Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233362e302f32322d3232203d3e20323637363735.roa
File:                     34352e3232342e3233362e302f32322d3232203d3e20323637363735.roa (raw, json)
Hash identifier:          gsBlwjUN52sgVA2DObQxraZYWOnRaWfvqZjUQxHpTfo=
Subject key identifier:   B6:91:89:BA:FB:A1:0F:81:93:AA:90:30:B0:08:2C:30:34:34:1C:3D
Certificate issuer:       /CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
Certificate serial:       017A8D57F59B9BC7FC0983B144F325FB7DC38C13
Authority key identifier: F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233362e302f32322d3232203d3e20323637363735.roa
Signing time:             Thu 04 Apr 2024 18:16:23 +0000
ROA not before:           Thu 04 Apr 2024 18:11:23 +0000
ROA not after:            Thu 03 Apr 2025 18:16:23 +0000
asID:                     267675
IP address blocks:        45.224.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.crl
                          rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7a:8d:57:f5:9b:9b:c7:fc:09:83:b1:44:f3:25:fb:7d:c3:8c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
        Validity
            Not Before: Apr  4 18:11:23 2024 GMT
            Not After : Apr  3 18:16:23 2025 GMT
        Subject: CN=B69189BAFBA10F8193AA9030B0082C3034341C3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:d5:f2:d8:d1:b1:be:93:02:a7:28:28:af:
                    9e:0f:25:26:08:b0:03:52:d3:67:41:f5:c0:84:60:
                    48:bb:ff:43:1e:df:0b:66:6a:82:45:51:b4:4d:ca:
                    ab:31:b4:c4:91:9b:08:90:86:fa:6f:0e:85:64:c7:
                    5c:fd:e8:4e:04:e5:d9:60:60:92:02:ca:ab:ea:f2:
                    73:ae:23:6f:1a:6b:d0:95:4f:82:e9:2e:f2:53:3f:
                    9a:b2:e5:96:20:25:a3:e2:1e:5f:df:ad:cb:f5:fe:
                    62:2c:77:0f:37:ee:2c:62:19:bd:a1:34:cb:cd:d0:
                    64:cc:ba:35:00:db:81:9e:85:01:12:5f:b0:55:86:
                    14:0b:d1:df:c1:57:e7:81:e3:01:53:8b:bc:22:f3:
                    ad:ad:4c:19:41:9c:e4:45:b2:a4:8c:e6:11:a4:d6:
                    70:d4:89:31:89:2d:2b:cd:37:a0:36:67:3c:11:c1:
                    74:7d:9d:55:71:67:0a:2d:43:11:8f:cb:6d:7d:13:
                    67:2e:da:5c:a9:d3:ab:84:f0:ae:95:48:2a:b6:20:
                    a7:a0:e6:a2:d5:c0:54:6a:0e:2d:29:06:89:d3:a3:
                    dc:10:aa:92:fd:ed:aa:a9:c6:3b:7d:e0:29:b5:97:
                    21:12:59:2b:6d:ad:a2:14:c4:b1:b3:80:e4:8e:27:
                    d7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:91:89:BA:FB:A1:0F:81:93:AA:90:30:B0:08:2C:30:34:34:1C:3D
            X509v3 Authority Key Identifier:
                keyid:F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233362e302f32322d3232203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:d4:d9:70:38:d8:8d:95:7d:ee:d7:38:f6:31:a2:d9:ab:90:
         f6:e7:0e:6c:c7:b1:d4:62:a2:4a:9f:76:ca:75:aa:e0:fe:86:
         ed:20:ae:35:5c:b4:ac:e7:ed:0d:34:db:d9:20:1f:ad:6d:49:
         44:cb:a5:e2:76:f6:35:1b:af:3e:03:63:6f:d3:96:68:34:1f:
         71:13:a1:0a:0b:67:07:1a:fc:d8:a9:ff:e1:20:a8:95:1f:c2:
         be:09:1d:5a:ba:d8:d7:f7:6f:78:3c:0d:be:c0:99:f9:37:5c:
         cc:f4:0d:53:3a:e7:a8:3b:67:ba:da:61:32:bb:b6:11:84:a3:
         a1:bb:7b:bb:13:f3:10:48:54:80:75:35:17:99:16:57:15:29:
         c5:de:43:04:c3:74:0b:e9:56:28:9d:45:8c:16:e8:b6:74:89:
         64:8a:6b:5f:90:e5:70:22:e4:0e:ee:73:2d:59:74:03:a7:b8:
         96:5f:4b:3e:e0:66:8c:6c:27:68:30:99:a2:a4:ac:dc:c5:89:
         d0:2a:5b:08:4b:19:dc:f9:bb:a1:3f:d9:6e:e3:c7:92:93:ca:
         4f:69:04:1a:d4:aa:cb:bd:22:d7:b4:f4:8c:78:02:b4:16:98:
         29:7f:a9:55:9e:7a:4f:61:c8:6a:45:dd:3e:0d:66:8f:50:f4:
         33:8b:bd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:10:57 2024 by rpki-client on console-fra.rpki-client.org