Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/34352e362e3133362e302f32322d3234203d3e20323636313336.roa
File:                     34352e362e3133362e302f32322d3234203d3e20323636313336.roa (raw, json)
Hash identifier:          N7RlSyfJiRy0U87yHgznUL9YSP478KD1iE2gYh3SJD8=
Subject key identifier:   F6:F0:97:A5:86:7D:88:15:20:BF:8A:C9:08:39:17:D2:F0:96:4A:44
Certificate issuer:       /CN=43A7C7C2B310D67DE688F19B159433597525FE31
Certificate serial:       2401E86E7E2CBD818B60ECC285C83E85B708375B
Authority key identifier: 43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/34352e362e3133362e302f32322d3234203d3e20323636313336.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     266136
IP address blocks:        45.6.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.crl
                          rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:01:e8:6e:7e:2c:bd:81:8b:60:ec:c2:85:c8:3e:85:b7:08:37:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A7C7C2B310D67DE688F19B159433597525FE31
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:de:72:3d:e1:1a:92:59:54:ee:38:34:6f:3e:
                    e4:a5:22:69:39:63:c3:58:ed:a3:3e:66:99:4b:3b:
                    1d:56:b8:94:e7:e5:d2:f9:1a:f5:ea:b4:cf:30:4c:
                    a5:12:81:3a:b7:67:9f:a0:10:06:d2:a4:e9:cf:b9:
                    12:a7:43:b0:74:42:77:c3:5d:5d:7a:ad:5f:06:4f:
                    78:fa:19:ba:7e:94:98:1d:57:d0:b6:40:a7:73:c6:
                    75:47:41:a2:56:52:65:9a:7e:97:ad:5e:a7:c7:8a:
                    2e:d3:29:56:df:b3:5a:7b:0e:77:b4:6f:52:d0:17:
                    c0:f2:0b:ad:ed:bb:87:39:78:40:ef:40:f0:a9:56:
                    d8:8a:93:c9:a7:fd:26:dd:87:fd:af:f9:50:0c:c7:
                    ef:7d:ef:1b:82:09:5e:26:0e:be:98:aa:51:6b:1f:
                    fc:eb:f3:17:61:3c:9a:3d:83:a0:39:b5:c7:70:26:
                    26:52:39:e7:9f:19:80:77:3f:60:00:ac:0e:5c:bd:
                    0a:43:c7:29:0c:1a:3d:ce:10:48:14:b4:b3:5d:3f:
                    6f:80:68:e1:34:ed:60:68:ed:c2:8a:d9:09:9e:5f:
                    d3:45:35:75:67:08:d8:ff:8f:76:80:32:8c:db:ff:
                    70:92:a6:9e:65:46:98:0e:de:a0:a5:bc:6a:c5:39:
                    53:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F0:97:A5:86:7D:88:15:20:BF:8A:C9:08:39:17:D2:F0:96:4A:44
            X509v3 Authority Key Identifier:
                keyid:43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/34352e362e3133362e302f32322d3234203d3e20323636313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:71:47:b9:15:fc:d3:7e:f9:fa:60:92:7c:c2:a5:9c:4c:28:
         7b:c9:f8:7a:eb:8b:82:73:59:4e:54:a7:ae:2a:07:75:91:b0:
         0e:a8:eb:f1:80:8b:e4:dd:6d:a4:1f:12:e0:a9:63:78:51:ec:
         55:1e:7f:e7:5c:7d:c8:bc:f1:00:c0:3f:c8:cc:a6:2e:c8:e6:
         a9:a3:fc:29:80:3c:81:a6:1a:23:b6:43:bb:13:ae:f8:a1:e7:
         63:31:97:d5:b6:df:77:81:53:48:ec:a4:4f:14:15:95:bf:26:
         2e:39:27:c2:60:a8:d0:39:6e:fb:00:13:93:d6:48:27:ae:9e:
         89:28:08:ee:25:be:cf:bd:d4:50:4b:43:f8:7a:79:d9:20:1f:
         19:14:4f:ba:4b:05:ed:fd:43:0d:d6:89:ff:f0:30:54:16:a3:
         ed:e9:19:00:28:b0:f2:ae:0a:6d:cc:cb:cb:ae:77:ff:52:c2:
         97:d9:f2:38:32:92:d2:ac:79:a5:c5:75:f0:89:70:98:f8:29:
         91:af:4f:a8:51:b2:32:b5:2a:b4:71:ad:2f:40:25:fb:e3:7c:
         40:ed:b0:ae:4e:58:4b:04:b6:57:8a:90:8a:49:47:fb:10:b9:
         00:c0:36:26:25:39:47:41:75:80:61:2b:c9:79:7c:03:75:3c:
         b8:c4:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:31 2024 by rpki-client on console-fra.rpki-client.org