Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/34352e37312e3234382e302f32322d3234203d3e20323637363430.roa
File:                     34352e37312e3234382e302f32322d3234203d3e20323637363430.roa (raw, json)
Hash identifier:          KJHXg3/4FX8ykLyfTJFK53RMip0t/2c00mtqu6KXAJk=
Subject key identifier:   FC:A1:58:EC:54:FC:8B:51:05:E8:FC:A0:C4:EC:F7:49:E5:6F:51:5B
Certificate issuer:       /CN=D2986464325E8FD5DF10CBFA8DD303EF12449774
Certificate serial:       5388CE2FA5DC44B77E650C305FC5C23B09822578
Authority key identifier: D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/34352e37312e3234382e302f32322d3234203d3e20323637363430.roa
Signing time:             Thu 04 Apr 2024 03:01:31 +0000
ROA not before:           Thu 04 Apr 2024 02:56:31 +0000
ROA not after:            Thu 03 Apr 2025 03:01:31 +0000
asID:                     267640
IP address blocks:        45.71.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.crl
                          rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:88:ce:2f:a5:dc:44:b7:7e:65:0c:30:5f:c5:c2:3b:09:82:25:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2986464325E8FD5DF10CBFA8DD303EF12449774
        Validity
            Not Before: Apr  4 02:56:31 2024 GMT
            Not After : Apr  3 03:01:31 2025 GMT
        Subject: CN=FCA158EC54FC8B5105E8FCA0C4ECF749E56F515B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:19:5c:d8:52:17:24:da:b7:37:5f:45:b1:cd:
                    f0:58:0d:f1:83:86:b2:69:52:89:ba:86:f0:fa:fc:
                    d8:fa:c6:a7:99:e6:16:85:6c:12:d5:a3:02:d2:f5:
                    c1:1d:0e:a6:39:3a:2d:8d:e5:84:4b:c6:24:1d:06:
                    a5:bf:6e:5b:1e:23:5e:97:68:bf:57:f0:3c:2c:fd:
                    7f:e5:f7:f6:20:36:70:22:b0:70:50:ea:7c:14:27:
                    8c:96:5d:1f:60:df:04:f7:65:7a:fc:44:16:5f:e9:
                    fa:e8:7d:41:73:cf:e3:7c:b6:59:38:8e:94:91:b6:
                    ad:85:99:a3:f7:a5:07:25:fe:97:6a:f0:65:08:34:
                    7d:ec:28:1e:70:94:12:66:d5:d3:6e:24:38:98:1e:
                    90:fc:6b:d9:e2:41:a4:d1:a0:64:fe:6c:26:99:02:
                    13:b4:a5:29:65:af:5b:4e:21:8b:69:d5:87:22:1c:
                    4c:c3:cd:85:22:0c:bd:f7:d8:11:6b:93:9c:3c:75:
                    c7:b1:43:b9:d1:98:97:e9:2e:56:34:1d:da:ce:7c:
                    be:09:1f:82:17:03:ef:fa:1e:d5:ba:15:36:13:b6:
                    e3:f3:6e:16:cc:92:9e:9e:a7:9d:9f:13:dd:b2:5c:
                    5f:8b:a1:31:db:51:dc:a5:20:53:0f:de:1d:66:d0:
                    0e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A1:58:EC:54:FC:8B:51:05:E8:FC:A0:C4:EC:F7:49:E5:6F:51:5B
            X509v3 Authority Key Identifier:
                keyid:D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/34352e37312e3234382e302f32322d3234203d3e20323637363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:a9:dd:bf:b1:24:f1:b2:88:ca:1a:77:3c:d0:81:35:a6:69:
         eb:97:7f:6f:e3:4e:08:dd:ca:2d:f1:4d:b1:a2:75:6d:f1:d5:
         51:1a:e3:6e:6a:d7:d8:60:a0:d0:94:94:82:bd:a9:d1:91:22:
         92:8d:2e:f6:a9:da:a8:10:5d:b5:eb:5c:39:dc:58:90:92:62:
         11:ea:f4:da:f2:7b:b4:c3:ff:c1:57:3d:7c:3c:1d:72:14:8d:
         07:cb:78:aa:fb:6d:3b:b2:0c:7f:38:c6:92:3e:3f:74:26:90:
         bf:4a:4d:5a:de:80:ca:df:6a:76:1f:4f:90:f0:db:d0:17:31:
         ea:e6:bf:cc:a3:f6:c0:14:bd:63:30:ad:3e:92:63:a3:74:97:
         78:18:b4:24:3b:83:cc:70:21:d5:4d:5e:c2:bf:25:7d:e8:cc:
         fc:33:7a:5f:ba:86:88:7b:82:65:c5:db:78:11:42:39:e2:76:
         38:50:79:6a:bf:79:1b:21:d9:7f:f5:80:70:bf:ab:51:7f:e0:
         14:f7:16:f3:a2:d7:b4:1f:7b:51:bd:a9:2f:0f:41:f8:c0:a9:
         41:df:57:9e:59:78:01:5f:65:f2:b3:59:41:96:17:24:87:cf:
         16:be:1e:af:f0:83:0e:4d:b3:b2:a2:bd:62:dc:85:bd:08:b0:
         a4:59:60:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:12 2024 by rpki-client on console-ams.rpki-client.org