Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa
File:                     34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (raw, json)
Hash identifier:          0OhrXKtTiBYAK11HsB8qco57JY6qzuGzWbyR/yxEabg=
Subject key identifier:   41:9B:83:4A:FB:A0:01:5F:81:C6:C3:2C:6A:28:69:10:90:4E:BC:6F
Certificate issuer:       /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
Certificate serial:       1C9C749CD67458C0ADF4ED23782D6634961A5916
Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa
Signing time:             Thu 04 Apr 2024 14:46:02 +0000
ROA not before:           Thu 04 Apr 2024 14:41:02 +0000
ROA not after:            Thu 03 Apr 2025 14:46:02 +0000
asID:                     268913
IP address blocks:        45.175.230.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl
                          rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9c:74:9c:d6:74:58:c0:ad:f4:ed:23:78:2d:66:34:96:1a:59:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
        Validity
            Not Before: Apr  4 14:41:02 2024 GMT
            Not After : Apr  3 14:46:02 2025 GMT
        Subject: CN=419B834AFBA0015F81C6C32C6A286910904EBC6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a6:0b:ca:5d:9a:a4:6b:5e:19:a1:cc:44:ff:
                    f3:f2:05:c5:1a:a5:92:b5:f9:be:f1:b3:97:15:03:
                    46:bc:39:6e:be:59:b2:fa:30:44:d5:f0:45:b4:e1:
                    ce:ac:74:df:f8:4d:8c:ea:9a:d3:a7:50:a6:4c:79:
                    9a:e0:ed:39:49:80:fc:98:fa:70:58:76:c7:01:4c:
                    b9:6c:a0:c4:71:6d:3a:59:53:5c:cf:49:5e:f4:d1:
                    4d:69:d0:ff:38:8b:df:ed:ec:c2:47:ef:0e:de:71:
                    fb:c2:d3:20:6a:46:0c:a5:59:b6:ad:7a:e8:61:d2:
                    95:a6:f3:d1:00:aa:4b:16:76:58:45:be:51:9a:2b:
                    e2:c7:34:fb:5d:db:7d:b0:46:ea:59:36:88:7a:8d:
                    48:a5:b8:40:89:dc:07:07:fb:22:30:ce:b2:78:95:
                    80:b4:5f:82:d3:cc:00:61:94:27:7d:d0:83:5e:d6:
                    8f:e8:96:10:8d:62:28:68:72:e5:33:22:32:84:4a:
                    8a:ad:bf:1d:42:af:e6:1c:de:14:24:f1:c9:f0:6c:
                    2c:c7:99:ac:fd:d2:2f:f1:a6:f1:5a:42:b3:49:bb:
                    46:21:0c:a2:04:ee:31:10:df:cc:35:00:80:f3:c8:
                    94:cd:98:a1:aa:44:bb:bf:81:f6:86:ea:da:09:80:
                    8f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9B:83:4A:FB:A0:01:5F:81:C6:C3:2C:6A:28:69:10:90:4E:BC:6F
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:90:84:f3:8b:fe:3e:37:1a:d9:08:49:f8:cb:13:95:0c:22:
         83:1b:b2:df:a9:bb:a5:33:43:75:a7:93:9a:7e:a7:e4:52:08:
         ac:25:05:57:ae:c0:5a:10:b6:cd:3f:f7:fa:1a:ed:aa:85:fc:
         50:f6:a4:aa:a4:d2:74:1a:e7:41:4a:6a:f8:1a:90:d5:04:6a:
         87:28:87:75:6a:c1:44:b2:0e:12:6f:4e:19:d6:1e:1a:4c:39:
         39:7c:f8:f5:04:08:70:8f:be:e1:7b:a4:6a:cf:40:2d:27:d6:
         db:31:71:3b:4f:46:08:9a:12:ee:0d:9f:a4:72:13:d6:7f:7f:
         d5:0c:8b:ff:5e:eb:db:54:f9:41:c8:d7:4c:0d:b1:f3:0f:b7:
         fd:9a:95:64:65:64:af:79:ef:54:f4:5b:3c:cc:c6:de:e0:1e:
         16:c9:6e:5d:ce:41:a0:c1:b2:59:50:6e:d8:f3:93:c2:15:d0:
         a8:c5:22:1a:44:c6:2b:fd:00:17:ba:f4:90:8e:8c:95:4b:e5:
         b6:b9:c2:90:17:f1:31:e9:d4:a9:a3:d9:9f:d5:00:1a:e0:ec:
         33:d8:fa:32:52:b4:a2:7e:24:34:cb:27:69:d8:fa:d1:8d:a1:
         95:e3:c2:26:04:41:90:ff:38:1a:1f:7e:74:59:a4:4b:16:e6:
         b9:de:21:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:33 2024 by rpki-client on console-ams.rpki-client.org