Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e362e302f32332d3233203d3e20323638393235.roa
File:                     34352e3137362e362e302f32332d3233203d3e20323638393235.roa (raw, json)
Hash identifier:          uDWFtVtsw+awqw5UTRScou8rmrqiG1ZpvRIbmGZLUDE=
Subject key identifier:   3C:3A:A9:BF:36:04:D8:DD:6B:BE:33:55:31:C7:8D:4A:C1:71:FB:B8
Certificate issuer:       /CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
Certificate serial:       2D1213F36BB907913765BE46FEC3759B57AEB208
Authority key identifier: B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e362e302f32332d3233203d3e20323638393235.roa
Signing time:             Thu 04 Apr 2024 07:39:08 +0000
ROA not before:           Thu 04 Apr 2024 07:34:08 +0000
ROA not after:            Thu 03 Apr 2025 07:39:08 +0000
asID:                     268925
IP address blocks:        45.176.6.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.crl
                          rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:12:13:f3:6b:b9:07:91:37:65:be:46:fe:c3:75:9b:57:ae:b2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
        Validity
            Not Before: Apr  4 07:34:08 2024 GMT
            Not After : Apr  3 07:39:08 2025 GMT
        Subject: CN=3C3AA9BF3604D8DD6BBE335531C78D4AC171FBB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:82:0f:cd:2f:19:12:18:77:33:c6:05:51:7c:
                    54:6f:49:6c:44:d4:2f:21:ab:b3:2a:dc:3e:63:a8:
                    06:39:e8:09:1a:6d:4a:2f:fd:fa:96:33:96:cc:09:
                    ea:6b:28:12:cc:94:11:fa:d7:2e:2f:a7:da:b9:63:
                    9a:97:da:fd:6e:9d:0b:41:1d:fc:dc:d8:fb:d8:01:
                    e3:4f:c0:cd:58:95:12:a3:1b:df:68:3a:f3:b1:0c:
                    e6:d0:d2:36:59:48:d3:56:00:3f:3e:da:6b:65:b3:
                    10:8d:16:30:e8:f4:ab:ed:df:e5:45:d3:b3:f7:38:
                    95:e4:05:5b:49:d7:40:02:93:8c:ef:5c:f6:6b:a8:
                    06:e3:2c:eb:b7:f6:4d:28:3f:ad:7f:e1:04:f3:72:
                    86:a3:94:a3:26:69:4c:36:89:a4:e3:5e:e3:ad:ca:
                    76:8d:a3:68:58:07:90:54:1b:cd:66:61:65:f4:cf:
                    b7:69:3a:12:7e:f5:b1:13:95:f4:d2:da:1c:0b:e3:
                    ed:80:0a:c1:f5:df:b9:8d:99:a8:d6:c9:a0:e9:fc:
                    79:db:35:e5:6e:56:03:bf:23:35:51:81:cf:fa:86:
                    f3:95:b5:51:46:dd:20:5d:14:30:75:e7:17:eb:61:
                    21:69:b4:8c:a9:27:e1:69:fe:85:42:0e:a7:01:16:
                    05:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3A:A9:BF:36:04:D8:DD:6B:BE:33:55:31:C7:8D:4A:C1:71:FB:B8
            X509v3 Authority Key Identifier:
                keyid:B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e362e302f32332d3233203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:2f:db:ce:8b:f5:77:00:6d:c7:c9:f5:fe:d7:f8:81:18:7f:
         7a:aa:2e:8d:c4:37:3b:08:bb:85:b6:97:82:d3:1a:43:dc:cb:
         be:86:e6:e4:c9:9f:11:c7:06:91:e1:a9:df:17:e3:7c:b7:3f:
         97:13:32:3b:74:42:43:31:3b:db:da:85:b9:ce:9a:83:42:ee:
         4a:44:7e:a7:2d:3c:8b:8c:0d:04:00:d7:72:e0:3a:65:96:7f:
         7f:37:9f:ec:fc:79:76:2b:d7:eb:77:5a:d3:df:58:71:91:84:
         13:2c:2a:a7:c0:c3:71:84:59:81:fa:33:85:66:12:87:a1:d7:
         fa:f9:de:3e:f9:a0:aa:7e:04:ed:d5:cf:45:1a:cf:83:bd:85:
         f3:58:e9:36:b3:7a:2b:a4:a1:13:55:64:67:1f:1d:24:9d:24:
         35:84:ef:f5:33:f6:dc:b8:86:a8:b0:e2:15:dc:7e:c2:59:f4:
         e7:0b:78:9a:0e:39:4e:84:b1:f6:e1:da:a5:73:a0:44:96:09:
         d3:11:c4:1a:51:a6:96:f1:2b:99:a2:84:df:4a:d2:13:cb:96:
         e8:39:cb:f1:28:04:17:04:7f:bc:92:ff:1f:6c:a6:9b:76:4c:
         e8:c6:76:1a:46:39:8b:63:bd:eb:52:55:13:d9:ba:ea:d2:20:
         d6:28:ea:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org