Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231342e302f32342d3234203d3e20323638353133.roa
File:                     34352e3136312e3231342e302f32342d3234203d3e20323638353133.roa (raw, json)
Hash identifier:          lfg+TtOCtQlh2iFMjatyMNCZa7DGtG1v5FwersDg5jc=
Subject key identifier:   BF:78:45:0A:49:22:09:5C:F4:BA:FC:DF:D1:CC:60:26:A5:8C:F1:1E
Certificate issuer:       /CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
Certificate serial:       6989EFD99252E1FF8BABA6C6F6C9DC9220E98070
Authority key identifier: E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231342e302f32342d3234203d3e20323638353133.roa
Signing time:             Thu 04 Apr 2024 03:38:28 +0000
ROA not before:           Thu 04 Apr 2024 03:33:28 +0000
ROA not after:            Thu 03 Apr 2025 03:38:28 +0000
asID:                     268513
IP address blocks:        45.161.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl
                          rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:89:ef:d9:92:52:e1:ff:8b:ab:a6:c6:f6:c9:dc:92:20:e9:80:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
        Validity
            Not Before: Apr  4 03:33:28 2024 GMT
            Not After : Apr  3 03:38:28 2025 GMT
        Subject: CN=BF78450A4922095CF4BAFCDFD1CC6026A58CF11E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:fd:72:1a:33:b3:3f:47:53:6e:8c:77:4b:
                    98:93:bf:6c:45:31:66:f6:3f:f1:7a:d4:02:c4:20:
                    06:13:c6:8a:de:b7:b7:02:ba:a3:6e:ad:e2:c1:17:
                    9b:c8:6b:01:2d:32:9d:f3:15:2e:8d:3b:7c:d5:a8:
                    3c:01:a6:d5:75:a0:06:66:36:d2:9e:aa:dd:c8:59:
                    c6:1f:87:3a:21:2f:52:ef:68:7f:d5:ef:96:87:e9:
                    b5:b2:c2:45:3c:d2:dd:be:31:4c:ae:26:9e:69:27:
                    38:0e:8e:be:08:44:4b:18:79:da:b7:fb:84:64:0a:
                    65:d3:6b:97:ba:bf:ad:37:4a:3c:57:a3:a1:09:5b:
                    80:9e:fd:b4:14:3d:48:83:43:29:11:a1:0d:7c:2d:
                    7a:f3:b8:06:6b:14:73:ab:14:a7:24:75:9a:e0:db:
                    85:cd:ce:00:84:39:98:45:07:0d:e2:47:0f:8f:8a:
                    7e:66:0d:b6:28:17:06:27:85:dd:64:00:b1:7f:0f:
                    b6:29:3e:dc:dd:9d:5e:47:ce:13:12:f5:65:d9:e7:
                    1f:77:8f:21:4c:db:d7:59:f2:d6:39:95:0f:98:f4:
                    e2:ec:a4:91:0b:cc:9a:b4:76:e4:79:e1:0f:b6:3f:
                    dd:49:e6:6c:ce:f1:34:8b:06:3e:23:f3:b5:d4:59:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:78:45:0A:49:22:09:5C:F4:BA:FC:DF:D1:CC:60:26:A5:8C:F1:1E
            X509v3 Authority Key Identifier:
                keyid:E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231342e302f32342d3234203d3e20323638353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:cd:24:61:61:f2:e6:f4:83:d7:8a:ee:cc:e4:e1:5f:32:7c:
         79:81:8f:d3:e3:fd:7b:9c:26:8a:07:59:f7:b1:5f:df:71:25:
         c0:57:83:d1:6f:c1:16:ac:33:17:98:e2:36:8a:30:6a:14:09:
         0b:fd:d1:61:7e:c9:d8:fe:21:f3:2f:3e:7d:1a:95:22:4e:68:
         71:df:3f:20:cb:ae:e7:53:af:8d:83:08:97:41:30:3b:6c:91:
         72:67:8a:78:e6:aa:58:d8:01:0a:b9:ef:4f:5e:0c:3b:c2:89:
         d7:6b:f8:91:42:c5:ff:c1:f7:63:af:7c:19:3c:ce:0e:e2:2d:
         9d:c9:e6:d2:d9:0b:c9:70:6c:7b:2a:0a:ca:36:a3:cb:d2:98:
         c6:fb:f4:22:42:9e:2f:d7:79:46:e8:0f:93:62:27:16:d6:75:
         1b:a1:c7:5c:be:49:4a:e2:b9:69:9b:2b:0c:80:84:2c:41:b5:
         22:09:22:49:81:44:54:70:0a:aa:8b:b3:9f:d3:e6:01:32:a9:
         7b:92:dc:0c:06:ec:74:71:49:9a:9b:4d:a1:61:c3:d1:cb:77:
         d0:33:7e:bd:29:13:55:26:72:34:d0:b8:01:d4:6f:37:fe:f7:
         3b:0b:4a:39:2c:40:5d:87:71:71:aa:c2:e3:6e:35:a6:95:af:
         c8:45:1e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:07 2024 by rpki-client on console-ams.rpki-client.org