:5f:36:4c:41:ec:23:5e:85:41:
                    e7:2a:b9:48:2f:7e:4e:1a:43:99:9a:f7:b6:69:52:
                    5e:41:7a:bf:d4:bc:9b:75:7f:4b:be:9c:39:43:7e:
                    da:30:53:4e:2c:fd:e4:69:d4:a5:c0:23:2c:59:aa:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:35:8B:FA:1E:3D:9B:3D:BF:EF:63:A9:74:1F:11:4A:69:30:B0:B5
            X509v3 Authority Key Identifier:
                keyid:4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:92:f3:17:57:05:80:ad:c6:3a:87:1a:b9:7b:35:a9:81:39:
         20:c1:c6:2a:f2:33:b9:90:20:9c:cd:23:97:4d:a6:5c:18:7c:
         e5:6d:01:44:1c:67:02:27:8f:65:6f:f9:58:78:ad:a3:ff:2e:
         6c:e8:bf:74:bb:c0:f5:3a:97:fe:41:fd:41:02:01:e3:05:13:
         02:e8:41:45:32:f1:ff:fc:46:f7:46:cd:72:12:04:de:64:1f:
         2e:6b:5e:ff:16:d0:c4:19:18:cf:88:02:55:79:4c:46:c3:79:
         ed:46:89:da:a8:a7:17:75:e7:0a:aa:5c:ae:bc:44:a7:20:16:
         3f:42:26:c0:2c:ff:89:86:ff:5a:26:30:5b:d7:0d:d2:47:9a:
         86:16:5c:51:d7:52:c5:fe:8d:e4:08:3d:67:ca:5c:8c:b3:d0:
         47:d1:c6:8b:30:17:ba:7e:15:7b:93:0f:1b:e6:8c:96:c2:7f:
         d4:09:dc:6e:a3:56:43:2e:5d:5b:0e:a5:5f:02:18:23:a1:3f:
         28:4c:4d:f1:94:ff:6e:31:8f:ad:5c:83:c1:e3:09:bf:e3:d6:
         3e:d2:da:ee:c9:6f:bf:73:9a:a6:26:84:bc:c3:13:22:b6:37:
         06:00:f0:1b:e0:a5:5f:b5:db:8f:a5:fd:9e:3d:53:58:5b:8e:
         e8:7a:df:e3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTR9mHwyP5GqAfgKbnRP2ImL6z6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJGQ0M2NTREQjQyNDhFRDlDQzhBRkM3RDYxQjcxRjcw
QTQ4NzA3RTAeFw0yNDA0MDQxNTIxNThaFw0yNTA0MDMxNTI2NThaMDMxMTAvBgNV
BAMTKEE2MzU4QkZBMUUzRDlCM0RCRkVGNjNBOTc0MUYxMTRBNjkzMEIwQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCasrlPGfpA6CNwlxD0ZO57ZQYV
rno6JDspt7k9bCNXHnJ2ILsvK/os5KDraaX2uCZUVQURu5M1/OmgScDOuVw+543F
1PhitdKeDdatreGt/4a9msHKYtri9rEh9ftKK9xn+qLXphaThiL1cu2ywt9o+anl
ie64Ozn8xi/4XdePZjxb4lh5wpaqwZk22j1D8dpLsR/RfDJIMR00Ruxd0VUSTBYo
TWQ8TRY4OTkjweR0yddGog56j1X8rki8/1Lp29oDJPsy4jle2182TEHsI16FQecq
uUgvfk4aQ5ma97ZpUl5Ber/UvJt1f0u+nDlDftowU04s/eRp1KXAIyxZqt2hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpjWL+h49mz2/72OpdB8RSmkwsLUwHwYDVR0j
BBgwFoAUS/zGVNtCSO2cyK/H1htx9wpIcH4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3JaWHpmd2EyUDFpQzJVNmVNTVlGU1VrQnJmQzRDc2JVUjZ3QTJQVFZa
QWgvMS80QkZDQzY1NERCNDI0OEVEOUNDOEFGQzdENjFCNzFGNzBBNDg3MDdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRkNDNjU0REI0MjQ4RUQ5
Q0M4QUZDN0Q2MUI3MUY3MEE0ODcwN0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dyWlh6ZndhMlAxaUMyVTZlTU1ZRlNVa0JyZkM0Q3NiVVI2d0EyUFRWWkFoLzEv
MzQzNTJlMzEzODMwMmUzMjMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIttOwwDQYJKoZIhvcNAQELBQADggEBADiS8xdX
BYCtxjqHGrl7NamBOSDBxiryM7mQIJzNI5dNplwYfOVtAUQcZwInj2Vv+Vh4raP/
Lmzov3S7wPU6l/5B/UECAeMFEwLoQUUy8f/8RvdGzXISBN5kHy5rXv8W0MQZGM+I
AlV5TEbDee1Gidqopxd15wqqXK68RKcgFj9CJsAs/4mG/1omMFvXDdJHmoYWXFHX
UsX+jeQIPWfKXIyz0EfRxoswF7p+FXuTDxvmjJbCf9QJ3G6jVkMuXVsOpV8CGCOh
PyhMTfGU/24xj61cg8HjCb/j1j7S2u7Jb79zmqYmhLzDEyK2NwYA8BvgpV+124+l
/Z49U1hbjuh63+M=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org