Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa
File:                     34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa (raw, json)
Hash identifier:          I1+iSuRrcWzfGjvkG5g6dB5/hy+bNPVUOsn9W/SvOqI=
Subject key identifier:   9B:E9:D9:D8:D7:B2:7D:B8:36:10:71:55:CA:52:54:F4:EA:C8:8F:20
Certificate issuer:       /CN=4D40CE2A6478B78956F69542766BA3C0806B8392
Certificate serial:       31DDEEC4676A929BD31AE5C73F8D0833A32811EE
Authority key identifier: 4D:40:CE:2A:64:78:B7:89:56:F6:95:42:76:6B:A3:C0:80:6B:83:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D40CE2A6478B78956F69542766BA3C0806B8392.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa
Signing time:             Thu 04 Apr 2024 05:11:15 +0000
ROA not before:           Thu 04 Apr 2024 05:06:15 +0000
ROA not after:            Thu 03 Apr 2025 05:11:15 +0000
asID:                     268063
IP address blocks:        45.168.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/4D40CE2A6478B78956F69542766BA3C0806B8392.crl
                          rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/4D40CE2A6478B78956F69542766BA3C0806B8392.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D40CE2A6478B78956F69542766BA3C0806B8392.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 11:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:dd:ee:c4:67:6a:92:9b:d3:1a:e5:c7:3f:8d:08:33:a3:28:11:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D40CE2A6478B78956F69542766BA3C0806B8392
        Validity
            Not Before: Apr  4 05:06:15 2024 GMT
            Not After : Apr  3 05:11:15 2025 GMT
        Subject: CN=9BE9D9D8D7B27DB836107155CA5254F4EAC88F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:1f:1c:cc:b2:d9:6e:1f:bb:d5:f2:7e:ac:
                    b6:aa:21:d3:6e:41:17:95:4e:02:e1:ae:fc:04:50:
                    9e:5e:de:52:5b:51:c9:73:5a:8a:ff:94:61:94:68:
                    48:ae:91:2d:54:4a:55:d8:77:b9:92:fd:c6:99:91:
                    b2:d9:c9:bf:5f:99:3b:27:59:ed:1a:f1:43:07:08:
                    29:0f:74:80:9d:52:4f:81:5f:f2:fd:53:14:dd:b3:
                    ba:86:89:92:0c:8a:0a:c0:fc:7e:34:8c:94:66:de:
                    55:88:01:11:99:86:62:00:67:db:3c:69:64:2e:53:
                    bd:a0:69:ea:c8:0e:78:2b:af:77:4a:69:ed:2a:04:
                    16:e7:25:e6:31:48:23:37:d3:7f:09:85:26:1f:d9:
                    9f:0c:a5:4a:f2:aa:4c:a4:01:16:d3:fa:0e:59:2e:
                    ce:6b:76:53:a8:7e:28:e9:40:71:1b:33:50:0d:8a:
                    8b:68:4c:38:2a:89:d4:93:08:59:94:1b:7b:f3:51:
                    6a:1f:22:fa:5c:29:12:14:75:69:73:9e:49:50:a2:
                    7d:e8:ca:6a:82:1b:12:09:a7:31:21:36:b4:8b:45:
                    7c:af:db:f5:ce:79:b2:3e:44:e2:7c:67:5c:c1:16:
                    db:07:d6:58:41:5e:d3:da:1d:ad:5a:dc:f3:a6:2c:
                    45:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E9:D9:D8:D7:B2:7D:B8:36:10:71:55:CA:52:54:F4:EA:C8:8F:20
            X509v3 Authority Key Identifier:
                keyid:4D:40:CE:2A:64:78:B7:89:56:F6:95:42:76:6B:A3:C0:80:6B:83:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/4D40CE2A6478B78956F69542766BA3C0806B8392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D40CE2A6478B78956F69542766BA3C0806B8392.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/1/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:81:7d:0d:10:dc:20:85:17:36:23:1d:97:33:bc:e9:0a:2f:
         ba:07:67:ac:22:66:42:cb:fe:00:98:3b:16:6b:d7:e7:55:d3:
         aa:ca:94:2c:00:93:17:b9:30:fc:3e:4f:dd:43:71:3b:5d:50:
         5d:ff:2f:97:28:ed:aa:04:06:90:46:19:22:b2:d8:cf:82:b9:
         82:2f:9f:d7:f5:25:1e:90:af:6a:db:d0:74:6d:0a:14:f9:ae:
         45:81:c1:bc:16:19:d7:82:90:53:73:32:c7:c5:03:9e:b2:54:
         f4:f6:72:73:67:9c:eb:53:e2:3b:bc:43:12:0d:50:d2:77:52:
         4b:ee:99:57:2c:f1:52:b4:1c:90:61:10:c1:6a:00:c0:de:2a:
         2a:f8:86:88:30:f1:9f:8f:55:40:2c:85:b9:67:a7:0c:a3:15:
         54:ab:6d:de:da:69:a7:79:88:3a:3f:f0:e2:4c:68:cb:ce:d5:
         88:bc:b5:8f:ea:34:57:9b:e7:d5:3a:32:fd:e5:1f:66:97:a8:
         33:d0:e7:5e:c3:18:74:82:c4:e5:3b:94:b5:57:5b:b7:c5:6a:
         7f:0b:1a:d6:fe:53:6c:2f:ce:3c:f4:4f:90:9c:24:87:f6:04:
         4c:17:fc:3b:01:b1:84:f1:d2:c1:47:12:61:5a:1a:a6:85:3e:
         0d:58:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:45 2024 by rpki-client on console-fra.rpki-client.org