Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131342e302f32332d3233203d3e20323637303630.roa
File:                     34352e3232382e3131342e302f32332d3233203d3e20323637303630.roa (raw, json)
Hash identifier:          9HCmQmdRVv4PMOt6DVqQLrf/BsANz6L2S2qaHCB2HZk=
Subject key identifier:   CA:CB:35:A2:9B:82:55:D1:60:EF:3D:27:24:B4:65:C6:D6:AE:F9:4E
Certificate issuer:       /CN=E54A9C7B6751540C380B4080CC3F4CB26ED99480
Certificate serial:       26A9F742CB9161E0E3B10DF91451775D2D33DB91
Authority key identifier: E5:4A:9C:7B:67:51:54:0C:38:0B:40:80:CC:3F:4C:B2:6E:D9:94:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E54A9C7B6751540C380B4080CC3F4CB26ED99480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131342e302f32332d3233203d3e20323637303630.roa
Signing time:             Mon 21 Oct 2024 17:42:32 +0000
ROA not before:           Mon 21 Oct 2024 17:37:32 +0000
ROA not after:            Mon 20 Oct 2025 17:42:32 +0000
asID:                     267060
IP address blocks:        45.228.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/E54A9C7B6751540C380B4080CC3F4CB26ED99480.crl
                          rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/E54A9C7B6751540C380B4080CC3F4CB26ED99480.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E54A9C7B6751540C380B4080CC3F4CB26ED99480.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 16:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a9:f7:42:cb:91:61:e0:e3:b1:0d:f9:14:51:77:5d:2d:33:db:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E54A9C7B6751540C380B4080CC3F4CB26ED99480
        Validity
            Not Before: Oct 21 17:37:32 2024 GMT
            Not After : Oct 20 17:42:32 2025 GMT
        Subject: CN=CACB35A29B8255D160EF3D2724B465C6D6AEF94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:3d:06:1e:cb:c8:02:f2:63:12:3d:55:45:
                    67:f1:96:8b:e6:b5:91:ff:40:f4:fa:0a:a1:0a:bf:
                    bb:51:de:01:84:ca:70:57:b2:08:03:57:99:7c:42:
                    84:bd:15:86:76:74:f0:d7:e0:57:10:fd:b5:c7:96:
                    dc:f5:d2:32:8b:e4:af:2e:8d:4e:ee:08:58:8d:03:
                    70:77:b5:9b:6f:cb:22:84:e7:3b:d2:74:47:93:27:
                    87:de:ba:3a:0d:19:66:93:43:c1:78:35:ba:a8:35:
                    ce:0e:dd:bf:e7:47:ae:33:59:b5:30:bd:5a:80:85:
                    28:b6:d7:7f:35:1a:14:6e:69:05:2c:e4:f6:0b:44:
                    66:c0:32:3b:64:a1:1f:c6:7f:a1:cd:35:ed:40:1d:
                    af:ff:1c:a3:2a:f9:c1:13:d7:31:8a:bc:28:56:33:
                    af:ce:d4:0f:8c:89:b8:b1:f4:e9:2a:80:25:8c:cc:
                    aa:97:13:5d:c2:57:fe:b2:56:c8:86:7d:f5:85:db:
                    87:69:21:cd:be:0f:e2:8b:c7:18:c5:74:8f:56:ce:
                    3b:20:05:ff:3f:cb:9b:cb:63:32:d0:fa:e1:ee:b3:
                    4c:8a:05:aa:15:2f:43:9e:c5:70:95:1f:f9:8f:b9:
                    03:d1:e4:7d:db:7f:2e:09:42:0b:75:c1:de:29:06:
                    10:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CB:35:A2:9B:82:55:D1:60:EF:3D:27:24:B4:65:C6:D6:AE:F9:4E
            X509v3 Authority Key Identifier:
                keyid:E5:4A:9C:7B:67:51:54:0C:38:0B:40:80:CC:3F:4C:B2:6E:D9:94:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/E54A9C7B6751540C380B4080CC3F4CB26ED99480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E54A9C7B6751540C380B4080CC3F4CB26ED99480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131342e302f32332d3233203d3e20323637303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:db:cb:fc:58:27:80:a7:c2:fe:e4:e1:58:9a:47:32:59:e8:
         5b:19:29:c9:89:11:8e:06:25:48:5e:dd:66:13:2a:08:6a:d7:
         55:87:b4:0d:e2:b8:5b:c2:47:d2:15:24:02:f7:4b:b7:c2:b7:
         4d:a6:f1:2e:08:9f:32:f9:00:d1:37:15:e2:3c:ff:9a:ce:6c:
         4e:74:14:b1:d7:24:96:0a:c4:eb:2b:fc:67:64:37:8c:fe:05:
         37:c4:47:f6:3a:f2:ed:e3:be:89:c6:ff:88:f9:d6:a1:c9:9c:
         37:49:9d:c9:af:24:22:8d:b7:fd:2f:58:8b:a6:b2:86:67:ec:
         0e:c5:ff:47:ea:35:73:c4:81:fe:ca:80:92:cf:5d:82:1a:b4:
         0c:c0:51:4a:0f:97:eb:35:27:43:d1:8e:3a:95:82:86:ef:3b:
         55:6e:43:25:b9:1b:ff:fc:d9:76:3a:83:c6:a4:1e:12:0f:84:
         ff:0a:ec:b8:3f:ce:fd:b9:17:28:8b:d5:31:72:c6:e5:0d:5c:
         39:2e:1d:86:ce:db:e2:73:e3:0d:46:0e:1d:e0:c1:f8:7a:a1:
         a8:3f:e8:7c:17:70:c1:7c:c3:ac:3d:b4:15:d1:62:ce:1b:2e:
         4c:a1:b1:cc:7a:16:72:b7:07:9e:08:63:af:81:d1:44:04:69:
         b4:29:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 17:14:35 2024 by rpki-client on console-fra.rpki-client.org