Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e31302e302f32342d3234203d3e20323638353835.roa
File:                     34352e3136342e31302e302f32342d3234203d3e20323638353835.roa (raw, json)
Hash identifier:          vXzq7Nk6QgxfsgX9PB1KcaEXkhiJhGMonxRvddYj0UE=
Subject key identifier:   AF:6D:DA:E4:67:47:43:A7:57:95:EC:5E:67:78:CD:5A:21:BA:00:E7
Certificate issuer:       /CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
Certificate serial:       3C6F397FC4E7C0DC3383F29885163F498D3A478D
Authority key identifier: AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e31302e302f32342d3234203d3e20323638353835.roa
Signing time:             Thu 04 Apr 2024 21:54:18 +0000
ROA not before:           Thu 04 Apr 2024 21:49:18 +0000
ROA not after:            Thu 03 Apr 2025 21:54:18 +0000
asID:                     268585
IP address blocks:        45.164.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl
                          rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6f:39:7f:c4:e7:c0:dc:33:83:f2:98:85:16:3f:49:8d:3a:47:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
        Validity
            Not Before: Apr  4 21:49:18 2024 GMT
            Not After : Apr  3 21:54:18 2025 GMT
        Subject: CN=AF6DDAE4674743A75795EC5E6778CD5A21BA00E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:88:68:fb:fb:e3:09:78:87:29:07:57:40:21:
                    12:fe:3e:c9:25:be:ea:4b:f0:e8:0f:08:f9:44:3f:
                    79:ea:07:8f:2a:d1:1b:08:44:15:2c:03:7e:ee:51:
                    21:47:dc:da:37:6c:88:b9:50:64:68:74:54:a4:48:
                    9b:d1:dc:f6:20:3c:76:c6:14:3b:62:5d:a8:62:c3:
                    44:aa:87:10:98:e6:32:86:6d:c0:b1:86:b0:ff:57:
                    a4:7e:2b:8d:f4:c1:69:d1:2e:af:db:7e:62:51:da:
                    e6:98:8b:f4:8f:e3:cf:57:98:51:75:b8:36:79:fd:
                    0b:76:76:53:31:45:f3:5e:c3:1a:36:18:c8:fc:47:
                    fb:45:9b:7d:f6:da:e2:7f:78:0b:2c:ad:f5:8d:0e:
                    98:8d:f1:d1:26:d7:ec:95:11:6d:94:ba:55:10:76:
                    33:94:d5:c3:5c:9c:9a:b3:aa:c0:9c:ab:31:17:ff:
                    c3:c9:69:1d:97:b9:07:a0:19:80:60:9b:ce:89:c0:
                    a7:04:56:83:cd:0d:cb:c5:6c:6d:e0:c9:42:7d:d9:
                    da:94:5a:96:08:2c:e5:6a:9b:f5:68:1d:72:14:41:
                    b6:c2:17:1d:c3:94:07:a3:49:a4:4f:b0:39:8b:59:
                    b2:71:1a:2c:9b:5e:e5:93:87:38:84:36:8b:2b:2e:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6D:DA:E4:67:47:43:A7:57:95:EC:5E:67:78:CD:5A:21:BA:00:E7
            X509v3 Authority Key Identifier:
                keyid:AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e31302e302f32342d3234203d3e20323638353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:05:46:be:78:d1:5d:56:e9:0c:e9:fd:24:4d:40:f3:11:30:
         d8:8b:4d:1c:a2:e1:f3:35:30:30:5b:e6:0b:cf:0c:a9:2a:db:
         64:34:2d:6e:f6:44:a5:03:f4:ca:4d:2d:b1:7e:4f:14:8c:6c:
         d7:54:65:dd:aa:a9:ed:d5:40:f6:a4:50:ea:69:19:f5:a4:e8:
         fb:51:3c:5e:c7:f0:42:b9:ef:e0:f3:e4:c9:a5:b8:e2:6a:b9:
         a3:fb:22:7d:24:45:96:a2:8f:de:c7:53:81:2b:83:38:cc:ba:
         31:8f:9f:55:17:5d:3a:5c:d7:87:f7:ee:17:5a:51:d2:fc:47:
         d4:bf:01:5e:51:ec:71:cc:b9:97:5c:69:84:94:1f:a6:35:0d:
         de:cb:b8:8a:3e:9b:1b:7b:0b:aa:0e:cd:14:74:89:d3:fe:6b:
         85:fa:08:8e:71:4a:e0:6b:89:38:90:a5:e4:44:68:82:72:c3:
         cb:01:de:2c:e5:49:7c:e1:98:4d:95:2f:76:cc:4e:4e:dc:34:
         a5:4f:f4:ff:75:19:d1:ee:f2:6f:e5:0e:00:d1:44:62:01:85:
         e3:52:c4:fb:e8:2d:2e:25:73:49:b6:3a:78:b4:55:3c:fd:52:
         a8:f3:04:35:88:21:1c:7c:61:38:0e:64:2d:fe:7f:c0:58:14:
         7b:9a:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:33 2024 by rpki-client on console-ams.rpki-client.org