Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/34352e3137352e31322e302f32322d3234203d3e20323638383734.roa
File:                     34352e3137352e31322e302f32322d3234203d3e20323638383734.roa (raw, json)
Hash identifier:          6nVw7hd57/KKI4kdA0jvWDOdbqeesdCbXtgDiROw8C8=
Subject key identifier:   C0:AE:45:D3:FB:84:2D:1C:13:06:F2:4F:FB:90:36:AA:FE:4B:73:91
Certificate issuer:       /CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
Certificate serial:       293F83800959971C903484D3D4F3B62E8724500C
Authority key identifier: 2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/34352e3137352e31322e302f32322d3234203d3e20323638383734.roa
Signing time:             Thu 04 Apr 2024 06:28:08 +0000
ROA not before:           Thu 04 Apr 2024 06:23:08 +0000
ROA not after:            Thu 03 Apr 2025 06:28:08 +0000
asID:                     268874
IP address blocks:        45.175.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl
                          rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3f:83:80:09:59:97:1c:90:34:84:d3:d4:f3:b6:2e:87:24:50:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
        Validity
            Not Before: Apr  4 06:23:08 2024 GMT
            Not After : Apr  3 06:28:08 2025 GMT
        Subject: CN=C0AE45D3FB842D1C1306F24FFB9036AAFE4B7391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:39:cf:9f:5a:58:58:c3:7e:2b:7f:a5:51:fe:
                    13:1c:36:fc:4d:79:6b:02:d4:8c:d6:14:f3:11:9f:
                    08:0d:0d:e4:8c:2c:92:a8:c7:fb:c9:c1:6d:4e:ac:
                    67:2c:bb:55:6e:8e:74:c4:ec:d8:e6:34:1a:f3:19:
                    ca:d5:88:ab:7e:e4:af:1f:29:9f:4e:62:b2:d8:a2:
                    ae:78:b9:78:ff:70:3b:62:d2:f7:c6:d8:de:aa:3e:
                    a2:8d:74:f0:ed:4f:cb:32:be:cf:88:b4:d1:1a:13:
                    87:72:e9:c1:9e:43:c6:bb:6e:35:38:b1:3e:1b:42:
                    19:ab:53:3d:83:04:67:d1:db:6d:54:3d:6f:48:fa:
                    89:bc:20:e8:8b:86:20:84:79:e0:60:c0:33:56:4f:
                    d7:c8:9e:05:d2:df:18:d7:ab:f7:0a:4c:45:3e:b4:
                    9b:42:31:8a:69:56:cc:84:e6:bb:0f:a1:40:8c:85:
                    54:6c:5e:45:b6:1b:a6:17:f3:d1:3a:34:0c:57:d3:
                    5d:57:c8:39:10:04:6c:b7:33:c7:9c:e4:10:0c:42:
                    58:19:a2:ef:e2:b4:9d:a6:18:27:a1:ae:58:b5:f4:
                    8e:4a:ba:96:21:f0:c1:fe:97:6d:e2:03:64:9a:bd:
                    4c:b8:b8:b4:4f:3b:98:7d:33:28:7b:43:5e:9b:97:
                    18:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AE:45:D3:FB:84:2D:1C:13:06:F2:4F:FB:90:36:AA:FE:4B:73:91
            X509v3 Authority Key Identifier:
                keyid:2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/34352e3137352e31322e302f32322d3234203d3e20323638383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:6b:6c:1d:fc:21:ab:39:20:87:2f:b8:6a:85:27:6d:35:5f:
         86:59:d3:17:9e:24:7c:14:47:ea:92:8c:3e:5e:5d:12:6f:01:
         53:57:f7:27:35:bf:d1:4b:1a:f4:50:f1:29:38:8a:c9:f1:f8:
         61:02:70:ac:ff:10:16:cf:07:90:32:80:96:4d:6a:8a:81:e2:
         5b:3a:a1:08:d4:86:ab:9a:64:9c:79:bd:d5:56:24:3c:99:c1:
         c7:fd:d5:f3:b6:02:09:8a:33:66:83:51:39:05:21:95:85:f4:
         90:e0:23:d1:98:7b:11:65:4f:32:6c:ff:1f:5e:b4:69:a9:6e:
         be:bc:af:8e:a7:de:97:60:a6:3b:bc:31:b8:d4:d0:aa:d0:a7:
         b3:8e:dc:26:97:c3:b1:55:bd:51:c7:33:16:27:97:7a:b9:13:
         8d:74:b4:8e:93:fe:46:0a:c0:b6:f0:4a:02:9e:64:32:b0:1a:
         53:cf:db:50:8b:c9:ae:81:a6:ad:76:83:d3:b6:52:2e:aa:53:
         2c:66:33:80:20:37:eb:90:c4:45:ea:b3:77:a7:7e:1d:a1:9a:
         82:af:28:a9:76:dd:3a:b2:f4:5c:9c:b6:79:71:1b:15:6e:e9:
         13:5e:d7:8f:4c:b9:34:98:e0:37:cf:18:cf:54:11:e9:61:ce:
         55:5a:bf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:07 2024 by rpki-client on console-fra.rpki-client.org