Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/34352e3233322e36302e302f32322d3332203d3e20323637333136.roa
File:                     34352e3233322e36302e302f32322d3332203d3e20323637333136.roa (raw, json)
Hash identifier:          qUczmp7+LlJuLm4B0dH+bEUbLG+x9OBtzFwNQxRsYxo=
Subject key identifier:   3F:96:16:CC:4A:C0:8F:91:C0:D0:E0:0C:41:15:51:36:12:8F:3C:0E
Certificate issuer:       /CN=4AF555507F76387C67C13DE0BC2B700D6D33121B
Certificate serial:       7C32FEE6624753FAF54749EF1E7921E3B6A45ECC
Authority key identifier: 4A:F5:55:50:7F:76:38:7C:67:C1:3D:E0:BC:2B:70:0D:6D:33:12:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/34352e3233322e36302e302f32322d3332203d3e20323637333136.roa
Signing time:             Mon 02 Sep 2024 18:26:17 +0000
ROA not before:           Mon 02 Sep 2024 18:21:17 +0000
ROA not after:            Mon 01 Sep 2025 18:26:17 +0000
asID:                     267316
IP address blocks:        45.232.60.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.crl
                          rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:32:fe:e6:62:47:53:fa:f5:47:49:ef:1e:79:21:e3:b6:a4:5e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AF555507F76387C67C13DE0BC2B700D6D33121B
        Validity
            Not Before: Sep  2 18:21:17 2024 GMT
            Not After : Sep  1 18:26:17 2025 GMT
        Subject: CN=3F9616CC4AC08F91C0D0E00C41155136128F3C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:bf:b2:39:0f:23:52:f7:b1:d9:1e:bd:46:
                    cf:f1:61:af:3f:6a:90:9b:80:9e:24:27:1d:8d:62:
                    62:72:b7:3d:62:47:93:4a:c5:40:83:ed:70:a2:8d:
                    e6:3d:90:c0:fd:7b:8a:16:40:5d:c1:cc:01:07:86:
                    7b:c2:23:30:de:64:48:2e:6d:33:7f:89:a5:29:bb:
                    fc:92:1f:02:95:6b:e9:71:f8:a3:c7:bc:18:b7:15:
                    6f:e2:9d:a4:c5:4f:5d:04:28:06:b5:ef:22:98:f7:
                    3f:4a:21:b8:f7:1c:c0:88:2b:b4:63:0b:79:53:2a:
                    67:20:9c:cc:5f:f7:5c:21:53:6d:fc:48:34:64:a8:
                    5a:e2:b8:85:24:58:80:66:50:cf:b8:13:ac:2e:ad:
                    32:a5:c5:08:1c:66:28:da:3b:cc:62:8e:cc:df:42:
                    51:04:78:97:67:7d:36:23:7b:17:23:73:72:34:2b:
                    9b:f5:95:8e:15:4e:fe:cc:2d:0f:fb:02:ab:ee:58:
                    be:51:2b:99:79:a4:94:58:e1:08:aa:aa:ba:e7:af:
                    8b:d0:74:d8:25:a2:0c:09:bf:3a:3e:0f:dd:62:ba:
                    b2:63:ee:97:c2:4c:11:cc:df:96:43:de:9f:01:51:
                    18:08:6a:45:10:e6:39:d5:a4:c1:25:c8:2e:55:14:
                    9c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:96:16:CC:4A:C0:8F:91:C0:D0:E0:0C:41:15:51:36:12:8F:3C:0E
            X509v3 Authority Key Identifier:
                keyid:4A:F5:55:50:7F:76:38:7C:67:C1:3D:E0:BC:2B:70:0D:6D:33:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/34352e3233322e36302e302f32322d3332203d3e20323637333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:9f:e0:f6:02:77:eb:ae:50:c9:7d:82:f9:96:45:8a:a3:d3:
         7a:e3:53:4b:22:ef:4f:de:d8:3f:d4:10:a4:e1:b7:8f:9d:6d:
         40:f3:1d:76:94:57:ce:ed:0b:af:a3:ae:ee:8e:02:ba:96:5f:
         2c:a6:ed:9f:36:e3:e8:a6:79:27:22:04:be:be:73:d0:86:fd:
         6d:45:e8:b9:21:53:9e:14:61:fa:16:c3:69:1b:73:e1:80:29:
         bd:6d:c1:ad:f9:ac:b8:ae:bb:57:46:7b:a9:0b:46:6d:7d:b5:
         53:b9:e6:2b:17:87:11:7e:23:fc:49:31:16:f7:84:f1:81:df:
         0d:ad:e0:31:ca:59:f8:fb:b8:a2:e7:a3:b0:e0:a9:8d:bd:75:
         35:4f:e3:f6:0e:1e:b1:7a:8c:b3:ad:0e:f4:37:7d:b1:7e:2b:
         1a:70:8f:ca:88:a1:3e:aa:4b:a3:b6:ae:62:a2:c8:fb:dc:18:
         0e:d3:09:10:a8:cd:e1:3c:bb:2f:32:37:74:81:00:81:bb:ee:
         48:96:ad:4e:4a:bf:3e:38:e9:d9:a1:fc:25:73:28:e8:1e:67:
         f0:94:6d:7b:30:0e:36:90:75:3b:6b:be:41:a2:84:8a:70:e1:
         60:39:a2:0e:15:e6:95:d7:55:e8:1d:a2:d4:3f:8c:f3:99:c4:
         6b:2e:d5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:48 2024 by rpki-client on console-fra.rpki-client.org