Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32342d3234203d3e20323639323835.roa
File:                     34352e3138322e35322e302f32342d3234203d3e20323639323835.roa (raw, json)
Hash identifier:          Q70kyTfj+QxKruCCBrn3WSIrMJSsLPyhkAU/ItLP5bw=
Subject key identifier:   EC:ED:CA:AA:36:5B:BB:93:13:F7:CE:4F:E1:3D:ED:6F:40:75:07:BF
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       26960863AF34A64F99A0EA71AC3020A170098DCA
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32342d3234203d3e20323639323835.roa
Signing time:             Wed 28 Aug 2024 16:17:45 +0000
ROA not before:           Wed 28 Aug 2024 16:12:45 +0000
ROA not after:            Wed 27 Aug 2025 16:17:45 +0000
asID:                     269285
IP address blocks:        45.182.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:96:08:63:af:34:a6:4f:99:a0:ea:71:ac:30:20:a1:70:09:8d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Aug 28 16:12:45 2024 GMT
            Not After : Aug 27 16:17:45 2025 GMT
        Subject: CN=ECEDCAAA365BBB9313F7CE4FE13DED6F407507BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:90:32:c6:a0:78:ea:66:a6:e2:da:50:80:d8:
                    cd:e1:1f:5e:98:ac:60:d2:c4:b8:40:9d:da:83:82:
                    2e:c5:92:64:c5:99:61:e4:83:ad:53:55:58:0c:d3:
                    2d:b4:df:e7:6a:0e:ba:85:dc:0f:2f:35:ee:24:9e:
                    43:4b:31:20:4e:dd:eb:22:d9:4d:f6:bf:b3:ad:bc:
                    89:24:ee:3c:bd:14:7a:c9:25:d3:58:b1:29:8f:55:
                    2b:91:ea:6d:62:2f:eb:ee:1f:24:27:eb:55:d2:08:
                    47:ba:bb:a7:a4:2d:3f:bb:b7:02:ab:68:fc:80:05:
                    6a:e3:82:c7:2e:21:d9:93:bb:7e:da:54:cd:e3:1d:
                    9c:1f:91:5d:d5:02:6a:30:87:38:fd:bf:29:db:5d:
                    ad:84:ee:71:e0:c7:8a:38:6d:46:be:e1:02:1c:2d:
                    7e:26:ff:a6:ae:ab:d4:69:cb:46:8a:d3:78:72:b8:
                    b2:c0:3c:f8:58:5d:d8:56:39:c4:86:5b:46:f1:41:
                    d8:f4:62:3e:ae:b8:8a:d6:ad:44:c0:32:77:6e:37:
                    9d:2b:6f:ed:7e:33:f2:f1:1e:48:42:4c:75:99:30:
                    57:7a:f3:1a:3d:08:2a:f7:57:a1:64:82:b2:62:49:
                    8b:64:f8:1d:86:9e:cc:3d:6a:de:9d:36:fc:39:a9:
                    72:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:ED:CA:AA:36:5B:BB:93:13:F7:CE:4F:E1:3D:ED:6F:40:75:07:BF
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32342d3234203d3e20323639323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:5b:d6:79:b6:76:d4:0f:6c:c1:9c:b6:c1:54:b0:68:ea:d9:
         6b:a1:6c:ab:66:66:c9:3f:94:1f:cb:6d:23:c5:a0:81:cd:e5:
         c5:db:3d:ca:1d:2f:b9:7e:47:50:b1:38:42:70:b4:b2:3f:30:
         89:3b:fb:69:a5:aa:91:b0:41:2f:c8:1f:d1:83:ca:d8:9a:e6:
         c4:52:d9:94:ff:2a:0a:88:89:c6:5f:38:c6:11:5e:a0:81:30:
         76:30:62:b1:ff:1b:ab:82:7a:07:30:30:c1:6e:b0:03:7f:5b:
         df:27:e2:d6:c0:07:af:17:9d:79:13:cd:6f:ec:3c:08:fe:2a:
         1d:02:d6:8c:95:75:87:c9:7a:f9:e2:ae:4a:3b:a1:fc:1b:88:
         89:ec:7c:74:15:4a:76:ed:3c:67:6d:29:4d:93:d9:f5:bc:f4:
         6d:62:53:b7:57:7a:10:47:c5:e9:d4:4a:e2:00:a9:b7:f8:10:
         50:a5:42:17:99:aa:9a:4f:0e:cb:9b:10:a1:5d:11:28:80:7d:
         1b:81:89:fb:d1:fc:b1:21:e7:aa:d5:d1:85:7f:21:6f:a6:14:
         3e:db:8c:c6:57:d8:37:5a:fb:a1:4b:9f:14:5b:52:dd:79:d1:
         03:9f:b9:6e:c1:18:4d:52:8b:70:f0:e2:59:4f:a3:ef:4b:87:
         a4:25:a8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:49 2024 by rpki-client on console-fra.rpki-client.org