Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139352e302f32342d3234203d3e20323637303933.roa
File:                     34352e3232382e3139352e302f32342d3234203d3e20323637303933.roa (raw, json)
Hash identifier:          WPBGe31yWZsOk5rlG1k8p/qkUMm9Tqv1iubBPtkTv6U=
Subject key identifier:   28:61:1B:18:ED:8E:2F:10:37:3E:11:9B:2B:7F:C5:B7:43:B8:F8:CE
Certificate issuer:       /CN=D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977
Certificate serial:       24E00C2855BBC968D5FC299E4BDEC069D6525B4B
Authority key identifier: D9:8B:B4:B9:31:5B:7B:1D:C2:B3:F4:16:B1:9A:C7:88:B6:CA:89:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139352e302f32342d3234203d3e20323637303933.roa
Signing time:             Thu 08 Aug 2024 19:18:03 +0000
ROA not before:           Thu 08 Aug 2024 19:13:03 +0000
ROA not after:            Thu 07 Aug 2025 19:18:03 +0000
asID:                     267093
IP address blocks:        45.228.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.crl
                          rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e0:0c:28:55:bb:c9:68:d5:fc:29:9e:4b:de:c0:69:d6:52:5b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977
        Validity
            Not Before: Aug  8 19:13:03 2024 GMT
            Not After : Aug  7 19:18:03 2025 GMT
        Subject: CN=28611B18ED8E2F10373E119B2B7FC5B743B8F8CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:08:c1:3a:9f:e1:19:17:88:66:7e:3c:a1:
                    a7:85:f1:1a:b9:1c:a7:71:30:ec:9d:6b:c4:da:1d:
                    9a:81:44:d0:1d:e4:32:2d:69:a0:48:b7:e6:28:96:
                    99:62:f3:83:d9:c5:1f:9f:fd:e7:92:d1:ba:31:92:
                    95:e1:61:f2:4c:df:0e:3c:7b:88:36:95:bd:f3:b8:
                    a7:57:22:ff:a3:af:e1:16:6d:df:87:46:02:d2:e1:
                    6a:27:93:94:96:c8:ef:98:db:9b:c6:23:57:2b:f7:
                    3a:21:18:40:d2:08:2d:dc:05:15:2c:53:2f:db:1c:
                    d5:df:c5:8b:18:5f:53:7e:ab:5b:2d:0a:71:7f:e8:
                    7a:cb:7b:04:39:45:29:17:8f:5a:35:95:23:6d:4e:
                    8d:9d:5f:35:6a:48:ce:59:d2:a6:d0:c8:0e:6c:b4:
                    b0:b3:7f:4e:54:c2:d2:6a:56:d8:85:4e:ae:af:73:
                    0a:40:13:fb:c7:b4:2b:37:05:23:41:63:75:bf:91:
                    8a:6f:d1:f5:0c:65:cd:22:ab:d7:b8:f1:9f:65:0b:
                    af:fc:66:9d:40:01:ca:7a:e7:43:29:f4:56:59:7b:
                    35:a3:ec:89:90:85:da:46:0b:69:e9:26:55:be:cd:
                    68:a1:a1:92:4f:7d:92:85:ec:2d:7f:b1:09:ab:da:
                    a7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:61:1B:18:ED:8E:2F:10:37:3E:11:9B:2B:7F:C5:B7:43:B8:F8:CE
            X509v3 Authority Key Identifier:
                keyid:D9:8B:B4:B9:31:5B:7B:1D:C2:B3:F4:16:B1:9A:C7:88:B6:CA:89:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139352e302f32342d3234203d3e20323637303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:e0:37:18:80:c3:3c:9c:19:cd:b6:69:ed:6c:89:5a:18:74:
         58:a0:f4:0d:57:2e:a6:0a:15:73:1d:ef:ed:5b:10:fb:67:6f:
         58:1f:6e:c6:7e:6c:af:56:60:d5:e6:cc:11:09:b5:29:6e:7a:
         a6:94:59:f5:07:ea:ea:f8:40:53:f7:16:3e:ff:d1:5c:29:ae:
         33:53:db:93:97:dd:cf:64:b2:94:a2:85:80:a7:eb:05:06:9d:
         22:6d:bd:29:87:74:b1:d2:da:04:6a:26:ac:7c:10:76:3e:0c:
         05:09:14:2d:36:46:dd:55:c6:91:be:07:74:68:75:fa:4b:fd:
         a5:fc:7c:7a:06:e5:17:b9:4c:2f:b9:d3:c1:57:49:57:56:4e:
         aa:1f:2e:8d:ed:1f:7c:16:b9:60:11:3f:85:3e:e3:70:b3:7a:
         f5:38:94:59:69:a0:53:46:42:51:98:f8:1b:f1:bb:70:b1:ed:
         5b:c7:c7:6d:04:58:b3:df:99:45:c4:bc:14:bf:23:49:75:92:
         76:fd:bc:30:cc:eb:7a:16:64:b1:70:97:79:eb:a4:08:d8:e3:
         2b:1f:cb:34:14:6d:81:06:a0:24:6b:5b:97:83:ae:13:99:57:
         67:39:e7:d0:e0:27:fc:62:b9:21:d2:10:57:93:91:ed:e6:03:
         fe:50:43:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:22 2024 by rpki-client on console-fra.rpki-client.org