Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa
File:                     34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa (raw, json)
Hash identifier:          ElJjy7A1PbQG8wIwA8bz2I3GJB8p0S7yiLqquvqNB9o=
Subject key identifier:   15:42:9C:B7:1D:1D:DD:8B:87:3F:EA:75:1A:12:D7:1F:E6:6A:DD:33
Certificate issuer:       /CN=71238E97CC73F492E8BD23DB6B3EA12536850E88
Certificate serial:       5DAEA5EAA5EE5CBEAE692DC0DBDA8E18961CCFAC
Authority key identifier: 71:23:8E:97:CC:73:F4:92:E8:BD:23:DB:6B:3E:A1:25:36:85:0E:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa
Signing time:             Tue 05 Nov 2024 18:20:11 +0000
ROA not before:           Tue 05 Nov 2024 18:15:11 +0000
ROA not after:            Tue 04 Nov 2025 18:20:11 +0000
asID:                     267155
IP address blocks:        45.229.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.crl
                          rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ae:a5:ea:a5:ee:5c:be:ae:69:2d:c0:db:da:8e:18:96:1c:cf:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71238E97CC73F492E8BD23DB6B3EA12536850E88
        Validity
            Not Before: Nov  5 18:15:11 2024 GMT
            Not After : Nov  4 18:20:11 2025 GMT
        Subject: CN=15429CB71D1DDD8B873FEA751A12D71FE66ADD33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b0:12:db:c7:fb:ef:88:ad:e3:14:69:d0:98:
                    7d:be:d9:72:94:da:fe:d1:0d:1c:1f:17:7a:85:f7:
                    18:95:30:71:d9:0d:33:07:b1:9f:c4:00:6d:96:c1:
                    c2:36:89:65:ac:a0:87:5f:de:da:45:af:f1:ef:22:
                    a9:4a:bd:a4:42:b6:09:1e:dc:ff:26:8e:b1:25:a6:
                    d4:25:5b:98:9f:ee:45:11:c4:66:25:3c:eb:f8:d8:
                    9d:ae:4e:55:1c:9b:96:47:66:51:2c:b9:b4:e2:0a:
                    ad:9d:40:83:23:57:d4:28:02:1e:b3:0b:54:8c:9c:
                    00:2e:95:b8:b0:d0:e2:ba:b1:5c:32:a6:69:3d:76:
                    65:0b:2b:24:ad:1a:65:64:ab:39:c4:5f:e0:50:9f:
                    ad:a2:bf:ca:d0:63:df:24:3e:7f:fb:de:fd:82:12:
                    98:22:64:b1:3f:a7:be:09:4d:87:a5:20:f0:d0:cc:
                    e4:0a:92:fd:4e:b6:fe:84:8e:49:a7:84:83:86:55:
                    60:67:88:b9:ab:c3:46:83:69:28:8e:7d:31:f5:f6:
                    38:72:30:3d:b7:8a:49:05:26:47:c8:10:d8:29:c8:
                    5a:32:be:66:11:a8:9a:30:83:ca:a5:80:b2:04:f9:
                    33:7d:5a:c1:e8:d3:5a:c8:9b:54:cb:04:ad:56:11:
                    43:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:42:9C:B7:1D:1D:DD:8B:87:3F:EA:75:1A:12:D7:1F:E6:6A:DD:33
            X509v3 Authority Key Identifier:
                keyid:71:23:8E:97:CC:73:F4:92:E8:BD:23:DB:6B:3E:A1:25:36:85:0E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:22:8e:45:78:21:ba:e4:73:0a:56:39:36:01:b5:72:dc:40:
         9a:f7:b7:b0:07:1b:61:6b:9f:ef:72:43:e1:5a:a9:6f:45:13:
         79:d8:e8:11:17:ff:9f:23:44:12:b2:ef:75:80:f4:17:29:87:
         bd:ce:bc:97:61:4e:37:04:a1:42:8d:5b:29:ae:91:c5:3f:7e:
         1c:19:90:55:e2:02:83:7d:a4:97:5f:43:b9:d3:da:5f:05:38:
         89:74:81:70:61:98:1e:1b:5d:5e:d8:8c:da:e9:82:26:62:3a:
         e3:f7:73:a8:fc:19:f0:8c:d4:87:ff:38:b7:79:29:7f:f5:7a:
         a2:e7:06:fc:6a:11:96:03:f2:15:00:3d:dd:80:f1:46:43:f0:
         3d:42:05:52:8e:89:ed:aa:e0:bd:09:56:db:d7:c7:9f:6b:18:
         d2:f0:0a:45:00:ca:d7:f2:74:92:a7:fa:20:28:b4:2d:19:70:
         78:18:81:8f:2c:2a:8a:9f:37:cd:2b:2b:18:01:ad:f8:46:0c:
         9c:4c:0a:26:94:be:fd:95:23:0e:80:68:c6:a4:5c:8e:38:de:
         fb:59:30:ed:11:f8:b3:0b:55:d5:b1:42:9a:bf:a5:44:b0:34:
         15:a2:b9:84:a0:df:e5:70:09:8b:e3:0e:f8:21:9e:82:86:75:
         a9:b1:bc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:53 2024 by rpki-client on console-fra.rpki-client.org