Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e372e302f32342d3234203d3e20323638333038.roa
File:                     34352e3233382e372e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier:          c+k1+d/sjZSUaBNrDI1l+qsy27u6DbUZYnYp4jPfeO8=
Subject key identifier:   C1:B6:A2:2E:C6:FE:2F:91:43:75:79:AC:5B:B0:F0:1B:E7:05:DB:95
Certificate issuer:       /CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
Certificate serial:       4117E2B8890A3A44EA9DE027C3BB580B682F3877
Authority key identifier: 92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e372e302f32342d3234203d3e20323638333038.roa
Signing time:             Thu 04 Apr 2024 19:57:47 +0000
ROA not before:           Thu 04 Apr 2024 19:52:47 +0000
ROA not after:            Thu 03 Apr 2025 19:57:47 +0000
asID:                     268308
IP address blocks:        45.238.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:17:e2:b8:89:0a:3a:44:ea:9d:e0:27:c3:bb:58:0b:68:2f:38:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
        Validity
            Not Before: Apr  4 19:52:47 2024 GMT
            Not After : Apr  3 19:57:47 2025 GMT
        Subject: CN=C1B6A22EC6FE2F91437579AC5BB0F01BE705DB95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:ca:10:73:5e:17:a7:b9:8f:50:d1:d3:b7:
                    5a:30:82:ca:8d:81:f0:69:78:2c:db:4e:6b:e6:60:
                    dd:7d:14:76:e3:37:cf:a4:04:ad:9c:23:de:8d:e1:
                    07:0e:97:b2:d9:a9:ae:ad:10:eb:f8:cf:c5:ed:d4:
                    99:6e:2a:33:c1:60:e4:63:4d:7d:e1:c4:f8:b2:c8:
                    97:f6:9d:8b:45:27:22:fb:c0:e4:fb:20:fa:85:d2:
                    34:f9:b2:0d:38:8a:20:e5:da:b9:9f:9f:4c:37:c4:
                    8c:d3:ca:53:f6:5e:7d:44:8b:a9:7e:43:10:0d:5e:
                    83:96:e0:a2:13:f6:48:b2:4a:73:fd:25:8c:26:e1:
                    0c:fa:1b:66:91:41:9f:36:3d:87:00:60:b8:8c:52:
                    82:7f:24:72:75:5e:d9:f8:b1:97:c0:cc:98:1c:bc:
                    a4:61:21:c4:f1:19:90:5e:86:99:f0:ad:39:6e:62:
                    70:6b:aa:0c:76:4a:87:6c:48:b9:5f:c1:9b:5c:7d:
                    a7:85:ae:4c:54:78:d7:42:9d:33:71:55:76:08:1e:
                    74:49:8d:4f:e1:9b:48:bc:d4:09:c4:f3:44:68:aa:
                    0b:f4:89:c6:87:a6:3a:1f:d7:00:4e:bc:f2:97:47:
                    fa:d2:62:84:59:1b:5b:9e:dd:c6:b4:f3:f5:62:ba:
                    38:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B6:A2:2E:C6:FE:2F:91:43:75:79:AC:5B:B0:F0:1B:E7:05:DB:95
            X509v3 Authority Key Identifier:
                keyid:92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e372e302f32342d3234203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:67:39:a5:4e:91:e8:8f:37:cb:01:24:82:96:66:01:5c:10:
         c9:54:62:b4:34:77:d6:fc:8f:c5:8e:b1:ff:db:31:9a:28:b6:
         00:40:b9:93:03:28:36:42:c6:bc:6d:9b:3a:c7:92:32:88:a7:
         f9:fb:c6:f7:ac:00:ac:4e:42:50:8d:05:3e:bf:6e:6d:ba:79:
         28:d7:66:87:59:c6:77:26:78:63:65:f9:9d:16:c8:06:0c:4a:
         77:ac:3d:fc:5a:eb:58:fb:87:2b:d3:3b:91:92:b3:9d:1d:af:
         8b:7e:16:92:d5:26:5f:ad:b1:c2:f5:c5:ca:48:46:31:29:10:
         ad:8a:0e:0b:c2:35:42:15:25:20:15:74:de:8c:09:b3:52:cf:
         17:87:a6:8f:e8:3d:71:5f:02:48:21:7b:50:97:78:52:8f:7c:
         2c:e8:4f:c9:0a:d2:69:3a:6d:17:a8:ae:a2:a9:8c:e9:0b:41:
         d7:da:96:7c:d5:50:4e:26:ca:b8:ee:64:e3:f3:80:07:cd:ec:
         4f:0a:cd:69:3c:40:5c:22:1a:17:54:57:9c:e5:61:f7:e3:66:
         0e:32:a2:0c:b7:5e:03:88:ca:97:65:82:bf:18:a9:7c:25:e5:
         7d:9c:fd:8b:18:25:18:0c:8b:c7:ed:58:ea:3f:a2:ba:b7:d9:
         20:3e:a2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:32 2024 by rpki-client on console-fra.rpki-client.org