Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39322e302f32332d3233203d3e20323636313239.roa
File:                     34352e362e39322e302f32332d3233203d3e20323636313239.roa (raw, json)
Hash identifier:          eImD4yTBR7iUjK8Rrb2bpQ/BeLvAe5+CiEIDHQ7YoJQ=
Subject key identifier:   B2:06:8F:BC:7B:AE:CD:65:4F:92:BF:64:57:2D:79:15:DD:04:3A:19
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       5B1C2FE54D360152812822F746B21CFC64F40F54
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39322e302f32332d3233203d3e20323636313239.roa
Signing time:             Wed 03 Apr 2024 18:32:19 +0000
ROA not before:           Wed 03 Apr 2024 18:27:19 +0000
ROA not after:            Wed 02 Apr 2025 18:32:19 +0000
asID:                     266129
IP address blocks:        45.6.92.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1c:2f:e5:4d:36:01:52:81:28:22:f7:46:b2:1c:fc:64:f4:0f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Apr  3 18:27:19 2024 GMT
            Not After : Apr  2 18:32:19 2025 GMT
        Subject: CN=B2068FBC7BAECD654F92BF64572D7915DD043A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:ae:85:fa:b4:1b:50:c4:5f:10:87:1e:cc:
                    48:b9:ee:b3:87:52:dc:99:12:06:ba:ff:d9:de:a1:
                    d2:28:f1:04:23:57:ad:ab:52:9b:ea:78:e3:ae:9e:
                    b0:29:ec:e3:03:94:5c:7a:7d:94:59:b1:ed:5a:5e:
                    7e:32:04:35:22:e8:5e:fa:fc:19:a8:2a:85:f4:22:
                    e6:7f:09:19:9c:dd:b8:1f:58:f9:bc:c1:45:7e:da:
                    67:63:9f:ce:bf:1d:bf:e4:a4:3e:0f:f3:86:9c:97:
                    e4:e2:33:a7:3a:26:f5:fb:5c:70:3c:98:f4:90:17:
                    7a:1b:99:2e:48:aa:4d:02:ef:7a:e5:13:e6:bb:09:
                    8d:66:3d:4c:de:e2:52:9d:a7:90:c9:42:4d:18:88:
                    f9:36:39:03:3d:12:50:d9:06:4a:6b:7d:75:28:cc:
                    20:e1:9f:d5:11:c1:43:c8:a2:92:3c:ca:60:67:f7:
                    2a:f0:7c:18:63:08:1a:cf:ff:c6:39:2c:d2:47:ef:
                    07:9c:a0:81:fb:87:a2:2e:9a:66:55:5b:18:f2:da:
                    d8:f4:4c:72:64:a3:a8:be:07:af:cb:53:75:21:1c:
                    32:74:f5:e6:58:f0:97:50:a9:e0:0c:65:c2:49:b4:
                    46:f7:4f:db:5c:c5:95:60:d4:22:57:f5:04:98:d6:
                    bd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:06:8F:BC:7B:AE:CD:65:4F:92:BF:64:57:2D:79:15:DD:04:3A:19
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39322e302f32332d3233203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:c8:cd:8d:d1:c9:87:0c:52:e0:92:98:bc:28:34:cc:66:da:
         30:68:6a:21:ce:2e:78:f7:6f:b3:12:62:81:b4:82:6c:f0:58:
         17:bc:fb:8a:d0:be:3d:ee:1b:d9:ea:7d:18:d5:f4:8a:54:d7:
         8e:4e:94:66:3f:55:3c:46:0d:0e:dd:88:da:ad:f7:c5:45:dd:
         5d:3a:ee:74:d9:db:e1:b0:95:44:21:77:8a:4e:a7:ff:ab:17:
         3e:03:77:6b:3c:e2:99:87:f0:bb:92:e7:dd:23:de:97:c4:5c:
         4a:36:78:83:1d:ca:b1:f7:2f:9f:18:ee:51:35:2b:39:ed:9b:
         c0:74:45:af:30:29:bf:de:6f:34:bb:88:65:46:16:79:34:77:
         b4:75:9c:3d:e7:10:44:2b:c9:97:d8:c0:7a:4f:ee:bf:92:34:
         7b:5c:3a:de:0b:d0:b5:f8:c4:b3:7c:88:af:e4:f9:47:c8:31:
         85:7a:ee:06:ff:96:03:a5:21:f9:6b:1b:4c:10:64:1b:bc:84:
         69:55:fa:be:b2:a3:d4:c1:3f:d6:a7:53:d7:5a:62:6e:fd:20:
         c5:79:9b:30:6d:87:95:82:21:4b:86:e9:f8:ea:7e:7a:11:0d:
         4c:63:13:af:e1:6d:a4:c4:ec:ec:92:94:de:27:1e:17:a0:44:
         a5:7c:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:01 2024 by rpki-client on console-fra.rpki-client.org