Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35342e302f32332d3233203d3e20323638323231.roa
File:                     34352e3233362e35342e302f32332d3233203d3e20323638323231.roa (raw, json)
Hash identifier:          eMu5Pox28SzpvKP8YjdU77zU4I+utFls48SBZE/y4GM=
Subject key identifier:   64:2E:B1:BD:9E:10:AC:8F:58:6C:0D:7D:69:09:94:CF:30:DB:72:D4
Certificate issuer:       /CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
Certificate serial:       6C5D1499B04EE7B054581CB311C878E69ECC16C0
Authority key identifier: 42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35342e302f32332d3233203d3e20323638323231.roa
Signing time:             Tue 28 May 2024 19:21:13 +0000
ROA not before:           Tue 28 May 2024 19:16:13 +0000
ROA not after:            Tue 27 May 2025 19:21:13 +0000
asID:                     268221
IP address blocks:        45.236.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl
                          rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 17:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5d:14:99:b0:4e:e7:b0:54:58:1c:b3:11:c8:78:e6:9e:cc:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
        Validity
            Not Before: May 28 19:16:13 2024 GMT
            Not After : May 27 19:21:13 2025 GMT
        Subject: CN=642EB1BD9E10AC8F586C0D7D690994CF30DB72D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:34:93:11:8b:ca:3c:9c:ed:98:93:a4:f6:53:
                    14:b9:4e:6d:49:31:72:aa:ec:2d:86:29:2f:d1:f0:
                    e1:d9:95:45:0b:22:bb:8f:2c:0c:19:6e:1b:00:67:
                    98:1a:f7:30:75:25:5b:81:37:8b:19:c1:de:94:a2:
                    10:76:ab:25:3b:09:ce:f7:2b:15:95:2c:75:40:b7:
                    ca:b4:1c:34:06:03:7f:e4:9d:be:43:49:2c:97:23:
                    d9:a7:3a:01:3c:df:93:98:e0:8c:44:7d:20:a8:fe:
                    fe:3d:7f:c9:26:94:e2:06:ef:09:91:bc:e0:1b:be:
                    9e:e2:a2:47:ac:60:13:b5:61:f3:d0:d9:07:7f:83:
                    86:f3:41:24:a1:26:5f:03:be:a4:9e:c1:20:bb:81:
                    d5:3a:7b:d1:5a:00:07:37:2c:2b:f3:0b:12:23:21:
                    6b:52:3d:c8:3a:c3:13:39:0d:81:97:a2:5e:05:73:
                    a0:18:3c:9a:22:dd:2a:40:6c:8c:9c:da:9f:4b:55:
                    9b:54:f7:47:49:7d:08:8a:98:20:00:1b:3a:cf:f3:
                    1c:80:1d:87:6f:72:3a:a8:ce:7d:53:7f:48:d8:80:
                    26:7c:36:ab:5a:f7:88:92:a1:a9:ca:37:2f:c1:1a:
                    37:6a:b6:4f:9f:1f:87:5f:aa:d7:0a:30:b8:60:59:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2E:B1:BD:9E:10:AC:8F:58:6C:0D:7D:69:09:94:CF:30:DB:72:D4
            X509v3 Authority Key Identifier:
                keyid:42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35342e302f32332d3233203d3e20323638323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:a4:69:c8:13:23:07:fe:85:6a:ee:ce:6a:ce:0b:23:6e:0a:
         72:c1:66:93:00:c7:ab:fe:db:71:91:80:df:33:44:e2:00:39:
         51:8b:eb:05:79:4a:f8:5f:03:d3:fe:b2:28:8f:ff:3e:de:61:
         3e:5e:52:a8:df:e8:b4:f6:6d:cd:dc:17:52:38:f4:cd:d0:84:
         f9:63:9a:aa:35:19:a9:19:f0:eb:d0:7f:a3:e6:ae:ad:ff:35:
         b6:cc:f6:ce:03:68:43:ba:a1:93:5e:69:b0:b4:8a:82:3c:3d:
         02:41:45:6b:10:19:ee:d4:f3:c2:72:2e:5d:17:96:1c:f9:18:
         ea:18:e3:dc:bc:41:c6:9e:0b:76:85:1e:4c:96:ea:4b:60:80:
         aa:ec:85:d8:af:5a:af:d4:63:83:ea:ec:63:3a:88:3a:3b:51:
         fb:68:b1:77:e4:42:0e:6e:56:e9:cf:a0:a1:1c:c1:1c:66:20:
         4f:8a:9a:d3:d0:2d:c9:53:5e:ec:2c:d1:53:c2:6d:13:23:4b:
         ea:b1:f7:eb:68:7b:f8:83:f1:04:30:7c:e3:71:b8:ed:df:34:
         c3:ad:49:47:f2:c8:07:38:9c:35:ee:2b:b2:76:d9:80:e6:5e:
         a5:1b:6b:97:e9:99:12:01:4b:d7:9a:f9:ca:30:8c:68:50:3f:
         d7:e3:6f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:45 2025 by rpki-client