Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/34352e3233342e34302e302f32322d3234203d3e203238363639.roa
File:                     34352e3233342e34302e302f32322d3234203d3e203238363639.roa (raw, json)
Hash identifier:          IR75jgv1Iqa+kdIaXTKqmEgJauEzQTSroQ0klf4j5qk=
Subject key identifier:   AC:4A:EB:78:D6:FE:E3:AC:78:1D:DB:C4:26:EA:49:A3:3D:AB:6F:B1
Certificate issuer:       /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial:       6E5818884F27DFB14505FE029CBE824B8752326A
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/34352e3233342e34302e302f32322d3234203d3e203238363639.roa
Signing time:             Fri 03 Nov 2023 13:04:13 +0000
ROA not before:           Fri 03 Nov 2023 12:59:13 +0000
ROA not after:            Fri 01 Nov 2024 13:04:13 +0000
asID:                     28669
IP address blocks:        45.234.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 03:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:58:18:88:4f:27:df:b1:45:05:fe:02:9c:be:82:4b:87:52:32:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
        Validity
            Not Before: Nov  3 12:59:13 2023 GMT
            Not After : Nov  1 13:04:13 2024 GMT
        Subject: CN=AC4AEB78D6FEE3AC781DDBC426EA49A33DAB6FB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1f:76:77:e7:34:ed:c2:4b:6c:73:c4:23:cd:
                    6c:18:d1:bb:9c:31:38:e6:ce:f2:e2:dd:59:56:bd:
                    ff:26:6a:73:19:c5:db:ef:09:f6:25:52:9d:a1:d7:
                    34:9f:a4:ce:4c:ea:b3:81:36:2f:3a:5d:f6:25:b1:
                    ce:33:09:bc:46:24:61:6b:28:6f:80:be:7b:10:58:
                    75:8d:e2:f9:f9:b8:6b:66:ea:76:2c:ec:27:38:fc:
                    e6:56:bd:9e:88:31:db:e7:36:63:1c:b4:54:11:53:
                    ed:c0:37:7a:06:2d:e0:c7:b4:cd:35:82:7c:28:68:
                    a6:e9:66:31:d8:f0:55:ae:32:1b:2d:f3:60:44:5a:
                    ee:95:1b:4d:10:9d:41:43:37:f0:4c:23:f0:65:f2:
                    d4:7e:07:60:e0:e4:df:20:f7:62:ae:b1:1f:b0:56:
                    25:cf:e7:80:6f:f8:dc:ab:3a:b5:57:51:b6:92:3d:
                    18:41:a3:fd:be:88:ed:fe:8e:96:24:23:04:5c:42:
                    a9:6d:63:fb:92:5c:d1:a8:7b:e7:e2:11:14:ba:1f:
                    9e:65:67:ee:3d:ad:5b:df:0a:0f:ef:0c:d3:eb:24:
                    32:0d:b2:19:92:8c:ed:9f:83:1a:4b:6e:a2:cb:81:
                    66:3e:1a:06:4b:56:5b:ca:d2:0f:6d:3e:dd:a4:12:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4A:EB:78:D6:FE:E3:AC:78:1D:DB:C4:26:EA:49:A3:3D:AB:6F:B1
            X509v3 Authority Key Identifier:
                keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/34352e3233342e34302e302f32322d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:42:22:d4:8c:b6:e2:61:3a:d5:5e:92:f5:cb:96:7e:2d:88:
         a9:46:df:bc:68:e3:3a:66:3f:b6:3b:d7:d2:0d:26:29:3c:4a:
         03:98:93:32:b8:c8:80:55:23:31:b3:6a:ff:5a:94:94:df:84:
         2b:b1:d9:61:23:07:99:10:33:8f:8e:fc:37:2c:95:56:67:1b:
         64:c4:55:10:8d:33:bb:0c:83:6c:b0:21:90:01:3d:68:68:1d:
         4d:27:94:ad:6c:d0:dd:82:8d:b1:c5:ba:9f:06:c3:bd:d3:85:
         57:70:18:a4:9f:16:5c:78:b8:f2:33:6f:f5:e0:4f:54:a1:51:
         47:b5:ed:21:3f:3b:22:36:a8:f8:5d:64:0e:e6:63:ab:5e:e2:
         79:9f:51:f4:64:16:4b:19:0e:5c:33:59:0a:f1:83:dc:fb:8d:
         cd:f0:47:07:b5:74:93:47:d3:98:77:90:a0:73:23:2f:e1:73:
         65:f7:56:e2:71:44:58:a3:a0:49:3b:69:d8:b6:a3:d3:90:29:
         aa:ac:23:8f:af:02:6e:65:91:97:ea:6a:03:67:b0:db:06:9c:
         af:4a:26:23:f7:09:00:81:d4:15:49:93:b5:55:47:bb:cd:64:
         d0:c6:1a:fb:19:75:da:6c:23:f2:df:81:cf:a4:cf:fa:98:94:
         41:c9:96:73
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUblgYiE8n37FFBf4CnL6CS4dSMmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZERjNDNTRDMzRCQzAwNDBBQkJCRTQxMkVDNjk0OEM4
N0QxNjIyQTAeFw0yMzExMDMxMjU5MTNaFw0yNDExMDExMzA0MTNaMDMxMTAvBgNV
BAMTKEFDNEFFQjc4RDZGRUUzQUM3ODFEREJDNDI2RUE0OUEzM0RBQjZGQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClH3Z35zTtwktsc8QjzWwY0buc
MTjmzvLi3VlWvf8manMZxdvvCfYlUp2h1zSfpM5M6rOBNi86XfYlsc4zCbxGJGFr
KG+AvnsQWHWN4vn5uGtm6nYs7Cc4/OZWvZ6IMdvnNmMctFQRU+3AN3oGLeDHtM01
gnwoaKbpZjHY8FWuMhst82BEWu6VG00QnUFDN/BMI/Bl8tR+B2Dg5N8g92KusR+w
ViXP54Bv+NyrOrVXUbaSPRhBo/2+iO3+jpYkIwRcQqltY/uSXNGoe+fiERS6H55l
Z+49rVvfCg/vDNPrJDINshmSjO2fgxpLbqLLgWY+GgZLVlvK0g9tPt2kEidxAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUrErreNb+46x4HdvEJupJoz2rb7EwHwYDVR0j
BBgwFoAUNt88VMNLwAQKu75BLsaUjIfRYiowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMC8zNkRGM0M1NEMzNEJDMDA0MEFCQkJFNDEyRUM2OTQ4Qzg3RDE2MjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2REYzQzU0QzM0QkMwMDQw
QUJCQkU0MTJFQzY5NDhDODdEMTYyMkEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzAv
MzQzNTJlMzIzMzM0MmUzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODM2
MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi3qKDANBgkqhkiG9w0BAQsFAAOCAQEAM0Ii1Iy24mE6
1V6S9cuWfi2IqUbfvGjjOmY/tjvX0g0mKTxKA5iTMrjIgFUjMbNq/1qUlN+EK7HZ
YSMHmRAzj478NyyVVmcbZMRVEI0zuwyDbLAhkAE9aGgdTSeUrWzQ3YKNscW6nwbD
vdOFV3AYpJ8WXHi48jNv9eBPVKFRR7XtIT87Ijao+F1kDuZjq17ieZ9R9GQWSxkO
XDNZCvGD3PuNzfBHB7V0k0fTmHeQoHMjL+FzZfdW4nFEWKOgSTtp2Laj05Apqqwj
j68CbmWRl+pqA2ew2wacr0omI/cJAIHUFUmTtVVHu81k0MYa+xl12mwj8t+Bz6TP
+piUQcmWcw==
-----END CERTIFICATE-----
Generated at Tue Jan 9 03:49:02 2024 by rpki-client on console.sobornost.net