Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32322e302f32342d3234203d3e20323637303931.roa
File:                     34352e3232392e32322e302f32342d3234203d3e20323637303931.roa (raw, json)
Hash identifier:          spurJDKTw4NxZsZ2Y1HedN/YoujKtPWooVhtQ98KaYE=
Subject key identifier:   0B:7B:BB:3E:FB:A3:7C:9A:3F:7B:53:D8:76:43:7F:F1:82:B9:73:EF
Certificate issuer:       /CN=D1767E436F91B824888366F56CC5E3F1E56F76AF
Certificate serial:       6C2E76F13C9B33EF87E1FF25518B7AB6AAEF08A4
Authority key identifier: D1:76:7E:43:6F:91:B8:24:88:83:66:F5:6C:C5:E3:F1:E5:6F:76:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32322e302f32342d3234203d3e20323637303931.roa
Signing time:             Wed 05 Apr 2023 11:55:15 +0000
ROA not before:           Wed 05 Apr 2023 11:50:15 +0000
ROA not after:            Wed 03 Apr 2024 11:55:15 +0000
asID:                     267091
IP address blocks:        45.229.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.crl
                          rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 13:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2e:76:f1:3c:9b:33:ef:87:e1:ff:25:51:8b:7a:b6:aa:ef:08:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1767E436F91B824888366F56CC5E3F1E56F76AF
        Validity
            Not Before: Apr  5 11:50:15 2023 GMT
            Not After : Apr  3 11:55:15 2024 GMT
        Subject: CN=0B7BBB3EFBA37C9A3F7B53D876437FF182B973EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:09:90:12:62:10:78:12:12:5b:22:e2:8a:
                    cf:e4:fe:07:13:28:ec:86:bf:2c:10:24:fe:3d:be:
                    49:d7:a6:ce:41:b6:42:3d:21:72:0c:b2:3a:0b:da:
                    69:83:1c:cc:43:86:3d:73:2c:f0:50:2e:5d:8e:d4:
                    bc:14:ae:a7:52:6c:44:31:da:d4:b6:13:fd:9a:da:
                    69:e8:b2:6b:fe:8f:ba:ae:ef:ff:19:df:fd:db:c1:
                    a4:01:56:31:16:70:07:f3:5a:64:57:d7:d2:1f:21:
                    0e:fe:3d:57:52:db:08:a8:dd:df:fc:60:44:51:3b:
                    b0:93:a1:9d:fa:6d:6a:dc:e2:be:d0:12:e4:77:83:
                    34:2f:35:c6:a2:b2:fa:3e:21:fe:6f:6e:5a:8d:53:
                    d4:02:b8:69:b4:09:0d:f9:a9:e6:43:a4:05:40:93:
                    01:74:f1:dc:b3:9d:20:38:18:f1:c3:bc:23:80:56:
                    8d:4d:d1:8d:4b:93:67:da:2d:e5:cb:0c:c4:a8:9a:
                    5d:b1:7d:3b:b1:9e:20:4e:ae:33:9e:aa:38:24:0a:
                    30:9b:c7:c0:a2:f0:10:98:27:85:f1:6f:11:55:c0:
                    f0:b6:84:45:0c:21:ef:d7:f1:c5:bd:46:3d:72:3b:
                    86:70:1c:b0:14:e6:a6:de:b0:36:be:b8:5b:f1:16:
                    ad:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7B:BB:3E:FB:A3:7C:9A:3F:7B:53:D8:76:43:7F:F1:82:B9:73:EF
            X509v3 Authority Key Identifier:
                keyid:D1:76:7E:43:6F:91:B8:24:88:83:66:F5:6C:C5:E3:F1:E5:6F:76:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32322e302f32342d3234203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:41:42:63:17:a1:32:40:d7:67:58:50:fb:e0:77:23:e6:65:
         0a:cc:21:b9:52:72:bb:fe:07:96:c9:87:91:6c:30:11:18:5b:
         3a:db:1d:56:66:ab:e0:9c:30:42:e8:3b:c2:4b:92:df:c7:73:
         e6:0d:2f:00:b2:18:c0:73:41:fe:56:55:b2:54:50:c7:df:fc:
         0b:78:27:e6:ad:dc:6e:75:86:fc:be:0b:22:ac:1f:9d:b6:01:
         4a:be:a5:26:8e:08:a1:b2:41:67:93:40:a3:81:f2:b1:f4:68:
         df:7c:d5:6b:d8:e7:12:c8:11:75:3f:05:4c:48:ab:42:b3:7a:
         01:5c:0c:7e:2e:95:87:28:0f:e4:23:64:92:1c:cd:20:93:35:
         4f:12:72:72:3d:09:5c:53:d0:04:82:74:6c:91:b2:f3:19:a3:
         ed:92:c1:16:a8:d3:8b:d2:69:9a:8e:5e:6a:4a:d4:5d:db:c3:
         95:54:8c:a9:72:c2:f0:46:da:c4:e6:12:11:4f:b9:10:70:2e:
         6d:1a:5c:12:43:c1:70:5e:29:e3:73:bf:aa:b6:04:70:ee:2e:
         a1:69:fa:90:cf:d0:58:ed:50:44:d4:84:7b:8f:1c:77:71:24:
         b4:83:3e:7e:6d:75:4c:de:89:aa:11:86:04:44:73:1e:a2:d3:
         7d:8a:7c:d6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbC528TybM++H4f8lUYt6tqrvCKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE3NjdFNDM2RjkxQjgyNDg4ODM2NkY1NkNDNUUzRjFF
NTZGNzZBRjAeFw0yMzA0MDUxMTUwMTVaFw0yNDA0MDMxMTU1MTVaMDMxMTAvBgNV
BAMTKDBCN0JCQjNFRkJBMzdDOUEzRjdCNTNEODc2NDM3RkYxODJCOTczRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr3QmQEmIQeBISWyLiis/k/gcT
KOyGvywQJP49vknXps5BtkI9IXIMsjoL2mmDHMxDhj1zLPBQLl2O1LwUrqdSbEQx
2tS2E/2a2mnosmv+j7qu7/8Z3/3bwaQBVjEWcAfzWmRX19IfIQ7+PVdS2wio3d/8
YERRO7CToZ36bWrc4r7QEuR3gzQvNcaisvo+If5vblqNU9QCuGm0CQ35qeZDpAVA
kwF08dyznSA4GPHDvCOAVo1N0Y1Lk2faLeXLDMSoml2xfTuxniBOrjOeqjgkCjCb
x8Ci8BCYJ4XxbxFVwPC2hEUMIe/X8cW9Rj1yO4ZwHLAU5qbesDa+uFvxFq1dAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUC3u7PvujfJo/e1PYdkN/8YK5c+8wHwYDVR0j
BBgwFoAU0XZ+Q2+RuCSIg2b1bMXj8eVvdq8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGVCd3RQb2VkUGc5Nm5aNW80RmtxcVlwQjlObzhaem43VWVDOVBoOHFk
R1cvMC9EMTc2N0U0MzZGOTFCODI0ODg4MzY2RjU2Q0M1RTNGMUU1NkY3NkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QxNzY3RTQzNkY5MUI4MjQ4
ODgzNjZGNTZDQzVFM0YxRTU2Rjc2QUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhlQnd0UG9lZFBnOTZuWjVvNEZrcXFZcEI5Tm84WnpuN1VlQzlQaDhxZEdXLzAv
MzQzNTJlMzIzMjM5MmUzMjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzAzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeUWMA0GCSqGSIb3DQEBCwUAA4IBAQCjQUJjF6Ey
QNdnWFD74Hcj5mUKzCG5UnK7/geWyYeRbDARGFs62x1WZqvgnDBC6DvCS5Lfx3Pm
DS8AshjAc0H+VlWyVFDH3/wLeCfmrdxudYb8vgsirB+dtgFKvqUmjgihskFnk0Cj
gfKx9GjffNVr2OcSyBF1PwVMSKtCs3oBXAx+LpWHKA/kI2SSHM0gkzVPEnJyPQlc
U9AEgnRskbLzGaPtksEWqNOL0mmajl5qStRd28OVVIypcsLwRtrE5hIRT7kQcC5t
GlwSQ8FwXinjc7+qtgRw7i6hafqQz9BY7VBE1IR7jxx3cSS0gz5+bXVM3omqEYYE
RHMeotN9inzW
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:20 2024 by rpki-client on console.sobornost.net