Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136372e302f32342d3234203d3e20323638363237.roa
File:                     34352e3136342e3136372e302f32342d3234203d3e20323638363237.roa (raw, json)
Hash identifier:          e+7Sbfub0Hc6SUyH9NYyaVmN32bGit8zwMUGxyJgsKY=
Subject key identifier:   B8:FC:B8:E0:D1:C6:36:E9:1B:09:E6:8D:D4:09:E6:EE:07:58:D0:68
Certificate issuer:       /CN=B22E94C68C47105DBC96228B65437C19A68102C7
Certificate serial:       7D34AB03D68BB3A888E0195E4426F3465E5E73DA
Authority key identifier: B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136372e302f32342d3234203d3e20323638363237.roa
Signing time:             Wed 03 Jul 2024 17:49:24 +0000
ROA not before:           Wed 03 Jul 2024 17:44:24 +0000
ROA not after:            Wed 02 Jul 2025 17:49:24 +0000
asID:                     268627
IP address blocks:        45.164.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.crl
                          rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:34:ab:03:d6:8b:b3:a8:88:e0:19:5e:44:26:f3:46:5e:5e:73:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B22E94C68C47105DBC96228B65437C19A68102C7
        Validity
            Not Before: Jul  3 17:44:24 2024 GMT
            Not After : Jul  2 17:49:24 2025 GMT
        Subject: CN=B8FCB8E0D1C636E91B09E68DD409E6EE0758D068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:91:43:e4:3d:09:8f:49:cf:70:68:f7:ac:31:
                    15:8d:98:10:e0:4d:ed:9d:32:2b:58:f1:9e:11:93:
                    23:83:ec:df:83:4d:f9:68:a2:1c:00:7a:87:1d:3d:
                    86:a5:71:c1:4d:ba:4b:d9:27:03:37:d0:a4:98:fa:
                    d6:9f:14:71:35:98:0f:ae:7e:1b:89:dc:f3:1a:0a:
                    6e:16:3c:e7:db:7d:a3:28:61:7e:fa:e5:f8:56:64:
                    b3:66:4c:b0:4e:c9:be:bd:ec:55:0b:c0:3e:7e:ab:
                    6e:21:4d:7f:bc:56:da:f9:b9:83:61:99:76:f0:5b:
                    91:44:ca:05:a5:1c:e5:a7:ff:e0:4e:1e:f1:a4:4a:
                    2f:79:a5:b9:84:3e:7f:67:13:cd:75:f2:c2:77:fe:
                    52:71:cd:cb:d1:45:6a:6c:d1:1b:db:fe:7f:a2:fe:
                    98:d0:ce:be:93:60:01:15:92:21:42:83:f3:a9:4f:
                    3a:83:26:9d:b0:37:78:d1:b3:7e:57:7a:58:2a:0a:
                    2c:c4:6d:e2:5b:c0:8f:0a:b4:ce:06:23:f9:9e:8f:
                    1f:31:cc:9e:3f:52:cf:84:80:4b:24:7a:f7:53:67:
                    4a:31:62:9d:6b:c4:88:a9:59:01:bb:79:f2:4c:86:
                    02:9d:e2:09:bf:66:5a:5d:4a:1f:e7:2b:cf:ae:50:
                    b5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FC:B8:E0:D1:C6:36:E9:1B:09:E6:8D:D4:09:E6:EE:07:58:D0:68
            X509v3 Authority Key Identifier:
                keyid:B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136372e302f32342d3234203d3e20323638363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:42:67:7f:66:22:13:d5:63:20:18:e8:bd:fc:7b:3e:a1:5c:
         a9:d0:63:cc:7b:f3:00:da:40:be:97:de:8b:f8:5d:53:e6:44:
         8f:7a:b2:7a:26:bb:96:70:69:51:e8:27:1d:74:9f:b7:e3:7d:
         82:24:bc:60:a0:5b:6e:0c:cb:53:35:41:25:29:1d:86:d0:a5:
         c6:e2:37:1a:66:ce:63:68:cd:59:ef:3b:e2:06:9f:cb:41:b0:
         af:10:dc:be:cc:fd:19:41:8b:a3:cf:71:73:c6:03:69:73:ef:
         17:d8:f0:61:50:7f:82:38:b0:08:1a:c4:b5:71:dd:a7:ae:d7:
         20:f3:aa:4f:b2:c7:6e:a5:bf:93:bd:81:96:40:09:de:ed:5a:
         ab:52:e5:27:69:3d:2e:64:de:48:9e:2a:a3:8e:81:46:54:ed:
         c8:20:e0:65:74:de:57:83:05:2d:5d:0b:13:ec:13:5f:c3:79:
         8e:d3:e5:79:0c:e4:e2:99:ab:63:7f:55:41:0a:91:0d:e1:1c:
         d1:7c:19:df:e7:5a:1b:13:ee:64:b6:55:a3:0c:19:6c:93:b1:
         07:1b:df:56:df:eb:4f:65:57:2d:29:4d:a4:ff:87:f4:66:22:
         00:0c:37:61:ea:03:22:cb:f3:87:61:3c:f0:c0:db:c7:9c:92:
         ca:2d:08:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:03 2024 by rpki-client on console-ams.rpki-client.org