Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232322e302f32332d3233203d3e20323638303932.roa
File:                     34352e3136382e3232322e302f32332d3233203d3e20323638303932.roa (raw, json)
Hash identifier:          jsJlZuvxiRkoC7nHZoJkpQHKTdtyvUFt/Z7T6oxNfwQ=
Subject key identifier:   8C:35:D9:78:49:24:74:36:26:D7:22:01:08:4B:89:40:F8:17:8D:E9
Certificate issuer:       /CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Certificate serial:       2767DF3B5B7B2061422E255C2BFD1711EE2693B6
Authority key identifier: 0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232322e302f32332d3233203d3e20323638303932.roa
Signing time:             Wed 03 Apr 2024 18:30:11 +0000
ROA not before:           Wed 03 Apr 2024 18:25:11 +0000
ROA not after:            Wed 02 Apr 2025 18:30:11 +0000
asID:                     268092
IP address blocks:        45.168.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl
                          rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:67:df:3b:5b:7b:20:61:42:2e:25:5c:2b:fd:17:11:ee:26:93:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
        Validity
            Not Before: Apr  3 18:25:11 2024 GMT
            Not After : Apr  2 18:30:11 2025 GMT
        Subject: CN=8C35D9784924743626D72201084B8940F8178DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f2:da:cf:51:2f:f4:b4:12:74:31:b6:3a:9c:
                    cf:0d:ae:e1:91:e9:9d:d0:e0:45:b4:38:0c:24:1e:
                    db:57:45:a9:d1:e9:df:17:99:6f:5b:e0:ee:fa:5d:
                    ed:da:90:4a:a4:7e:83:e4:4f:5a:d8:f2:29:e5:a6:
                    c7:2a:83:c7:20:35:23:e5:9f:69:c2:a8:e7:f1:81:
                    4c:0d:3b:16:91:4f:e7:c3:57:aa:25:49:c2:24:3f:
                    c8:f8:6d:67:c7:be:68:df:8e:27:1f:ed:19:ca:a5:
                    e1:6c:47:47:cc:2d:b4:ee:c2:bf:35:0d:6c:a1:66:
                    07:1e:b8:04:3b:dc:1f:ab:e7:68:96:95:b1:4e:be:
                    2b:ed:bd:15:b8:8c:7b:cf:b9:86:d1:5a:71:09:ea:
                    f4:67:38:08:68:3f:c8:9e:71:2f:b4:89:53:e0:ba:
                    57:08:72:2f:33:f3:8c:6c:2f:ba:37:45:eb:20:de:
                    dd:e7:df:bf:27:22:7b:56:76:1b:2d:70:b9:8e:71:
                    9a:fd:af:d7:75:51:79:4e:f1:2c:05:73:4e:7f:28:
                    35:7c:5e:dd:86:5b:87:3a:0c:23:86:ac:12:33:ae:
                    cc:6e:1c:3c:98:d7:1c:99:7c:de:c5:4f:43:12:ce:
                    cb:72:32:2b:fa:57:51:3e:65:b6:7a:67:58:b5:f3:
                    d2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:35:D9:78:49:24:74:36:26:D7:22:01:08:4B:89:40:F8:17:8D:E9
            X509v3 Authority Key Identifier:
                keyid:0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232322e302f32332d3233203d3e20323638303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:7a:59:d9:54:d2:6d:a0:e1:59:c6:eb:bb:df:e7:50:b5:ce:
         89:d1:7e:c8:5e:da:99:30:cd:1e:99:4d:a3:96:82:5c:04:45:
         84:ad:99:0d:66:56:75:3e:9e:f4:38:e3:69:3c:3f:15:d0:60:
         91:c6:76:d5:b3:fc:2b:d1:fd:1b:4d:6c:26:b2:ac:3f:a9:89:
         2b:87:0a:8e:b6:b2:92:b2:74:89:20:b8:9f:83:ee:8e:ad:69:
         af:47:49:36:c3:c4:06:0d:b0:7f:91:7c:3c:23:e4:97:f3:ee:
         72:03:11:5e:6b:e2:51:47:6c:03:50:ad:7e:05:21:6a:8d:24:
         b8:af:7f:68:01:1b:5a:0f:a2:89:a0:97:64:cd:5f:90:a2:33:
         c4:8a:ff:d9:06:28:5b:59:c4:c1:a6:39:7b:0d:8e:8b:d5:7a:
         be:c3:7b:86:ae:f5:b8:32:d0:4a:00:42:11:4d:1b:d2:85:a5:
         c2:66:58:e9:de:78:75:7d:2c:dd:39:0b:a1:bd:00:51:4f:81:
         ac:0a:f1:fd:96:5d:ac:53:4f:1d:bd:ef:be:24:46:f7:b6:b6:
         e9:70:5a:77:cc:24:ef:8b:9e:13:29:2a:95:df:aa:a0:a3:e6:
         f2:93:e4:5f:a4:33:5b:76:29:2c:55:04:6a:6d:0f:cb:74:87:
         e2:d4:be:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:07 2024 by rpki-client on console-fra.rpki-client.org