Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/34352e3137372e3131362e302f32322d3332203d3e20323638393931.roa
File:                     34352e3137372e3131362e302f32322d3332203d3e20323638393931.roa (raw, json)
Hash identifier:          cuZedvmyIw0IlqCBpjmU5Cw5thfYq0hHkkVVpE3acJI=
Subject key identifier:   D8:77:8C:24:CB:A0:58:C7:A6:EC:87:FA:04:E5:D7:D8:4C:3E:E7:01
Certificate issuer:       /CN=813D65FBA309A9EA091B5CF0F748FC498935778B
Certificate serial:       0267ECE0B07A9FD2D2C649BC96922206A792A522
Authority key identifier: 81:3D:65:FB:A3:09:A9:EA:09:1B:5C:F0:F7:48:FC:49:89:35:77:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813D65FBA309A9EA091B5CF0F748FC498935778B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/34352e3137372e3131362e302f32322d3332203d3e20323638393931.roa
Signing time:             Tue 07 May 2024 12:53:35 +0000
ROA not before:           Tue 07 May 2024 12:48:35 +0000
ROA not after:            Tue 06 May 2025 12:53:35 +0000
asID:                     268991
IP address blocks:        45.177.116.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.crl
                          rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813D65FBA309A9EA091B5CF0F748FC498935778B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 13:56:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:67:ec:e0:b0:7a:9f:d2:d2:c6:49:bc:96:92:22:06:a7:92:a5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813D65FBA309A9EA091B5CF0F748FC498935778B
        Validity
            Not Before: May  7 12:48:35 2024 GMT
            Not After : May  6 12:53:35 2025 GMT
        Subject: CN=D8778C24CBA058C7A6EC87FA04E5D7D84C3EE701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:15:0b:ff:e6:43:f7:aa:f2:51:64:78:c7:
                    0a:88:db:b9:06:ef:06:49:0e:02:03:5b:0f:6a:3c:
                    0e:73:07:a6:b9:5e:1c:4f:53:13:92:ca:fe:f2:2c:
                    56:1c:74:17:bf:29:4f:81:59:0b:90:e0:e6:3e:50:
                    9c:71:ea:39:46:a3:0d:57:7c:0c:98:87:1c:34:7c:
                    6e:a5:5c:4a:ba:5b:36:f7:e6:bd:34:b3:2e:fe:59:
                    e7:ee:3a:08:46:25:63:9f:52:bc:40:ae:33:42:0a:
                    2a:67:08:63:26:fc:14:26:b7:f5:bd:0b:43:e8:fc:
                    da:79:d9:a4:67:dc:e5:91:bb:b4:6e:10:5e:1e:03:
                    73:89:6f:73:86:33:52:6a:4f:14:9e:49:74:04:ac:
                    1b:6c:2e:49:20:06:3c:27:52:7d:19:96:c2:26:46:
                    ae:41:b3:d3:31:d1:63:d7:29:be:7d:4a:7f:16:1d:
                    e4:19:f8:75:7a:33:17:99:8d:52:76:55:92:4d:d8:
                    76:58:cb:9f:12:d0:a9:53:76:3c:b1:6f:d7:50:76:
                    20:b5:62:3c:3d:0d:2f:0d:d6:c1:75:12:45:8f:33:
                    d3:12:35:89:b3:47:b5:9d:66:9e:85:53:ef:db:c8:
                    09:66:44:0e:06:8d:f6:f9:d3:42:7e:83:d2:44:be:
                    71:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:77:8C:24:CB:A0:58:C7:A6:EC:87:FA:04:E5:D7:D8:4C:3E:E7:01
            X509v3 Authority Key Identifier:
                keyid:81:3D:65:FB:A3:09:A9:EA:09:1B:5C:F0:F7:48:FC:49:89:35:77:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813D65FBA309A9EA091B5CF0F748FC498935778B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/34352e3137372e3131362e302f32322d3332203d3e20323638393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:5f:cd:5f:58:2b:21:ac:6a:c1:6b:02:a8:07:05:00:28:1d:
         ef:e5:75:ef:58:db:31:0a:fa:52:0a:9d:c6:7f:6b:be:c7:3e:
         dd:5d:af:ca:c4:b5:58:4b:47:1a:6a:75:bd:07:a7:11:5b:46:
         88:93:1f:d6:a1:9f:97:3c:5c:a7:6e:e5:a4:9f:f3:5e:25:4f:
         7c:de:40:20:67:17:3b:3a:c2:0f:33:4f:f8:87:88:09:6c:c5:
         71:38:a4:2c:d2:3d:0f:86:34:a4:34:1c:ca:f1:5e:29:9e:69:
         c7:9a:03:08:8f:6b:e9:34:96:1e:84:73:d5:e9:75:a8:0e:91:
         64:e5:ef:b7:78:fc:a9:c3:86:6f:5e:06:0c:0f:8b:99:82:40:
         58:ca:ad:59:59:99:70:f8:41:fb:4a:80:65:59:b3:c0:a6:3e:
         46:7b:af:90:c3:1b:e8:fa:54:fd:e2:6c:89:91:f5:7e:ca:83:
         86:ec:72:e6:ab:f0:6e:fb:62:5d:7f:86:cf:6b:e6:00:a1:84:
         33:40:e4:6d:a0:a1:c9:f3:ba:61:3c:c8:0b:07:d6:81:05:23:
         b9:1e:fd:78:4d:7a:7a:8a:31:1f:21:b8:8f:b3:aa:d1:5b:d7:
         87:e5:24:3e:b9:b6:70:df:e2:15:0d:16:a6:f0:2e:d7:e3:89:
         55:e2:7c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 14:42:42 2024 by rpki-client on console-ams.rpki-client.org