Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36322e302f32342d3234203d3e20323636393635.roa
File:                     34352e3232362e36322e302f32342d3234203d3e20323636393635.roa (raw, json)
Hash identifier:          YUXAylwyy/bKyUHiJxpnxO1POYEVuMUDtHYc6AhZkME=
Subject key identifier:   36:1A:4C:DC:F5:C8:21:85:46:68:5C:96:59:07:67:30:2C:DB:D2:43
Certificate issuer:       /CN=CC96ED49391396FC76164F871315FEAD2DEE5F35
Certificate serial:       49FD94A854891575933FDD0689642191FB314100
Authority key identifier: CC:96:ED:49:39:13:96:FC:76:16:4F:87:13:15:FE:AD:2D:EE:5F:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36322e302f32342d3234203d3e20323636393635.roa
Signing time:             Fri 20 Sep 2024 19:49:35 +0000
ROA not before:           Fri 20 Sep 2024 19:44:35 +0000
ROA not after:            Fri 19 Sep 2025 19:49:35 +0000
asID:                     266965
IP address blocks:        45.226.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.crl
                          rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fd:94:a8:54:89:15:75:93:3f:dd:06:89:64:21:91:fb:31:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC96ED49391396FC76164F871315FEAD2DEE5F35
        Validity
            Not Before: Sep 20 19:44:35 2024 GMT
            Not After : Sep 19 19:49:35 2025 GMT
        Subject: CN=361A4CDCF5C8218546685C96590767302CDBD243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:8e:35:9b:3a:1a:a2:94:b3:f0:37:31:96:
                    de:1b:06:12:42:bb:6c:c4:57:3b:34:3c:d6:72:42:
                    c3:a8:a3:58:15:6d:45:82:a4:57:d8:19:af:9a:63:
                    3f:1c:da:f9:8d:c7:eb:05:d3:e3:38:64:08:b4:f1:
                    16:c0:ac:78:93:d8:73:30:55:64:c4:d0:54:e6:8e:
                    4c:64:73:e6:71:af:98:95:aa:37:33:a9:7f:c4:0a:
                    6e:85:c6:c2:1b:ba:7d:e1:bb:af:df:be:1d:f2:5e:
                    fa:ef:08:d4:75:5c:30:eb:e7:5a:1e:33:56:dd:9e:
                    ae:a3:5e:32:9a:6c:c4:90:18:62:bd:2d:96:57:6e:
                    4a:aa:7e:b7:0f:6b:7f:13:b6:8a:d9:4d:c2:77:a4:
                    ea:a1:d0:4a:84:e2:24:29:d9:0d:ee:e8:07:2c:2d:
                    c3:c1:bc:80:58:60:04:97:b7:23:27:c4:67:26:af:
                    24:5e:10:e7:c1:4e:33:3f:30:ed:da:1a:d3:99:e0:
                    5e:56:d7:82:6f:c8:23:b6:fa:78:f4:48:94:e4:dd:
                    2e:46:ad:6b:4f:e4:ce:59:62:00:a1:39:ae:90:35:
                    92:ae:ee:62:f3:1a:ee:94:65:01:a0:2c:6d:75:44:
                    29:03:da:fa:a4:b0:43:31:9b:73:cc:13:cd:71:eb:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1A:4C:DC:F5:C8:21:85:46:68:5C:96:59:07:67:30:2C:DB:D2:43
            X509v3 Authority Key Identifier:
                keyid:CC:96:ED:49:39:13:96:FC:76:16:4F:87:13:15:FE:AD:2D:EE:5F:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36322e302f32342d3234203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:86:fa:96:33:b2:b8:27:a1:a9:c6:e5:74:24:de:55:89:58:
         5d:af:7d:89:7d:df:cd:9e:6a:d1:b8:3d:53:31:74:6c:fd:bb:
         42:b4:65:80:97:fb:b1:18:2f:c9:f4:ce:01:01:47:75:46:48:
         5f:ec:1f:4d:0f:8d:8b:6b:ee:ad:2d:57:3c:06:03:10:68:98:
         ec:cb:e9:87:88:f6:5c:31:de:50:38:83:8a:1b:f4:30:47:93:
         3d:46:43:e0:4a:72:dc:4e:11:c3:4a:98:b5:1d:f7:62:ee:b0:
         f0:8e:50:c7:d3:8c:28:72:c4:43:76:be:0b:4c:b7:ff:23:6d:
         54:39:a6:e3:02:de:55:d0:3c:df:4f:fb:25:33:20:73:28:d5:
         b4:b3:b5:e3:c1:b7:f4:9a:64:c6:a5:38:56:87:f7:e8:bb:1c:
         91:6c:44:4b:a1:1a:10:21:86:b7:2e:cb:46:9a:dd:a5:b9:70:
         34:3d:e7:37:27:60:79:8f:5a:fe:fc:9d:c6:97:29:0a:6a:1b:
         c3:07:3b:9f:f4:08:31:99:41:99:7e:30:a4:40:18:2f:c3:85:
         ff:c0:00:0a:4d:0b:8d:f6:13:31:88:80:fc:65:09:d5:1c:4d:
         8f:96:b0:72:21:a4:7b:b4:59:ec:6b:69:d8:70:ee:03:3c:3d:
         47:fd:fd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:08 2024 by rpki-client on console-ams.rpki-client.org