Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/1/34352e3232352e34382e302f32322d3234203d3e20323636393431.roa
File:                     34352e3232352e34382e302f32322d3234203d3e20323636393431.roa (raw, json)
Hash identifier:          zUxCzlf/rIFeFCHKyNcKkrp32ZCPYbxF48yygdlz3DE=
Subject key identifier:   72:65:99:BC:7B:A5:14:4A:32:19:C5:E0:C0:18:62:42:C2:3F:8F:0C
Certificate issuer:       /CN=C6B5E72DE2A1E6D7CA481D7F7E930DA0DA58B7E9
Certificate serial:       1EEC53B303B94A87684BB4026A197A7E34FEEA03
Authority key identifier: C6:B5:E7:2D:E2:A1:E6:D7:CA:48:1D:7F:7E:93:0D:A0:DA:58:B7:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6B5E72DE2A1E6D7CA481D7F7E930DA0DA58B7E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/1/34352e3232352e34382e302f32322d3234203d3e20323636393431.roa
Signing time:             Wed 03 Apr 2024 22:36:30 +0000
ROA not before:           Wed 03 Apr 2024 22:31:30 +0000
ROA not after:            Wed 02 Apr 2025 22:36:30 +0000
asID:                     266941
IP address blocks:        45.225.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/1/C6B5E72DE2A1E6D7CA481D7F7E930DA0DA58B7E9.crl
                          rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/1/C6B5E72DE2A1E6D7CA481D7F7E930DA0DA58B7E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6B5E72DE2A1E6D7CA481D7F7E930DA0DA58B7E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ec:53:b3:03:b9:4a:87:68:4b:b4:02:6a:19:7a:7e:34:fe:ea:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6B5E72DE2A1E6D7CA481D7F7E930DA0DA58B7E9
        Validity
            Not Before: Apr  3 22:31:30 2024 GMT
            Not After : Apr  2 22:36:30 2025 GMT
        Subject: CN=726599BC7BA5144A3219C5E0C0186242C23F8F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:3e:5f:8c:41:6c:62:ff:3f:03:e0:54:03:
                    7a:bf:bb:49:18:a0:45:92:5a:05:b5:d3:03:98:47:
                    34:e2:22:df:13:d9:cd:41:0a:59:74:80:eb:43:f3:
                    33:e1:71:18:11:a2:47:ba:2f:e2:b9:bb:3f:d5:97:
                    64:55:a4:d6:99:00:42:72:49:83:83:ae:0e:25:21:
                    5b:3b:27:38:62:aa:90:73:56:ad:d1:e6:38:2d:6e:
                    fb:b6:90:96:c4:5d:7d:38:88:27:3e:4f:4f:04:6d:
                    77:35:1c:6d:17:c2:07:2f:c4:c9:bb:6e:bb:2a:bd:
                    d7:68:f3:9d:20:d9:bb:59:f2:4d:19:7a:bb:df:e1:
                    2a:e3:25:2c:c4:aa:64:af:e5:8e:6e:9d:5e:94:fc:
                    a3:d4:3a:32:2c:ce:f7:62:24:9f:aa:1e:60:1f:7b:
                    0d:16:05:fa:f3:35:36:03:b4:b5:dd:db:a6:0c:0d:
                    fe:33:c6:7b:03:b2:bc:4b:14:a0:4a:b7:ef:49:0b:
                    d2:df:12:8b:ee:be:e6:23:83:d9:24:35:46:09:c6:
                    00:e5:6c:95:b4:bd:12:9a:e4:a3:2b:00:ee:39:e0:
                    e7:87:ba:80:01:03:27:3d:cf:31:38:8f:27:46:fe:
                    60:d0:1b:27:e4:b2:b5:e3:df:e2:03:9c:ba:a1:75:
                    ed:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:65:99:BC:7B:A5:14:4A:32:19:C5:E0:C0:18:62:42:C2:3F:8F:0C
            X509v3 Authority Key Identifier:
                keyid:C6:B5:E7:2D:E2:A1:E6:D7:CA:48:1D:7F:7E:93:0D:A0:DA:58:B7:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/1/C6B5E72DE2A1E6D7CA481D7F7E930DA0DA58B7E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6B5E72DE2A1E6D7CA481D7F7E930DA0DA58B7E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/1/34352e3232352e34382e302f32322d3234203d3e20323636393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:97:cc:a7:d2:61:13:b7:7f:16:2a:30:0d:44:28:0b:0a:4d:
         63:5a:6d:8f:c2:44:8b:6d:9c:ed:2e:60:d7:0e:14:52:38:f9:
         91:3b:92:f8:bf:2f:bc:be:32:d1:cb:69:2e:91:75:f9:78:d5:
         4d:d9:48:56:90:e7:ca:79:d6:70:cf:3e:97:f9:5b:69:db:19:
         b2:67:b6:9f:c7:bd:d6:83:ac:ac:fb:08:22:3a:45:33:f6:f0:
         d8:31:5c:04:f6:ee:0f:e5:c7:5e:65:ac:21:51:84:b0:b0:f7:
         e2:00:99:e5:56:37:23:f3:f3:82:5c:fe:0d:89:6b:19:ec:41:
         8d:fe:1d:4d:64:d6:e5:20:e8:06:3a:b6:05:26:c0:e9:a1:da:
         46:f4:dc:64:db:67:0a:8b:72:b3:e2:ea:b5:db:bb:86:25:19:
         65:df:88:8c:a0:09:f7:90:b6:83:da:5b:69:2d:a4:e1:79:af:
         83:a9:13:73:74:77:69:b6:5b:cb:dd:1c:0b:28:14:c9:cf:5e:
         6b:c3:d7:8c:6b:50:f1:c2:14:64:b8:b6:ed:ae:f0:25:56:22:
         dc:8c:55:3b:76:00:fc:ce:92:2b:97:38:98:99:36:ae:32:c4:
         cd:ce:d8:15:74:96:a4:5f:8e:98:6d:00:2b:01:ee:8a:43:46:
         32:7a:4a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org