Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/34352e3232382e342e302f32332d3233203d3e20323637303339.roa
File:                     34352e3232382e342e302f32332d3233203d3e20323637303339.roa (raw, json)
Hash identifier:          uqtFhRFAgRZ2YKxQfTZsyflvrsrfVfW38NGiMyT10hs=
Subject key identifier:   C8:06:23:2A:B8:17:D0:E4:86:31:2E:6C:B1:F5:71:73:38:4C:F7:7D
Certificate issuer:       /CN=62595ED971A5BB40662FB52F1C40BDD69B1CD1BB
Certificate serial:       08D2915886C2DAF01BB5C2AD91A95E32D448545E
Authority key identifier: 62:59:5E:D9:71:A5:BB:40:66:2F:B5:2F:1C:40:BD:D6:9B:1C:D1:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/34352e3232382e342e302f32332d3233203d3e20323637303339.roa
Signing time:             Wed 03 Apr 2024 18:31:19 +0000
ROA not before:           Wed 03 Apr 2024 18:26:19 +0000
ROA not after:            Wed 02 Apr 2025 18:31:19 +0000
asID:                     267039
IP address blocks:        45.228.4.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.crl
                          rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 17:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d2:91:58:86:c2:da:f0:1b:b5:c2:ad:91:a9:5e:32:d4:48:54:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62595ED971A5BB40662FB52F1C40BDD69B1CD1BB
        Validity
            Not Before: Apr  3 18:26:19 2024 GMT
            Not After : Apr  2 18:31:19 2025 GMT
        Subject: CN=C806232AB817D0E486312E6CB1F57173384CF77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:fd:c1:a7:c3:a4:fd:7c:fd:0b:77:7b:2f:
                    aa:0b:70:65:c5:99:56:79:30:f5:a6:12:45:0f:cf:
                    a9:24:06:8b:43:93:88:a8:e0:b1:b5:b6:9f:b9:e7:
                    74:1d:47:55:93:a6:62:ad:36:36:29:3a:18:f9:dc:
                    32:33:c8:c5:a1:6d:db:00:91:ad:d3:f0:d1:c6:72:
                    58:c7:1b:36:0b:ad:80:81:0d:3e:7d:3b:6b:83:a5:
                    ad:26:ee:eb:a6:03:21:80:32:5c:7f:8c:0c:40:cd:
                    03:9c:0f:f5:f5:e8:38:9d:81:54:d8:0c:b8:82:6b:
                    b3:57:6e:2c:c8:48:72:47:6a:14:81:88:15:99:2f:
                    94:20:92:0a:5f:1f:38:a3:d3:04:7b:27:dd:5b:0e:
                    56:23:35:42:33:46:43:08:43:9f:a1:ea:7a:ec:13:
                    a1:fd:61:de:39:50:4c:b8:48:35:77:b8:0e:a6:80:
                    70:16:4a:65:9b:f9:a8:58:41:84:8c:e3:47:46:f3:
                    d4:a4:22:e8:a2:46:70:0a:94:72:80:06:fe:8d:c1:
                    56:9d:81:75:a1:c4:b9:63:c7:48:71:49:1c:06:1e:
                    73:06:be:24:64:c8:08:80:5a:d9:8e:8a:53:9f:12:
                    79:34:e3:b4:f0:af:41:f1:f4:13:7e:20:f5:26:4c:
                    cc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:06:23:2A:B8:17:D0:E4:86:31:2E:6C:B1:F5:71:73:38:4C:F7:7D
            X509v3 Authority Key Identifier:
                keyid:62:59:5E:D9:71:A5:BB:40:66:2F:B5:2F:1C:40:BD:D6:9B:1C:D1:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/34352e3232382e342e302f32332d3233203d3e20323637303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:87:f6:c5:55:c1:f4:0f:f0:7f:1f:24:6b:fe:72:29:40:2b:
         ac:37:41:9a:c6:4d:73:03:e3:26:47:95:82:17:08:ff:42:96:
         7c:61:0e:22:65:61:78:7a:3c:b1:4b:e5:83:17:d9:94:43:b5:
         7e:10:9e:cd:a5:35:bc:b8:83:f8:9d:0a:77:61:1c:6f:94:7a:
         64:f1:e1:cb:fa:07:c8:56:41:8e:49:ce:e9:bd:f6:6f:9c:50:
         1d:b3:3f:9d:88:a2:a5:32:ac:d7:d5:12:70:ef:96:90:65:10:
         7e:6b:a9:27:80:79:27:20:8e:fd:55:44:d0:c4:2d:26:3e:9f:
         62:e5:81:83:45:50:1c:a3:e4:2d:51:b3:2e:54:06:f0:08:b2:
         d6:0b:39:ac:e1:67:f2:84:3c:6b:0d:3c:85:3c:92:64:e0:b0:
         a0:10:0b:a0:ab:74:bc:8b:87:67:3c:b9:ff:be:03:78:f3:96:
         7a:23:79:c4:0a:99:84:4c:51:c6:d7:3c:d9:ec:3a:28:0d:97:
         a3:d4:87:9d:a7:bb:8d:7b:89:b7:8d:a0:15:37:2e:b7:72:46:
         bd:7f:19:37:9f:29:b1:8d:a7:2e:ad:7c:bb:1a:15:fe:b8:f0:
         e4:72:f5:63:12:6d:7c:5e:fc:88:80:86:a5:5e:61:01:1a:02:
         32:48:99:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:01 2024 by rpki-client on console-fra.rpki-client.org