Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/34352e3233352e302e302f32322d3234203d3e20323637333930.roa
File:                     34352e3233352e302e302f32322d3234203d3e20323637333930.roa (raw, json)
Hash identifier:          uTBvGlXpZEGuIGbm2k/zv/ym4egNiNCKW39WVb15FFE=
Subject key identifier:   77:31:C8:0B:25:22:9F:51:93:DB:06:8A:DC:1E:FE:79:EE:D2:D3:E3
Certificate issuer:       /CN=66DCAA5522EEEC15CC978DE673986E897244B698
Certificate serial:       2061C1A614406A416DC5523797E28B88EF0D970C
Authority key identifier: 66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/34352e3233352e302e302f32322d3234203d3e20323637333930.roa
Signing time:             Mon 06 May 2024 13:50:07 +0000
ROA not before:           Mon 06 May 2024 13:45:07 +0000
ROA not after:            Mon 05 May 2025 13:50:07 +0000
asID:                     267390
IP address blocks:        45.235.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl
                          rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 17:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:61:c1:a6:14:40:6a:41:6d:c5:52:37:97:e2:8b:88:ef:0d:97:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66DCAA5522EEEC15CC978DE673986E897244B698
        Validity
            Not Before: May  6 13:45:07 2024 GMT
            Not After : May  5 13:50:07 2025 GMT
        Subject: CN=7731C80B25229F5193DB068ADC1EFE79EED2D3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:9b:f3:00:ac:b7:67:2f:0c:ed:37:29:dc:
                    82:b9:0b:f5:58:56:29:b9:2f:45:b3:85:f0:93:96:
                    4c:63:16:5e:e8:82:c8:73:c1:36:c0:6a:cc:63:3c:
                    32:39:4f:f7:a4:a7:56:ca:71:79:70:b3:30:ba:c1:
                    6d:9e:09:ed:6e:6a:ed:a1:35:0b:26:22:53:0a:4b:
                    65:35:4e:87:a7:41:eb:c9:44:aa:79:12:10:59:05:
                    bb:43:35:39:8f:56:79:fe:8a:af:70:98:fb:9a:b3:
                    60:a2:3e:24:07:95:21:91:e9:7e:6e:13:92:7d:37:
                    15:9a:c1:e2:14:d2:e9:67:30:26:db:44:38:49:74:
                    4c:05:b5:3e:89:b4:de:6e:ac:8c:3f:26:c3:b6:88:
                    1a:ee:a7:08:64:c1:3a:26:34:5d:21:f8:fa:8f:ba:
                    37:f8:5b:1b:9c:f9:f6:06:6a:1e:f6:af:b1:ee:76:
                    80:23:64:f9:a2:f0:13:d0:57:26:8b:d0:03:7a:7f:
                    06:62:ab:24:16:c7:f6:c1:6d:13:41:8f:31:b9:ef:
                    f3:67:28:d9:4a:9e:7b:ea:c8:67:59:08:74:fb:06:
                    27:c1:bf:92:b0:f7:4c:29:d2:65:cc:c7:df:70:8e:
                    7f:9b:d0:fd:b0:37:25:93:c9:79:52:f1:c9:96:19:
                    95:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:31:C8:0B:25:22:9F:51:93:DB:06:8A:DC:1E:FE:79:EE:D2:D3:E3
            X509v3 Authority Key Identifier:
                keyid:66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/34352e3233352e302e302f32322d3234203d3e20323637333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:8e:a9:7b:8a:1b:85:e5:7f:d2:c0:4f:89:7f:be:d3:f9:cd:
         a9:e2:8f:1f:b8:17:13:a0:91:7d:c9:75:74:71:e8:c9:37:21:
         07:ef:dc:e5:27:35:57:8c:fe:62:0f:3f:b5:51:11:b5:10:f7:
         db:4a:01:51:a7:08:29:e9:09:f6:a4:8a:22:48:2e:19:1f:be:
         92:f8:82:b2:f2:d7:3a:8e:c3:57:23:b5:d6:b5:22:2f:04:11:
         88:b2:9b:78:f6:36:a8:84:06:b0:0c:49:37:37:6d:6c:46:1f:
         f5:bf:3e:de:f8:37:d5:ec:cb:24:67:c6:53:25:54:8f:45:c1:
         ff:44:d1:d3:d2:57:bb:f1:53:6f:0b:a5:43:52:f4:da:f7:e9:
         ee:6f:f3:34:55:2c:1f:73:39:e6:05:6b:da:c3:05:8b:9d:47:
         34:bd:b9:e6:bb:88:7f:19:db:bf:91:be:ec:e6:55:8e:d0:8d:
         80:57:71:50:8d:2a:64:b2:58:1f:93:21:83:f1:ed:5e:2c:4b:
         8b:ee:7a:41:a2:96:94:0d:d2:21:80:b5:10:c1:dc:70:c7:ad:
         30:db:9b:16:fa:c8:df:92:15:e5:94:d7:73:e8:c5:e9:0c:3a:
         2c:66:2b:58:27:17:53:f3:0b:27:04:bf:69:9a:53:53:55:89:
         b1:0d:c5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:59:33 2024 by rpki-client on console-fra.rpki-client.org