Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/34352e3137302e342e302f32322d3234203d3e20323638313335.roa
File:                     34352e3137302e342e302f32322d3234203d3e20323638313335.roa (raw, json)
Hash identifier:          efoCsVLcEBNsuvvQfVdRrn5K/3ED3UOFmWctW1aRHdc=
Subject key identifier:   F3:6B:E3:FE:AE:4C:C3:8C:B0:8B:7D:AA:95:DF:E1:FC:56:B5:9C:5B
Certificate issuer:       /CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Certificate serial:       60A81EFA0FAF3D36DBCAFB0BF891EFA489EC3095
Authority key identifier: F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/34352e3137302e342e302f32322d3234203d3e20323638313335.roa
Signing time:             Wed 03 Apr 2024 21:26:04 +0000
ROA not before:           Wed 03 Apr 2024 21:21:04 +0000
ROA not after:            Wed 02 Apr 2025 21:26:04 +0000
asID:                     268135
IP address blocks:        45.170.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
                          rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a8:1e:fa:0f:af:3d:36:db:ca:fb:0b:f8:91:ef:a4:89:ec:30:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
        Validity
            Not Before: Apr  3 21:21:04 2024 GMT
            Not After : Apr  2 21:26:04 2025 GMT
        Subject: CN=F36BE3FEAE4CC38CB08B7DAA95DFE1FC56B59C5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:93:0e:fd:bf:fb:d3:e8:3c:4d:78:62:23:5d:
                    5b:00:46:53:bd:51:f9:87:96:d2:a0:a0:94:fa:b9:
                    23:51:31:a4:ee:2f:2b:a1:d7:5a:de:82:c2:a9:49:
                    a6:84:f5:38:08:dd:69:ec:e3:56:fd:62:6b:f5:b7:
                    ef:f4:63:a7:ef:56:72:db:24:0b:c7:81:32:8e:af:
                    4e:48:6f:e6:4f:84:5b:5a:28:aa:5b:44:26:d0:b8:
                    74:06:e5:e7:39:24:19:e7:e5:0a:cf:74:7a:61:1e:
                    a4:98:4d:22:6e:30:2a:ec:8b:2e:05:89:ad:e7:03:
                    a7:4c:c9:bc:e6:4d:02:4f:90:36:7e:91:c9:07:a1:
                    1c:ba:39:83:06:04:5d:61:8a:94:96:ab:95:d4:e7:
                    e7:cc:1d:59:1a:34:46:8b:b2:db:3d:62:a1:c4:b8:
                    e9:63:f2:cc:c0:65:eb:e1:03:b2:2b:03:df:18:40:
                    e9:5e:38:f4:37:9e:d7:1b:ee:06:c7:90:d2:f5:3d:
                    bb:e9:83:87:b8:a6:70:f3:00:2d:4f:2a:50:77:47:
                    51:cc:f2:7f:83:86:c0:18:ca:9c:a6:e7:df:36:78:
                    05:d3:1f:0c:58:8a:57:c1:61:64:20:3d:26:79:8d:
                    ab:36:3b:78:d0:1e:87:07:84:08:54:00:e1:24:a5:
                    53:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6B:E3:FE:AE:4C:C3:8C:B0:8B:7D:AA:95:DF:E1:FC:56:B5:9C:5B
            X509v3 Authority Key Identifier:
                keyid:F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/34352e3137302e342e302f32322d3234203d3e20323638313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:7f:43:01:bd:a9:4f:75:bf:2c:29:3e:ab:a2:34:b2:6b:93:
         6f:19:79:be:a3:64:82:2c:ba:b8:af:1d:46:f0:f3:8e:ae:ac:
         59:b5:dd:6a:4b:e4:92:b1:9e:af:e9:40:f4:fa:af:49:f1:fc:
         54:9a:a6:03:21:a5:d6:d2:95:8a:b2:27:11:50:72:91:3d:c5:
         52:47:10:cd:37:a6:4e:25:32:e8:9f:d7:1f:6a:ce:f9:0d:4e:
         d2:01:4a:43:9e:8a:ea:c4:b6:63:d8:a3:c3:bd:a6:9e:4d:93:
         4b:1b:68:61:9f:c8:b1:51:ed:7f:ea:6c:87:09:ab:37:28:a8:
         75:e9:54:c2:06:51:e0:5b:31:c7:92:76:5b:4a:d1:25:a7:55:
         65:fc:61:b9:32:06:ff:06:57:6d:f7:a6:31:1a:b7:77:8c:c0:
         f7:dc:f8:01:4f:59:d5:8e:22:25:ca:4c:82:9b:85:fd:e9:45:
         e2:f4:fc:4d:d2:ab:1e:cd:7e:e1:ba:85:48:0d:a1:cd:b4:1d:
         57:ee:4f:74:5e:cd:aa:42:ac:5e:04:08:78:70:1f:a2:29:41:
         81:33:a0:91:9c:b2:0d:4a:5d:aa:1f:d7:2f:7f:b7:fd:d1:49:
         d6:2b:5b:e9:c4:d2:87:00:4a:92:9d:e2:1f:eb:cb:29:93:cb:
         99:4d:18:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org