Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131362e302f32322d3234203d3e20323636353834.roa
File:                     34352e372e3131362e302f32322d3234203d3e20323636353834.roa (raw, json)
Hash identifier:          +G0H6/45nk7kHu05Oy5T5SMRlHwt34RYCOpe0Q9m4Zg=
Subject key identifier:   29:05:DF:44:5A:E8:EA:4F:5C:14:B1:3A:9F:61:A8:66:91:BB:15:E2
Certificate issuer:       /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3
Certificate serial:       1F647293B1168FA38FBBD70B0BF4971C542EC150
Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131362e302f32322d3234203d3e20323636353834.roa
Signing time:             Thu 04 Apr 2024 19:28:40 +0000
ROA not before:           Thu 04 Apr 2024 19:23:40 +0000
ROA not after:            Thu 03 Apr 2025 19:28:40 +0000
asID:                     266584
IP address blocks:        45.7.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl
                          rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:64:72:93:b1:16:8f:a3:8f:bb:d7:0b:0b:f4:97:1c:54:2e:c1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3
        Validity
            Not Before: Apr  4 19:23:40 2024 GMT
            Not After : Apr  3 19:28:40 2025 GMT
        Subject: CN=2905DF445AE8EA4F5C14B13A9F61A86691BB15E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:c3:40:11:c9:8b:76:cd:7a:62:3e:58:89:
                    e6:1d:2d:02:a6:4b:57:18:f1:8e:e0:30:95:46:6f:
                    b7:07:46:0e:a5:0d:a8:7d:a5:91:51:d6:37:b0:bf:
                    94:2d:83:a3:98:bd:ef:40:03:f3:c0:a7:94:a4:bd:
                    26:dd:b4:ce:81:98:07:cf:14:b4:58:89:ec:90:5e:
                    32:47:68:62:0d:07:6f:d9:9a:5a:84:03:79:5c:88:
                    9a:80:7d:43:9b:ff:a5:f5:fe:86:2a:eb:f4:6d:c3:
                    13:0d:38:fa:b0:f3:55:de:b3:68:f2:8c:2a:9f:04:
                    e7:ce:ac:dd:0a:26:74:1a:00:ad:a6:5b:93:c8:64:
                    27:74:3c:93:54:30:4c:ba:0f:6a:c2:06:95:d7:5a:
                    55:8d:f7:3e:0c:40:d0:55:f4:44:3b:cb:8a:5f:f5:
                    4d:a7:71:11:81:9c:29:a0:60:5e:0a:5b:da:e0:7d:
                    0d:3c:69:46:e1:52:a4:08:5d:aa:b5:39:ea:41:45:
                    37:67:9c:f3:d1:e6:49:53:26:55:52:1d:f8:ce:89:
                    1e:59:43:0f:1e:08:d4:9a:27:b5:02:33:12:96:59:
                    b1:6d:93:49:a0:5e:bf:4d:78:f5:63:c8:1a:61:f4:
                    8d:97:19:9b:f4:de:8e:9c:c3:e8:db:52:b5:7b:52:
                    1d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:05:DF:44:5A:E8:EA:4F:5C:14:B1:3A:9F:61:A8:66:91:BB:15:E2
            X509v3 Authority Key Identifier:
                keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131362e302f32322d3234203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:d4:aa:20:24:0a:f3:c5:63:7f:ff:3a:55:f5:e7:a0:cb:77:
         47:5b:19:0f:1a:d9:3f:77:7b:24:3a:e9:9b:98:5d:9d:c2:f2:
         3b:bb:97:34:a4:e0:36:ee:12:b3:ee:ca:f3:74:ac:e3:c4:bd:
         36:fa:0e:6d:12:f4:4f:d1:2c:76:eb:06:3d:c5:1d:b5:14:e3:
         9e:a7:c1:69:f1:2a:97:bd:f0:56:e5:98:a4:fd:0e:90:46:22:
         62:55:58:db:bf:23:e8:c2:72:d4:b4:e4:f1:35:f1:65:a1:90:
         46:cf:60:49:57:93:82:7d:19:27:f6:2a:6b:48:e1:51:59:3a:
         da:8d:fb:86:ea:48:ea:e0:78:26:fd:26:dc:ff:a1:69:a6:38:
         f2:a5:cd:c6:ee:cb:19:a0:8d:9d:df:6f:d4:2e:96:a0:26:65:
         a2:9e:2e:a1:21:f0:fb:08:16:08:1f:cf:e9:f4:d8:e9:50:e8:
         de:eb:fd:6d:bf:70:b9:2e:c4:b7:d1:2d:3f:8a:94:a0:49:f6:
         cc:43:53:ba:c6:02:cf:f3:8b:0a:2b:0e:09:1b:2c:5c:a8:dd:
         56:96:f7:38:ea:5c:b0:d0:d1:d8:41:eb:e2:2d:f7:5c:69:5b:
         b7:a6:d9:89:fa:3b:c2:8e:fa:37:a1:bd:75:32:fb:58:1f:b3:
         aa:92:7c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:27:56 2024 by rpki-client on console-ams.rpki-client.org