Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231352e302f32342d3234203d3e203631363134.roa
File:                     34352e3233322e3231352e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          JRMuFJ+KAmGhM23NlKIl9VBHFo61mcwCPU6o5R5RITk=
Subject key identifier:   AB:18:2A:6D:83:D5:62:B6:07:0F:35:2F:4B:92:8D:E1:6E:F3:D3:FC
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       19D175BEA04B90C6D434BBE7F3A2DC26A95CC36B
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231352e302f32342d3234203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     61614
IP address blocks:        45.232.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d1:75:be:a0:4b:90:c6:d4:34:bb:e7:f3:a2:dc:26:a9:5c:c3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:e2:80:4b:01:6a:cf:13:84:1a:f0:54:05:
                    40:64:48:9b:8b:12:43:2e:72:2a:c6:c2:ec:28:30:
                    25:9d:e8:19:c2:57:8a:43:94:9d:67:be:b4:1b:91:
                    9e:f9:75:bd:16:48:15:39:51:26:f1:ae:85:9d:de:
                    7d:79:25:b4:b7:ce:64:44:f7:1d:d1:09:7c:8b:21:
                    14:b4:52:c5:1e:a3:62:bc:52:ee:4e:db:a3:82:fb:
                    fe:eb:a0:d6:de:36:97:13:48:b3:6e:8f:2d:a5:e8:
                    cb:c2:59:21:c2:72:06:4d:54:03:e9:54:ca:67:06:
                    bf:68:37:08:72:35:1a:7a:a9:7f:2a:53:5e:3c:58:
                    75:21:d2:23:1f:78:1b:d2:c9:bc:4c:83:9c:30:1f:
                    b9:b9:b3:47:4c:60:ff:ca:e6:a8:87:f8:25:45:78:
                    0a:57:34:bc:90:18:33:83:4a:b1:d6:3f:7f:2c:1d:
                    03:86:68:7c:11:cb:86:a0:0b:7e:64:09:ad:6f:99:
                    98:86:87:83:43:f2:eb:2c:16:2e:3e:ed:41:1b:a1:
                    d7:3d:59:4b:a4:e9:23:7a:a6:8d:d6:0c:e7:c8:42:
                    2f:71:b1:7d:b4:93:0e:05:74:79:de:aa:b3:16:b0:
                    02:01:02:9b:95:bf:79:91:70:9a:a1:94:c0:7f:90:
                    8e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:18:2A:6D:83:D5:62:B6:07:0F:35:2F:4B:92:8D:E1:6E:F3:D3:FC
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231352e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:72:c1:25:92:c8:7b:aa:20:61:dc:84:9f:42:90:b4:f5:51:
         37:76:fe:39:85:e4:49:25:6e:6f:94:1c:12:2f:97:5a:19:78:
         3e:a6:80:c9:ac:f6:cb:44:75:23:ca:e2:0f:e3:f5:93:35:2e:
         59:b3:18:c7:67:27:39:55:75:57:63:95:10:e0:6f:27:dc:e9:
         e0:0d:44:a5:61:50:95:cf:41:d6:fe:94:ec:dc:64:a9:bb:16:
         23:8e:80:1b:7d:f2:83:bd:0c:6c:f4:02:cf:92:29:10:91:b3:
         b3:dd:41:8a:e4:52:ed:73:36:fc:c5:ff:9d:59:cd:2f:f6:3d:
         7c:50:42:13:7c:0b:22:72:7b:19:1d:60:43:47:06:6e:26:96:
         0e:91:99:43:37:eb:e7:1c:f9:5a:77:d9:03:7e:ef:c5:f9:ba:
         2b:b0:60:cc:9d:df:9a:fb:94:68:fb:0a:29:71:d5:c7:02:3e:
         7b:19:4d:00:f1:65:e9:b4:11:d0:86:98:3e:ca:64:89:8c:d5:
         21:2d:18:f8:9a:3c:96:d0:a1:bb:8d:aa:7a:e0:33:01:f8:e6:
         1e:69:6c:27:47:10:25:a8:c5:ed:04:8e:69:59:c0:f8:96:8e:
         6b:b1:07:35:0c:bf:f1:e8:44:e8:f6:72:83:5b:ce:7e:fd:41:
         60:b1:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:38 2024 by rpki-client on console-fra.rpki-client.org