Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32312e302f32342d3234203d3e20323637303931.roa
File:                     34352e3232392e32312e302f32342d3234203d3e20323637303931.roa (raw, json)
Hash identifier:          mvgCPsHhoBHtAHWv6paTaWP0Olx2CsPQXgKJuGSZDDA=
Subject key identifier:   69:7F:44:14:80:30:56:20:94:9A:A7:C7:A3:BC:56:79:01:07:01:A5
Certificate issuer:       /CN=D1767E436F91B824888366F56CC5E3F1E56F76AF
Certificate serial:       4006537A40632491397A42278EE34399BADB9A0C
Authority key identifier: D1:76:7E:43:6F:91:B8:24:88:83:66:F5:6C:C5:E3:F1:E5:6F:76:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32312e302f32342d3234203d3e20323637303931.roa
Signing time:             Wed 05 Apr 2023 11:55:12 +0000
ROA not before:           Wed 05 Apr 2023 11:50:12 +0000
ROA not after:            Wed 03 Apr 2024 11:55:12 +0000
asID:                     267091
IP address blocks:        45.229.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.crl
                          rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 13:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:06:53:7a:40:63:24:91:39:7a:42:27:8e:e3:43:99:ba:db:9a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1767E436F91B824888366F56CC5E3F1E56F76AF
        Validity
            Not Before: Apr  5 11:50:12 2023 GMT
            Not After : Apr  3 11:55:12 2024 GMT
        Subject: CN=697F441480305620949AA7C7A3BC5679010701A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:cf:57:ba:ec:f3:2d:9d:08:f2:6d:7f:7c:
                    8e:27:2f:11:b0:34:3c:2a:23:db:e4:ea:8e:d0:de:
                    e2:70:67:4f:57:41:71:75:a9:4e:02:2a:31:da:e0:
                    10:bd:32:30:db:2b:63:9a:ee:55:a1:97:4b:6b:03:
                    7a:13:9d:b5:70:03:72:26:86:89:12:36:42:c1:4a:
                    76:c0:50:04:f3:46:61:5b:cb:60:6a:4d:e5:66:eb:
                    78:07:99:1d:35:73:06:e5:ae:9c:2e:1d:ed:c5:9b:
                    e4:31:fe:01:99:7e:6f:59:27:c2:57:ca:2f:65:05:
                    e6:82:cb:5b:c0:48:18:a3:39:5c:49:83:33:85:4c:
                    de:91:1b:cb:72:f3:1f:5e:75:33:1a:dc:20:32:7a:
                    ae:6a:73:f5:df:12:26:3c:28:37:c5:87:59:6e:4c:
                    33:0c:88:ff:e7:9e:dc:cd:c4:76:dc:04:28:97:21:
                    7b:c2:01:95:e2:77:18:77:16:84:e4:36:05:13:92:
                    86:4e:6e:f0:da:99:98:36:b1:dc:a8:9b:2b:c7:18:
                    9c:e6:82:e2:84:56:15:ce:a9:64:c8:b7:c8:5b:f9:
                    66:a0:ca:28:02:67:c9:ed:0e:31:d2:2a:9e:20:90:
                    2f:04:ff:d1:94:ef:4d:84:26:e9:03:81:59:54:cc:
                    e6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7F:44:14:80:30:56:20:94:9A:A7:C7:A3:BC:56:79:01:07:01:A5
            X509v3 Authority Key Identifier:
                keyid:D1:76:7E:43:6F:91:B8:24:88:83:66:F5:6C:C5:E3:F1:E5:6F:76:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32312e302f32342d3234203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:e8:c9:81:23:03:44:b8:64:00:75:21:04:bb:cb:90:0c:3e:
         df:a8:0a:cf:bd:ae:f3:15:14:19:ae:ab:0c:d7:e2:b8:3d:5d:
         44:17:b3:e0:87:3f:2c:c8:7c:72:d4:ba:55:28:30:e3:b2:01:
         a6:f0:86:87:55:e3:53:18:57:d7:35:4e:9e:d4:6b:20:e0:db:
         45:f4:cd:11:b2:84:c6:aa:98:f0:ba:fa:ef:bb:98:24:f0:a5:
         70:54:b2:8a:63:43:31:b3:c8:a2:f9:3f:99:76:20:59:ff:3c:
         f8:42:cd:f9:cb:71:e9:8e:c5:9f:ef:16:2e:ee:e5:0c:72:b5:
         af:53:6f:ef:42:50:78:40:ce:82:85:07:31:24:8a:2f:87:c0:
         30:f0:22:24:7d:c1:3c:5f:d6:25:10:3f:4c:d8:22:c5:8b:17:
         38:91:f6:e6:c2:9f:2a:70:62:e3:12:f4:4a:ca:97:db:8c:2e:
         53:c2:2c:37:80:f1:38:e3:45:aa:c2:68:0a:c4:3e:42:32:75:
         e7:02:f5:33:6a:c4:41:18:68:4f:8c:00:be:d4:3a:c6:1c:ee:
         d4:05:21:17:40:23:5c:39:a9:7c:39:27:57:61:56:44:5b:00:
         9f:7d:53:24:b8:14:7b:11:f4:1d:ad:46:a8:c8:fc:c1:05:ba:
         22:ae:f7:b5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQAZTekBjJJE5ekInjuNDmbrbmgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE3NjdFNDM2RjkxQjgyNDg4ODM2NkY1NkNDNUUzRjFF
NTZGNzZBRjAeFw0yMzA0MDUxMTUwMTJaFw0yNDA0MDMxMTU1MTJaMDMxMTAvBgNV
BAMTKDY5N0Y0NDE0ODAzMDU2MjA5NDlBQTdDN0EzQkM1Njc5MDEwNzAxQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Ls9XuuzzLZ0I8m1/fI4nLxGw
NDwqI9vk6o7Q3uJwZ09XQXF1qU4CKjHa4BC9MjDbK2Oa7lWhl0trA3oTnbVwA3Im
hokSNkLBSnbAUATzRmFby2BqTeVm63gHmR01cwblrpwuHe3Fm+Qx/gGZfm9ZJ8JX
yi9lBeaCy1vASBijOVxJgzOFTN6RG8ty8x9edTMa3CAyeq5qc/XfEiY8KDfFh1lu
TDMMiP/nntzNxHbcBCiXIXvCAZXidxh3FoTkNgUTkoZObvDamZg2sdyomyvHGJzm
guKEVhXOqWTIt8hb+WagyigCZ8ntDjHSKp4gkC8E/9GU702EJukDgVlUzOaLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUaX9EFIAwViCUmqfHo7xWeQEHAaUwHwYDVR0j
BBgwFoAU0XZ+Q2+RuCSIg2b1bMXj8eVvdq8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGVCd3RQb2VkUGc5Nm5aNW80RmtxcVlwQjlObzhaem43VWVDOVBoOHFk
R1cvMC9EMTc2N0U0MzZGOTFCODI0ODg4MzY2RjU2Q0M1RTNGMUU1NkY3NkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QxNzY3RTQzNkY5MUI4MjQ4
ODgzNjZGNTZDQzVFM0YxRTU2Rjc2QUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhlQnd0UG9lZFBnOTZuWjVvNEZrcXFZcEI5Tm84WnpuN1VlQzlQaDhxZEdXLzAv
MzQzNTJlMzIzMjM5MmUzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzAzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeUVMA0GCSqGSIb3DQEBCwUAA4IBAQCb6MmBIwNE
uGQAdSEEu8uQDD7fqArPva7zFRQZrqsM1+K4PV1EF7Pghz8syHxy1LpVKDDjsgGm
8IaHVeNTGFfXNU6e1Gsg4NtF9M0RsoTGqpjwuvrvu5gk8KVwVLKKY0Mxs8ii+T+Z
diBZ/zz4Qs35y3HpjsWf7xYu7uUMcrWvU2/vQlB4QM6ChQcxJIovh8Aw8CIkfcE8
X9YlED9M2CLFixc4kfbmwp8qcGLjEvRKypfbjC5Twiw3gPE440WqwmgKxD5CMnXn
AvUzasRBGGhPjAC+1DrGHO7UBSEXQCNcOal8OSdXYVZEWwCffVMkuBR7EfQdrUao
yPzBBboirve1
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:20 2024 by rpki-client on console.sobornost.net