Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/34352e3232362e3134382e302f32322d3234203d3e20323636393638.roa
File:                     34352e3232362e3134382e302f32322d3234203d3e20323636393638.roa (raw, json)
Hash identifier:          uil01+ofyahpT+RhE84iGfBXkvzyD/CjFwhzRTnbudo=
Subject key identifier:   39:DD:C6:E6:C7:56:5F:DB:76:0B:4C:89:05:0E:53:A5:B6:5E:EA:43
Certificate issuer:       /CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
Certificate serial:       76014AEABF31DB0D6F4F74A89647E41822BFC328
Authority key identifier: A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/34352e3232362e3134382e302f32322d3234203d3e20323636393638.roa
Signing time:             Thu 04 Apr 2024 04:17:49 +0000
ROA not before:           Thu 04 Apr 2024 04:12:49 +0000
ROA not after:            Thu 03 Apr 2025 04:17:49 +0000
asID:                     266968
IP address blocks:        45.226.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl
                          rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:01:4a:ea:bf:31:db:0d:6f:4f:74:a8:96:47:e4:18:22:bf:c3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
        Validity
            Not Before: Apr  4 04:12:49 2024 GMT
            Not After : Apr  3 04:17:49 2025 GMT
        Subject: CN=39DDC6E6C7565FDB760B4C89050E53A5B65EEA43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:7d:35:9d:a6:95:a1:2f:cc:c0:b5:5d:2f:
                    35:1d:af:12:ee:28:63:69:e5:91:2d:69:32:fc:8a:
                    61:5b:5e:4d:e9:8b:ba:3e:97:e8:9a:2a:9d:69:f5:
                    3e:e1:a0:a6:cc:92:d4:8e:98:1a:f6:1f:72:bb:fa:
                    c5:25:6b:88:a6:4f:a1:67:3e:8f:b3:ea:a7:5a:81:
                    a6:8b:3a:f3:d9:23:96:58:09:0b:93:58:83:56:7e:
                    11:00:06:94:be:f1:7d:e8:fe:93:47:c6:7e:ce:ec:
                    21:22:17:c3:0e:35:87:89:93:59:78:7f:e9:e4:e9:
                    ed:72:6d:d8:14:11:55:e0:8e:a8:51:9b:ce:07:d4:
                    ce:a8:9c:22:09:49:02:ba:26:33:2f:22:ba:f2:1b:
                    8d:eb:19:c8:db:a3:f6:f7:d7:34:8d:dc:e4:4c:53:
                    8c:45:54:fe:cf:b0:36:b7:76:fa:cb:ab:44:ab:83:
                    ba:04:2b:bf:57:34:8e:88:15:f6:58:c3:7c:5f:5c:
                    ae:c6:7f:da:5b:78:e6:f6:48:74:17:55:ca:35:07:
                    89:00:f9:90:7d:a4:99:ba:06:4a:e7:6d:96:3e:0b:
                    98:07:76:3a:ed:99:02:4f:38:21:f0:82:14:32:15:
                    09:ba:e6:a8:94:09:64:e7:58:87:a6:ec:ed:9d:93:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DD:C6:E6:C7:56:5F:DB:76:0B:4C:89:05:0E:53:A5:B6:5E:EA:43
            X509v3 Authority Key Identifier:
                keyid:A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/34352e3232362e3134382e302f32322d3234203d3e20323636393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:5c:1c:a4:3d:60:e7:cd:25:b5:45:82:56:46:f9:c6:48:a2:
         65:34:6d:22:a3:8b:36:eb:d4:be:d5:4d:f2:9b:5e:58:0e:7b:
         fc:bc:e7:3e:46:81:b5:60:45:8d:c8:8c:1f:f2:d0:db:86:15:
         04:a2:3e:eb:2b:c8:7b:e7:34:ef:da:6e:c0:3b:0f:6c:c4:cd:
         69:30:f4:fb:42:f9:2e:c6:25:75:f3:36:01:a9:69:3f:ae:07:
         65:01:06:0f:f7:97:94:bc:a7:6d:e3:34:1c:68:44:a7:52:3b:
         3b:ec:07:12:bf:a2:86:b3:73:38:7d:64:fd:eb:f6:0f:87:89:
         0e:88:f5:57:85:78:95:76:af:b6:a1:b9:0a:fc:90:44:73:ad:
         7d:93:44:3e:e7:c6:d1:ce:05:39:e4:be:a5:b3:c8:f8:25:85:
         4b:9d:98:09:51:58:ca:ca:e5:bd:c6:42:18:a2:bb:6a:b2:ad:
         16:f4:2c:89:de:8a:10:60:b8:d2:63:b3:00:0e:34:71:dc:b9:
         fb:41:e8:88:bf:6f:4f:c0:72:42:8a:55:67:6b:54:63:8f:95:
         c5:cd:61:fb:03:dc:f1:3e:03:ea:4b:19:eb:21:fb:57:22:c6:
         94:8c:45:7c:75:b0:eb:ae:97:bc:c1:57:63:e7:ad:a9:47:c2:
         b2:37:4e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:44 2024 by rpki-client on console-fra.rpki-client.org