Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35322e302f32322d3232203d3e20323638323231.roa
File:                     34352e3233362e35322e302f32322d3232203d3e20323638323231.roa (raw, json)
Hash identifier:          DyMsIolMJZV321T0cBRoRbsiiat/HZ54rBCkTTrlbmc=
Subject key identifier:   92:DD:E1:10:DF:CE:7B:72:47:C9:63:B6:38:27:0B:82:BF:FC:5A:4D
Certificate issuer:       /CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
Certificate serial:       6FA4F03942B7D6F42C098AB534F92607FD8AB414
Authority key identifier: 42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35322e302f32322d3232203d3e20323638323231.roa
Signing time:             Tue 28 May 2024 19:21:07 +0000
ROA not before:           Tue 28 May 2024 19:16:07 +0000
ROA not after:            Tue 27 May 2025 19:21:07 +0000
asID:                     268221
IP address blocks:        45.236.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl
                          rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 17:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a4:f0:39:42:b7:d6:f4:2c:09:8a:b5:34:f9:26:07:fd:8a:b4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
        Validity
            Not Before: May 28 19:16:07 2024 GMT
            Not After : May 27 19:21:07 2025 GMT
        Subject: CN=92DDE110DFCE7B7247C963B638270B82BFFC5A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:64:cc:5e:c0:e3:ef:40:15:d4:c6:79:79:5f:
                    7e:8f:40:98:8c:85:4c:d9:7e:54:5c:ee:55:ef:06:
                    e6:77:f9:19:56:14:56:01:48:63:a6:2b:7b:b4:6e:
                    e4:c2:fe:54:e8:bd:63:a7:e4:0d:0f:5a:64:2f:e8:
                    b3:71:3d:76:96:f1:c2:4b:57:e6:d4:76:94:2f:fa:
                    fb:9b:47:9b:12:40:cc:46:45:51:75:19:f8:98:24:
                    6d:73:d7:c6:af:1f:8f:25:3c:53:4f:77:3f:ee:f4:
                    7b:ae:79:55:83:0a:ac:a9:61:24:be:2a:f0:64:89:
                    b0:c3:3f:7e:94:da:db:a1:35:16:c9:f2:b8:8e:85:
                    44:2e:15:5f:e0:48:ab:15:e9:29:9f:5b:29:d1:c2:
                    15:f7:37:4c:24:f5:48:2b:4a:6d:6b:89:09:62:03:
                    86:1c:a3:f9:c1:f8:c0:8f:95:ee:3d:bd:d6:05:78:
                    40:38:0b:19:0c:f0:b8:8e:6f:8e:ff:8b:ad:3d:3f:
                    6e:bd:ea:79:10:c0:7d:bb:5e:42:49:07:1e:42:fc:
                    ff:30:c1:d8:1c:78:4d:af:db:48:2d:c5:fa:c0:be:
                    8c:fb:ad:3c:7c:63:e0:79:aa:05:1e:67:ae:eb:28:
                    7c:ac:d8:fd:5a:65:97:f6:c8:f9:dd:38:19:63:ab:
                    7e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DD:E1:10:DF:CE:7B:72:47:C9:63:B6:38:27:0B:82:BF:FC:5A:4D
            X509v3 Authority Key Identifier:
                keyid:42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35322e302f32322d3232203d3e20323638323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:bf:66:4b:90:13:6b:3d:b0:d1:47:c7:be:2d:66:d7:41:a2:
         0b:35:0d:db:3b:b4:0c:64:d8:5d:fb:74:c8:14:da:52:eb:fa:
         c2:f8:bb:5b:f6:2f:3e:65:d5:d7:48:29:a1:41:79:fa:db:e0:
         f7:e9:dc:69:37:26:9c:76:dc:03:00:a1:28:b5:a0:d8:87:24:
         0c:89:93:87:b4:38:59:44:42:3d:27:b8:39:6d:71:33:45:97:
         e4:dd:d9:27:14:fd:36:b9:a1:0d:6a:b4:f2:4a:82:36:24:7d:
         c1:d9:02:37:2c:3e:6e:7c:0e:15:cf:07:10:bb:8b:ab:8a:d5:
         7c:28:ab:1a:ac:63:3c:0c:19:f2:4d:c6:ff:de:d6:aa:22:f5:
         e2:72:71:08:e1:7a:23:ce:1a:68:2a:7a:4a:73:32:a9:99:67:
         3a:06:24:3b:f1:80:20:02:29:37:9f:38:eb:0b:8a:ee:cb:bd:
         5b:a2:b7:56:74:ac:da:0b:c5:e1:31:aa:0f:b7:9c:43:55:11:
         87:7a:d5:3f:af:da:2d:aa:3b:fb:d5:3a:59:2f:72:8c:af:c7:
         25:38:30:2a:e3:2d:e9:87:6b:5e:6a:23:aa:37:11:e5:f7:44:
         90:72:d0:25:c1:84:42:c8:15:de:ea:37:98:fa:cf:0b:b7:d1:
         ad:6f:e5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:43 2025 by rpki-client