Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/34352e3232362e372e302f32342d3234203d3e20323636393533.roa
File:                     34352e3232362e372e302f32342d3234203d3e20323636393533.roa (raw, json)
Hash identifier:          R/bpLl+o6CLHG3WXY5osAZpBaak6tvZYJvQvWBsNJ3I=
Subject key identifier:   3A:FB:E2:7E:1C:4B:FD:F8:7A:52:90:06:D7:3B:C6:2C:D8:D5:36:23
Certificate issuer:       /CN=1831D063E0344DB28842F9021C022493CC6A6192
Certificate serial:       0A74B927D1131A9AEDB4279ACEB7D5EECFD906DB
Authority key identifier: 18:31:D0:63:E0:34:4D:B2:88:42:F9:02:1C:02:24:93:CC:6A:61:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1831D063E0344DB28842F9021C022493CC6A6192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/34352e3232362e372e302f32342d3234203d3e20323636393533.roa
Signing time:             Mon 23 Sep 2024 15:07:00 +0000
ROA not before:           Mon 23 Sep 2024 15:02:00 +0000
ROA not after:            Mon 22 Sep 2025 15:07:00 +0000
asID:                     266953
IP address blocks:        45.226.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/1831D063E0344DB28842F9021C022493CC6A6192.crl
                          rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/1831D063E0344DB28842F9021C022493CC6A6192.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1831D063E0344DB28842F9021C022493CC6A6192.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 22:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:74:b9:27:d1:13:1a:9a:ed:b4:27:9a:ce:b7:d5:ee:cf:d9:06:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1831D063E0344DB28842F9021C022493CC6A6192
        Validity
            Not Before: Sep 23 15:02:00 2024 GMT
            Not After : Sep 22 15:07:00 2025 GMT
        Subject: CN=3AFBE27E1C4BFDF87A529006D73BC62CD8D53623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:64:24:39:84:f5:36:9e:f6:67:67:30:2d:f8:
                    22:5d:ed:2c:5f:65:32:ea:23:49:c8:3f:5f:44:a4:
                    0e:69:ee:9f:1e:39:79:30:f4:e9:a2:61:72:69:5a:
                    bb:c4:10:16:b3:f0:bc:0a:8c:75:f0:da:1c:75:63:
                    e8:84:f6:21:85:12:d5:43:0b:1f:97:e6:32:c8:49:
                    3b:08:07:e3:23:6b:4b:6d:ed:1c:0c:7d:83:a7:66:
                    07:04:6c:c0:f1:d3:ef:f0:c0:0e:c5:9b:fd:da:1c:
                    e1:5e:7f:9c:e1:a8:59:fd:da:60:64:ba:ae:3e:6b:
                    25:8a:23:9d:ed:e0:6e:e9:fe:cc:79:ac:f4:ea:1a:
                    bf:5d:06:1f:f8:37:77:e3:70:4b:75:c9:c8:6d:b0:
                    50:96:cd:5c:b4:ed:73:93:2b:bf:1c:4c:7a:b8:a5:
                    44:c4:e7:1b:c1:f0:8d:e8:07:36:e6:31:9a:95:4c:
                    57:bd:43:35:5b:3b:a6:b0:9b:0a:a2:77:1c:a9:fb:
                    d4:45:da:a6:97:c6:1a:69:95:f2:7c:34:fc:89:4d:
                    65:84:8a:57:b7:2c:b4:09:f4:3e:ba:d2:2c:a4:7b:
                    39:f1:81:73:bd:c8:13:a8:de:ea:57:bd:47:92:37:
                    6a:bc:00:91:17:79:06:5a:1a:06:1a:db:1d:b9:45:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FB:E2:7E:1C:4B:FD:F8:7A:52:90:06:D7:3B:C6:2C:D8:D5:36:23
            X509v3 Authority Key Identifier:
                keyid:18:31:D0:63:E0:34:4D:B2:88:42:F9:02:1C:02:24:93:CC:6A:61:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/1831D063E0344DB28842F9021C022493CC6A6192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1831D063E0344DB28842F9021C022493CC6A6192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/34352e3232362e372e302f32342d3234203d3e20323636393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:3f:03:b3:55:24:f4:0d:22:fd:f5:77:36:64:eb:7d:2d:d0:
         6d:9f:2e:d8:80:bc:c8:35:87:7d:3b:17:af:fd:72:16:53:b8:
         b8:db:4f:c2:02:be:14:13:18:ed:99:d0:f9:2f:27:2a:71:b7:
         34:7c:98:1d:01:f8:21:0d:a5:03:d6:86:d6:bf:ac:d0:70:94:
         1a:b1:0c:2b:00:21:b7:d1:ab:49:dd:34:b5:39:c7:35:82:c5:
         4b:7e:e6:fc:c6:c7:2d:43:78:a5:11:b2:ed:21:d6:33:8e:f2:
         a0:be:34:72:bf:ad:eb:c8:00:ec:24:33:98:92:4d:3f:c7:4f:
         ee:83:d7:ec:0d:e8:4c:64:d5:5c:0d:ff:77:c9:b7:f7:3c:36:
         5b:b7:70:fb:66:af:f3:9e:81:3e:78:2f:b5:55:29:f0:1a:28:
         62:8a:64:99:8d:9a:99:e2:d8:1b:04:e1:8c:c5:fb:41:5e:65:
         a9:f4:f3:0e:d2:a9:15:24:fa:a2:74:2f:ef:27:6c:8c:87:b8:
         e4:52:ad:56:a6:3c:75:e4:52:5d:0c:42:6a:71:86:e0:2f:07:
         f8:15:f9:0a:e0:a0:e6:00:22:6a:50:d0:3b:49:77:e7:d9:82:
         d7:f6:82:30:44:bc:81:4f:27:05:7e:5a:6d:5b:b4:b9:d8:b8:
         3d:72:a4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:02:07 2024 by rpki-client on console-fra.rpki-client.org