Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/34352e3138332e3138382e302f32322d3234203d3e20323639323938.roa
File:                     34352e3138332e3138382e302f32322d3234203d3e20323639323938.roa (raw, json)
Hash identifier:          wyLctuYVhbgItETqNK5SdH76fPQ5uxUKadSdwq8aD7E=
Subject key identifier:   57:23:D1:3B:D7:2D:7A:BB:0B:A8:9E:85:6A:C4:DE:5D:6C:77:1A:B0
Certificate issuer:       /CN=BDF780A1AD20031A92186F4B5C02F049FB8A7D26
Certificate serial:       3238099518327E30B8572DE3C9A4C0DAB919FDD8
Authority key identifier: BD:F7:80:A1:AD:20:03:1A:92:18:6F:4B:5C:02:F0:49:FB:8A:7D:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/34352e3138332e3138382e302f32322d3234203d3e20323639323938.roa
Signing time:             Mon 13 May 2024 19:22:22 +0000
ROA not before:           Mon 13 May 2024 19:17:22 +0000
ROA not after:            Mon 12 May 2025 19:22:22 +0000
asID:                     269298
IP address blocks:        45.183.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl
                          rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:38:09:95:18:32:7e:30:b8:57:2d:e3:c9:a4:c0:da:b9:19:fd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF780A1AD20031A92186F4B5C02F049FB8A7D26
        Validity
            Not Before: May 13 19:17:22 2024 GMT
            Not After : May 12 19:22:22 2025 GMT
        Subject: CN=5723D13BD72D7ABB0BA89E856AC4DE5D6C771AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c1:ca:f9:df:6d:24:4c:81:c2:f0:c3:80:fe:
                    66:fd:38:56:30:64:10:ce:a2:ee:71:2a:8b:20:4f:
                    97:26:3b:95:f8:52:07:42:56:8f:b1:b5:31:11:5f:
                    87:8a:b6:98:6e:56:32:63:ec:80:b0:f7:34:86:6e:
                    e7:76:f6:c6:60:3e:f4:39:f2:e2:ae:bd:9e:c3:ec:
                    79:cf:03:0c:90:f2:66:41:82:d2:84:9b:80:19:ef:
                    53:d1:b5:8e:bf:e6:3f:5c:e2:a6:cc:ef:cc:57:6c:
                    6a:60:46:e7:f6:68:30:1f:cb:d4:08:b8:7b:dd:27:
                    8d:c0:c3:45:e3:35:a8:e4:c7:bc:5f:77:0a:b4:7c:
                    f7:b2:32:38:f7:e1:f0:67:60:70:38:41:b5:70:4e:
                    5c:4f:f5:9f:5e:af:ac:ea:1a:20:8d:7b:ec:e4:08:
                    d7:74:34:08:c0:c2:5b:a2:59:4a:ae:2c:97:0f:4c:
                    0d:70:86:a3:ef:cf:f3:83:63:5b:66:c0:ca:1f:4d:
                    b1:12:c9:31:ec:f6:ff:df:9e:d6:a0:03:60:53:bb:
                    3e:0d:f1:26:48:bf:0e:ea:17:89:dc:30:72:fd:d0:
                    ef:98:ba:03:40:e9:c0:49:98:59:3b:a1:9a:bd:0c:
                    13:f2:e8:c8:fe:7b:1c:0d:c2:d5:96:2e:4c:a4:21:
                    4b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:23:D1:3B:D7:2D:7A:BB:0B:A8:9E:85:6A:C4:DE:5D:6C:77:1A:B0
            X509v3 Authority Key Identifier:
                keyid:BD:F7:80:A1:AD:20:03:1A:92:18:6F:4B:5C:02:F0:49:FB:8A:7D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/34352e3138332e3138382e302f32322d3234203d3e20323639323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:c2:a9:16:9b:bb:35:db:44:97:52:d8:e5:fc:65:4c:40:79:
         e8:c9:33:e8:eb:33:d6:0e:7e:cd:24:ef:8d:c8:4c:be:f2:4f:
         94:ba:54:5b:45:cd:fc:26:c2:29:4f:4e:ab:37:9a:d7:c0:53:
         6a:c1:df:13:92:e0:a6:59:e5:00:d2:a7:4b:65:97:56:72:51:
         dc:da:f7:05:61:e5:33:5c:35:46:c1:f6:0c:ef:42:47:dd:fb:
         9a:c6:41:38:f3:50:aa:49:7e:26:eb:3d:85:89:a6:e2:2d:6b:
         9c:b7:bf:0d:2a:b9:e0:a6:20:e2:b5:d6:34:f3:bd:d6:82:ac:
         7b:4e:aa:fd:d3:d7:ce:10:88:26:a5:7e:74:85:38:ac:3a:38:
         f6:98:42:d6:4c:5d:94:8b:db:ce:c8:a0:a5:89:fd:89:ac:34:
         64:1d:2f:57:df:f0:7e:53:d9:8f:bc:24:72:44:95:c8:95:11:
         de:4b:c2:e4:16:11:d6:9c:83:df:e4:5f:b8:86:c4:ea:4c:bf:
         04:9e:68:2d:81:8c:86:e8:65:79:ff:82:2b:9b:16:da:7f:ad:
         81:52:62:be:a4:7d:ea:cb:47:3a:38:e5:36:98:f2:cc:2f:c1:
         b1:b7:85:f9:b8:9a:d6:b3:2e:27:3e:17:90:c9:97:1e:61:37:
         06:1f:f6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:16 2025 by rpki-client