Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/34352e3232362e3133382e302f32342d3234203d3e20323636393637.roa
File:                     34352e3232362e3133382e302f32342d3234203d3e20323636393637.roa (raw, json)
Hash identifier:          CbnMv/SaWKzKPg5g1fZ3zrHxjPhE9CdjU29Whq82gug=
Subject key identifier:   C8:C6:C3:CA:28:BC:B5:17:89:74:B6:41:7B:55:97:B0:57:6C:89:65
Certificate issuer:       /CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
Certificate serial:       42A2279C68AD90304BE97612352351EADE031AEB
Authority key identifier: 96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/34352e3232362e3133382e302f32342d3234203d3e20323636393637.roa
Signing time:             Thu 04 Apr 2024 10:04:10 +0000
ROA not before:           Thu 04 Apr 2024 09:59:10 +0000
ROA not after:            Thu 03 Apr 2025 10:04:10 +0000
asID:                     266967
IP address blocks:        45.226.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl
                          rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a2:27:9c:68:ad:90:30:4b:e9:76:12:35:23:51:ea:de:03:1a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
        Validity
            Not Before: Apr  4 09:59:10 2024 GMT
            Not After : Apr  3 10:04:10 2025 GMT
        Subject: CN=C8C6C3CA28BCB5178974B6417B5597B0576C8965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:ed:2f:79:24:91:ab:18:d0:75:74:80:38:
                    a9:15:0f:89:87:b9:06:c2:24:d8:b8:d5:61:da:b0:
                    36:f7:f1:c8:bb:11:57:1e:37:3a:a3:6b:e1:60:5b:
                    c1:e8:a5:73:ba:16:71:be:8b:f6:8d:21:87:45:e3:
                    08:a3:43:9a:7a:66:b0:6f:bc:9c:a9:ca:00:c6:79:
                    47:3d:4b:85:db:02:d3:17:8e:aa:c5:bc:db:b6:09:
                    9b:d5:c5:65:7f:f8:28:64:65:4f:7b:2b:65:28:e0:
                    4c:b4:0c:79:15:7d:36:9d:0a:84:02:ed:ce:a8:35:
                    ad:08:af:f5:05:0f:77:65:4b:e4:17:34:34:ba:6d:
                    54:07:c2:d2:30:40:af:b1:b2:9b:c5:7d:73:17:9a:
                    10:f8:31:f2:b4:08:85:c7:23:3b:aa:e2:e3:72:0d:
                    bc:02:69:12:28:71:95:63:54:7f:be:51:9c:98:6d:
                    65:63:9f:7f:68:58:0e:40:c3:12:16:7c:84:04:ef:
                    47:d2:8b:d4:ba:30:e0:6f:6d:42:b8:bc:19:44:04:
                    1f:0b:e9:6d:fc:e5:73:68:c8:ef:77:15:81:78:af:
                    02:ac:90:d1:62:d8:56:4c:3c:38:a7:df:b9:1a:73:
                    5b:0b:af:dc:2d:1c:e9:e2:81:1f:83:4b:45:66:82:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C6:C3:CA:28:BC:B5:17:89:74:B6:41:7B:55:97:B0:57:6C:89:65
            X509v3 Authority Key Identifier:
                keyid:96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/34352e3232362e3133382e302f32342d3234203d3e20323636393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:5d:1e:0e:d6:8c:9e:fe:4b:1a:90:16:e4:7e:62:7e:cf:5e:
         c0:af:92:96:85:33:0d:ee:4e:e2:e9:7b:5f:42:6e:be:44:b2:
         49:f7:a0:4a:f0:6a:2c:0c:7e:7e:bd:a6:4d:2f:65:a4:b4:3f:
         7b:ac:7d:0b:30:39:f8:da:e7:58:37:e6:62:bb:4c:6a:3d:4a:
         c9:6f:92:f5:17:72:65:26:47:ea:9e:bb:dd:77:c1:82:87:1d:
         6a:f0:9f:96:4d:d9:18:90:cf:3f:a4:45:0f:82:45:83:a0:79:
         fb:89:d0:26:dd:f6:6a:43:1a:70:ea:5c:b8:16:16:7c:d3:ee:
         ac:7d:2b:a3:12:53:ce:5a:6b:35:97:93:9a:03:7e:c3:c5:33:
         01:c6:5e:b6:64:aa:31:b2:9c:b5:a5:f1:c7:9f:b0:36:05:df:
         33:9b:2b:32:6b:45:b6:61:ef:d0:f1:b1:cf:f1:f0:ce:41:ad:
         98:20:35:9f:07:19:fe:a9:ef:50:57:f9:d7:ca:6d:1f:12:c3:
         ce:61:b0:d8:a4:96:cd:29:56:56:f5:92:19:91:84:14:83:b8:
         b6:97:2b:33:a2:3a:28:d5:9a:94:f9:6d:6c:ac:48:61:e0:cc:
         4d:24:8f:50:40:e4:cb:ce:73:0e:96:c1:e7:af:0b:1c:ed:56:
         ed:86:cd:c2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQqInnGitkDBL6XYSNSNR6t4DGuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYwODgzMTBCMDQ1NERGRkYyRkY0NTdDNTg3REJDMzg5
NzBBM0NBODAeFw0yNDA0MDQwOTU5MTBaFw0yNTA0MDMxMDA0MTBaMDMxMTAvBgNV
BAMTKEM4QzZDM0NBMjhCQ0I1MTc4OTc0QjY0MTdCNTU5N0IwNTc2Qzg5NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuR+0veSSRqxjQdXSAOKkVD4mH
uQbCJNi41WHasDb38ci7EVceNzqja+FgW8HopXO6FnG+i/aNIYdF4wijQ5p6ZrBv
vJypygDGeUc9S4XbAtMXjqrFvNu2CZvVxWV/+ChkZU97K2Uo4Ey0DHkVfTadCoQC
7c6oNa0Ir/UFD3dlS+QXNDS6bVQHwtIwQK+xspvFfXMXmhD4MfK0CIXHIzuq4uNy
DbwCaRIocZVjVH++UZyYbWVjn39oWA5AwxIWfIQE70fSi9S6MOBvbUK4vBlEBB8L
6W385XNoyO93FYF4rwKskNFi2FZMPDin37kac1sLr9wtHOnigR+DS0VmgrtzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyMbDyii8tReJdLZBe1WXsFdsiWUwHwYDVR0j
BBgwFoAUlgiDELBFTf/y/0V8WH28OJcKPKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Z6bUV4OE1EZ1pWdkhNR1QxdFlxRVZpRjdYdjdhTng3THl2RllzQng2
eDUvMS85NjA4ODMxMEIwNDU0REZGRjJGRjQ1N0M1ODdEQkMzODk3MEEzQ0E4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2MDg4MzEwQjA0NTRERkZG
MkZGNDU3QzU4N0RCQzM4OTcwQTNDQTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d2em1FeDhNRGdaVnZITUdUMXRZcUVWaUY3WHY3YU54N0x5dkZZc0J4Nng1LzEv
MzQzNTJlMzIzMjM2MmUzMTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzOTM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt4oowDQYJKoZIhvcNAQELBQADggEBAHhdHg7W
jJ7+SxqQFuR+Yn7PXsCvkpaFMw3uTuLpe19Cbr5Eskn3oErwaiwMfn69pk0vZaS0
P3usfQswOfja51g35mK7TGo9SslvkvUXcmUmR+qeu913wYKHHWrwn5ZN2RiQzz+k
RQ+CRYOgefuJ0Cbd9mpDGnDqXLgWFnzT7qx9K6MSU85aazWXk5oDfsPFMwHGXrZk
qjGynLWl8cefsDYF3zObKzJrRbZh79Dxsc/x8M5BrZggNZ8HGf6p71BX+dfKbR8S
w85hsNikls0pVlb1khmRhBSDuLaXKzOiOijVmpT5bWysSGHgzE0kj1BA5MvOcw6W
weevCxztVu2GzcI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:31 2024 by rpki-client on console-ams.rpki-client.org