Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa
File:                     34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa (raw, json)
Hash identifier:          fgVmyMQnhBpU4EbNoIp3VmcKKU6Z3YCI8VhGGZHSFPA=
Subject key identifier:   6D:AD:46:EC:5E:A0:A6:4D:5F:A5:1C:C2:18:DF:54:58:6B:DA:42:B3
Certificate issuer:       /CN=6897E867CE6150039D0FAD4F6122F7AE3156D5A2
Certificate serial:       037CA2469E73847E15FC0BE21D0AC22E831F8FBC
Authority key identifier: 68:97:E8:67:CE:61:50:03:9D:0F:AD:4F:61:22:F7:AE:31:56:D5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa
Signing time:             Thu 04 Apr 2024 14:23:45 +0000
ROA not before:           Thu 04 Apr 2024 14:18:45 +0000
ROA not after:            Thu 03 Apr 2025 14:23:45 +0000
asID:                     268126
IP address blocks:        45.169.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.crl
                          rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7c:a2:46:9e:73:84:7e:15:fc:0b:e2:1d:0a:c2:2e:83:1f:8f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6897E867CE6150039D0FAD4F6122F7AE3156D5A2
        Validity
            Not Before: Apr  4 14:18:45 2024 GMT
            Not After : Apr  3 14:23:45 2025 GMT
        Subject: CN=6DAD46EC5EA0A64D5FA51CC218DF54586BDA42B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:d1:82:ef:ec:4a:ca:9b:77:79:db:4d:8a:
                    58:d0:e5:11:eb:22:af:75:60:5f:9b:4d:d2:dd:cc:
                    44:50:c6:f1:21:a3:87:b9:d1:ae:14:11:dc:20:11:
                    e5:1c:3b:77:47:15:ac:01:89:00:1a:67:d3:18:d5:
                    fb:ea:d0:92:fa:c9:ac:ea:b7:89:de:db:e1:06:4c:
                    0f:0f:1f:91:f9:24:63:9e:96:05:c2:32:9c:9a:81:
                    06:8f:6d:eb:0f:55:2d:3e:87:b7:df:82:52:4c:97:
                    67:d2:70:46:3e:a5:e8:21:78:4e:e6:5a:da:33:fd:
                    d2:73:c7:a7:d4:16:52:cd:e6:31:89:bb:45:3c:e3:
                    1e:9f:38:85:6a:87:54:df:33:a5:1f:a7:a0:5b:8a:
                    fd:3f:6b:85:d7:c7:a5:56:21:00:14:1c:05:01:cf:
                    58:22:a5:56:69:0f:10:1b:0c:0b:7a:14:a1:0a:dd:
                    1d:21:f7:93:fc:b4:bf:91:dc:07:40:a5:47:18:c8:
                    77:bf:c6:c5:b6:d7:df:65:01:29:ee:96:df:4a:b2:
                    1f:ec:fd:a8:00:6f:ad:8e:48:4c:e3:5f:5b:4f:2e:
                    53:3b:1e:f2:49:65:5e:96:0a:0d:04:10:70:ec:09:
                    4b:6b:05:49:2a:65:4a:a9:61:61:fc:00:02:49:a8:
                    25:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AD:46:EC:5E:A0:A6:4D:5F:A5:1C:C2:18:DF:54:58:6B:DA:42:B3
            X509v3 Authority Key Identifier:
                keyid:68:97:E8:67:CE:61:50:03:9D:0F:AD:4F:61:22:F7:AE:31:56:D5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:25:76:65:de:ba:08:82:fa:46:f9:4b:54:d3:a7:be:84:e1:
         96:40:94:d7:bb:d4:4c:28:16:26:c9:53:9e:8b:07:4d:ce:86:
         40:78:38:4e:4a:cc:7a:cd:43:ae:95:b7:16:26:82:41:05:b0:
         7b:70:ba:5c:26:5c:dd:c3:df:77:c8:bf:38:eb:81:65:56:00:
         a1:f0:b7:bf:32:ba:1e:8d:5e:83:d2:25:98:6d:d7:c7:ed:3a:
         b0:0d:09:6a:5c:83:68:00:bb:88:b2:93:b5:c8:2b:ee:ed:fe:
         6c:fc:72:f2:8c:7e:a4:93:b5:f3:33:d0:e2:f2:81:22:ec:4c:
         15:4d:9e:30:10:2d:11:1d:52:90:cd:43:ce:7d:5d:71:f7:87:
         b5:e5:c7:0f:9e:45:64:dd:6e:7a:7c:53:8e:84:d3:b5:5d:ea:
         af:a7:c3:d1:ce:22:48:9d:60:4c:8c:c6:9b:7c:82:7d:e6:94:
         4f:bb:64:99:ad:ee:ae:fa:3b:5d:87:59:0a:f8:57:60:8b:a2:
         f6:03:21:e7:7c:8f:fe:16:bc:6e:18:0d:a7:13:f7:34:04:c6:
         b5:ba:be:1b:aa:0d:9a:e1:0e:f0:db:9e:c4:ae:79:8e:c0:34:
         c6:73:74:68:4a:78:ba:a2:2e:cb:9c:60:5f:5f:78:1b:dd:0d:
         4c:cc:3f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:42 2024 by rpki-client on console-fra.rpki-client.org