Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/34352e3136342e3139322e302f32322d3234203d3e20323638363436.roa
File:                     34352e3136342e3139322e302f32322d3234203d3e20323638363436.roa (raw, json)
Hash identifier:          S7clQx+PGF3eAuPMdd/h4T1gN+BTt5ujNXJmKbP+CbQ=
Subject key identifier:   AB:CB:44:F8:4F:88:E4:61:83:DA:2A:4F:93:5B:04:B3:3A:77:98:5F
Certificate issuer:       /CN=0F78626D3BF8B07214C737318E62EE73094347B3
Certificate serial:       12084DE370C95F3DCD460E240F6D9FDF33B55A45
Authority key identifier: 0F:78:62:6D:3B:F8:B0:72:14:C7:37:31:8E:62:EE:73:09:43:47:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/34352e3136342e3139322e302f32322d3234203d3e20323638363436.roa
Signing time:             Fri 16 Aug 2024 00:40:46 +0000
ROA not before:           Fri 16 Aug 2024 00:35:46 +0000
ROA not after:            Fri 15 Aug 2025 00:40:46 +0000
asID:                     268646
IP address blocks:        45.164.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.crl
                          rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:08:4d:e3:70:c9:5f:3d:cd:46:0e:24:0f:6d:9f:df:33:b5:5a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F78626D3BF8B07214C737318E62EE73094347B3
        Validity
            Not Before: Aug 16 00:35:46 2024 GMT
            Not After : Aug 15 00:40:46 2025 GMT
        Subject: CN=ABCB44F84F88E46183DA2A4F935B04B33A77985F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:a8:1a:c5:92:23:3b:c7:bd:eb:54:23:a0:
                    46:ce:47:38:a6:e9:d8:70:4e:8e:cc:34:9d:bf:ee:
                    29:71:d7:83:10:56:38:19:17:70:2e:0e:ae:ce:51:
                    95:af:34:e9:fd:71:12:98:3d:7c:98:02:f9:d3:96:
                    a4:04:fc:6e:e7:32:4e:98:82:b7:27:88:3f:98:b1:
                    fb:28:f0:53:c0:8b:d8:7b:8e:ae:d0:0e:aa:79:b3:
                    5e:d9:7d:96:99:c5:a4:72:c5:70:b3:28:44:b8:ba:
                    90:b9:84:87:68:3a:48:43:5c:9a:9e:40:eb:03:ac:
                    ed:0b:e9:30:7a:3a:78:34:c4:d5:44:fe:75:d0:71:
                    62:87:26:90:93:eb:c4:cb:5c:a8:98:cb:22:4f:02:
                    bb:66:3c:79:d2:5d:d8:bd:9d:c1:8c:fc:29:74:56:
                    c7:3b:c0:db:13:03:65:01:fc:71:12:2e:a9:f9:37:
                    35:8c:99:62:c2:db:d7:21:8b:1c:95:f0:8a:87:86:
                    40:0c:f3:22:db:30:df:1a:83:86:c8:0e:05:4f:d6:
                    40:d2:99:77:70:85:d2:72:0c:57:3b:5f:23:d7:d7:
                    1c:64:b5:81:dd:49:69:94:6e:99:a7:8e:24:c4:27:
                    d0:f2:2f:5b:ec:08:43:e4:de:6b:d4:17:58:c3:bb:
                    4d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CB:44:F8:4F:88:E4:61:83:DA:2A:4F:93:5B:04:B3:3A:77:98:5F
            X509v3 Authority Key Identifier:
                keyid:0F:78:62:6D:3B:F8:B0:72:14:C7:37:31:8E:62:EE:73:09:43:47:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/34352e3136342e3139322e302f32322d3234203d3e20323638363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:b6:a5:26:94:46:69:1e:8d:c2:43:72:a1:92:36:04:c6:50:
         0b:4f:af:98:2b:6a:79:cf:93:45:89:3d:57:75:b0:18:12:f2:
         05:7f:25:43:16:2b:bb:5b:42:4e:99:fb:4e:7d:0d:32:ae:86:
         b4:f4:c9:0d:33:06:9b:92:f0:f9:5b:76:1f:5a:b1:85:f1:c5:
         bd:ff:fc:43:e1:2e:1d:4a:b1:52:e5:73:cc:71:44:82:41:76:
         d7:ad:42:89:01:ba:ac:5c:0c:19:1a:c9:41:c3:ca:d8:76:b0:
         8b:3d:8e:6e:c4:23:1a:48:b4:42:a0:69:ec:23:09:10:03:d3:
         0b:12:66:0b:65:8d:55:eb:8e:62:66:cd:ec:44:61:30:e6:93:
         a1:30:c8:70:98:7c:53:22:24:b7:26:aa:6c:c7:a6:e2:14:c9:
         eb:16:64:ed:4c:3f:48:e6:f3:b2:1f:da:7d:33:11:a5:36:f9:
         7a:3d:5b:f1:10:a8:28:6e:f3:8c:2e:a3:0f:f3:5c:88:ac:06:
         8d:c7:db:fd:82:69:1c:43:2f:6d:2c:6c:85:33:07:c2:86:35:
         14:05:6b:0f:b1:ff:b6:76:4d:6b:d0:20:a1:82:d4:6e:4d:4c:
         cb:83:86:cb:96:5c:f0:63:a8:2b:aa:5c:e7:fc:54:26:43:36:
         7b:90:51:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:30 2024 by rpki-client on console-ams.rpki-client.org