Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/34352e3233372e39322e302f32322d3332203d3e20323638323637.roa
File:                     34352e3233372e39322e302f32322d3332203d3e20323638323637.roa (raw, json)
Hash identifier:          21cfCAoJy8uVjOcnpMsn/oqoZpe/yMvKVV5KmtP1SZI=
Subject key identifier:   FA:BE:7D:0A:7A:4E:2C:A4:6C:A6:EC:31:DF:3B:AB:B8:E5:E4:20:C6
Certificate issuer:       /CN=E0E56E765738AF9709155514C8A4C6494D4155B3
Certificate serial:       6B8D41456E2F7DDA322FDC64E1C38FC9233DEACC
Authority key identifier: E0:E5:6E:76:57:38:AF:97:09:15:55:14:C8:A4:C6:49:4D:41:55:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/34352e3233372e39322e302f32322d3332203d3e20323638323637.roa
Signing time:             Wed 03 Apr 2024 18:31:30 +0000
ROA not before:           Wed 03 Apr 2024 18:26:30 +0000
ROA not after:            Wed 02 Apr 2025 18:31:30 +0000
asID:                     268267
IP address blocks:        45.237.92.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.crl
                          rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8d:41:45:6e:2f:7d:da:32:2f:dc:64:e1:c3:8f:c9:23:3d:ea:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E56E765738AF9709155514C8A4C6494D4155B3
        Validity
            Not Before: Apr  3 18:26:30 2024 GMT
            Not After : Apr  2 18:31:30 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:b2:71:23:46:de:a1:f6:2d:9f:0d:f2:00:
                    76:b8:bf:7a:0e:6e:ac:fe:e0:9c:3f:30:30:f3:b7:
                    a8:cf:af:75:d7:e6:1a:b5:17:8b:81:e7:a1:ce:72:
                    96:dd:ea:17:98:25:a9:5f:72:1d:7e:bc:49:49:1d:
                    7a:80:04:52:94:60:12:90:e6:fd:ab:cc:5b:9a:98:
                    6f:92:2f:7c:b2:80:de:ba:ac:b6:ba:5b:77:2b:39:
                    81:45:4e:6b:c3:fc:5f:c1:47:5a:91:5b:69:d0:e6:
                    e0:f0:e4:9f:13:d8:d9:14:3b:65:27:d7:56:0d:52:
                    6d:ba:77:95:c5:28:d2:06:3c:3a:07:ec:ac:4c:7b:
                    c2:a9:62:b8:80:6b:db:70:4d:10:33:4d:c5:ff:34:
                    d4:8d:ed:5d:01:cb:ab:b2:99:2a:67:64:87:ac:38:
                    28:7d:b9:33:98:34:fd:4e:a8:fe:66:b4:33:1b:6f:
                    af:b7:94:29:b7:06:fe:85:6b:1b:d2:c5:29:15:08:
                    22:a3:61:8e:88:a8:0e:a0:4b:02:55:9f:20:4f:68:
                    11:32:e4:45:3c:47:6f:ad:ea:c2:66:2c:df:9b:9a:
                    4a:6b:f8:b1:c9:fa:de:49:13:b4:60:e1:c6:61:24:
                    a3:a6:02:95:67:a6:da:33:cf:89:81:b2:1e:2d:f2:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BE:7D:0A:7A:4E:2C:A4:6C:A6:EC:31:DF:3B:AB:B8:E5:E4:20:C6
            X509v3 Authority Key Identifier:
                keyid:E0:E5:6E:76:57:38:AF:97:09:15:55:14:C8:A4:C6:49:4D:41:55:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/34352e3233372e39322e302f32322d3332203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:89:0c:6f:40:c8:11:86:b4:54:c3:03:6b:0b:37:35:ec:aa:
         25:3c:3f:4c:61:10:97:aa:b2:7b:74:c1:02:fa:11:7b:2b:10:
         21:78:30:93:ac:6b:21:d0:31:c8:19:9f:7b:c5:49:39:32:08:
         b8:e1:2c:bb:35:6f:73:51:5a:17:b0:d8:de:02:50:2e:12:70:
         49:38:8b:97:3f:8a:06:70:f9:a2:b7:e6:67:df:95:de:fa:5d:
         16:31:9c:34:8a:30:dd:3d:35:0c:44:81:12:04:f2:db:a1:f9:
         4e:e8:7a:e6:75:e6:4f:65:0e:e2:7f:94:13:55:ef:5e:fd:2a:
         d1:35:fb:ee:7e:15:f7:a4:b0:20:47:24:71:1d:88:38:e3:0c:
         1a:51:36:0b:55:ea:cc:a4:2f:99:5f:73:21:7e:e3:ac:c2:80:
         ed:90:39:1e:cb:73:33:14:48:04:e0:e0:87:3e:dd:0d:bc:60:
         fa:64:5a:c3:3a:78:3f:20:5b:44:00:19:9c:4e:b7:bf:98:35:
         17:1f:d4:b3:4a:65:6a:94:fa:fb:74:22:a5:aa:e4:47:28:da:
         ba:e9:04:77:32:9c:b4:37:73:69:83:78:c2:4b:1e:67:e7:b1:
         af:0c:47:5f:bb:06:64:08:39:1e:87:48:3c:95:09:49:38:68:
         1c:ef:f2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:43 2024 by rpki-client on console-fra.rpki-client.org