Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/34352e3233342e3133362e302f32322d3234203d3e20323636333536.roa
File:                     34352e3233342e3133362e302f32322d3234203d3e20323636333536.roa (raw, json)
Hash identifier:          R3hkS9+7o7/pQbZgrsQZLDEpbDdUsOT6Dvc4Q7gyFbU=
Subject key identifier:   F1:1F:F2:B2:2D:A0:5B:39:9B:42:7E:07:53:13:1E:0C:53:95:52:C4
Certificate issuer:       /CN=BE24527D25EBA8FEB922396F011CC1B1F41282DF
Certificate serial:       037AE4F50D3D3DAF655EEFF84607E79A4A5B5C2F
Authority key identifier: BE:24:52:7D:25:EB:A8:FE:B9:22:39:6F:01:1C:C1:B1:F4:12:82:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/34352e3233342e3133362e302f32322d3234203d3e20323636333536.roa
Signing time:             Wed 03 Apr 2024 18:41:07 +0000
ROA not before:           Wed 03 Apr 2024 18:36:07 +0000
ROA not after:            Wed 02 Apr 2025 18:41:07 +0000
asID:                     266356
IP address blocks:        45.234.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.crl
                          rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7a:e4:f5:0d:3d:3d:af:65:5e:ef:f8:46:07:e7:9a:4a:5b:5c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE24527D25EBA8FEB922396F011CC1B1F41282DF
        Validity
            Not Before: Apr  3 18:36:07 2024 GMT
            Not After : Apr  2 18:41:07 2025 GMT
        Subject: CN=F11FF2B22DA05B399B427E0753131E0C539552C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:35:88:ab:09:57:ee:65:75:7f:9a:9f:98:66:
                    a6:0d:f1:f0:ff:dc:54:5b:66:97:39:72:ef:94:94:
                    c3:35:73:99:6c:b6:93:1e:0b:19:0b:c0:7f:c0:30:
                    4d:37:f9:3d:df:f9:d5:d5:36:ff:3f:4c:22:81:57:
                    f5:b9:f2:9e:59:72:2f:92:a0:e3:0e:f5:cc:db:bd:
                    56:42:48:4e:c3:6d:96:8e:48:0b:7e:63:f2:2d:dc:
                    df:34:a1:b8:ed:33:eb:e4:8a:b4:02:7b:20:5b:a0:
                    83:f0:b8:67:8c:c7:7e:84:8a:06:cd:07:8b:1b:95:
                    3b:dc:f5:6e:82:ef:81:fe:88:b6:25:f8:46:11:4e:
                    40:bd:13:f4:c3:03:0e:45:20:81:8f:c5:a7:22:36:
                    a7:7b:a0:12:2b:9d:8a:4c:24:f9:cb:b3:8d:31:99:
                    cf:5a:10:f0:a5:ee:ef:83:2a:99:07:b0:33:c8:63:
                    53:20:94:9b:76:a6:28:4e:a8:12:a7:87:e1:83:d8:
                    27:c7:09:60:d7:37:ce:d5:b0:7a:62:d4:2e:bb:60:
                    46:69:c1:6d:8e:29:c8:0b:03:9f:37:44:69:c3:63:
                    79:55:ed:02:ef:18:b7:f5:1c:c6:a2:47:1f:12:72:
                    9c:c5:1a:ef:bd:08:bc:ae:92:d2:23:25:9b:28:d0:
                    36:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1F:F2:B2:2D:A0:5B:39:9B:42:7E:07:53:13:1E:0C:53:95:52:C4
            X509v3 Authority Key Identifier:
                keyid:BE:24:52:7D:25:EB:A8:FE:B9:22:39:6F:01:1C:C1:B1:F4:12:82:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/34352e3233342e3133362e302f32322d3234203d3e20323636333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:67:fe:2c:5b:52:3c:8a:e1:03:17:98:74:00:52:0b:ab:74:
         9e:d9:5c:6c:b6:fb:4f:f6:07:e0:2b:4d:3a:9b:16:0c:39:76:
         f5:5f:55:04:6f:2b:67:e9:3d:20:5f:12:b3:1d:73:5c:c3:0c:
         34:df:fa:a5:a2:5f:6d:4c:3d:87:f3:71:cd:dd:b9:8b:da:63:
         21:84:c3:aa:d4:9e:5b:6a:cb:03:64:80:5d:40:47:85:e5:4e:
         49:23:db:79:5b:b3:bb:65:5e:27:2e:7c:d1:4a:52:31:6b:da:
         91:1a:c6:e9:83:fc:81:42:51:a2:a8:e5:d0:02:71:e7:77:f7:
         88:e0:ae:20:ab:7e:ca:c1:37:d0:1e:a7:c7:4e:06:1f:fd:6c:
         8c:01:b4:d1:73:35:de:a7:4b:c2:5c:96:bd:65:6d:96:95:67:
         76:d4:1a:be:fe:33:50:17:2d:9b:88:5e:f0:c7:b7:22:0d:1f:
         96:72:56:a4:91:3e:d1:a3:96:77:c3:8a:0b:a6:be:b2:f7:89:
         1f:1a:8d:1a:3d:59:21:f5:ee:8a:c3:6a:a9:1c:bd:22:18:a1:
         f9:b7:4b:96:0a:65:ca:39:29:03:b7:f7:b0:0a:4c:78:ce:0b:
         1e:af:a0:6b:6a:95:58:7f:e6:1a:96:dc:b7:8a:25:e5:ac:5a:
         1a:2e:2d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:32 2024 by rpki-client on console-fra.rpki-client.org