Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa
File:                     34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa (raw, json)
Hash identifier:          3q0xJ9CT5cLJ7S3UOlS4bGiefRPRVnKSQjM5D6bBJAQ=
Subject key identifier:   48:84:7A:FB:CC:F0:EA:37:8E:F7:BA:E1:C1:E9:72:42:67:ED:CB:69
Certificate issuer:       /CN=620FC0DB62F1480AC8CF9B22F3885A9A4268099E
Certificate serial:       4C7E7B773E6D715D27C95170FC972E0A6CFAEE3D
Authority key identifier: 62:0F:C0:DB:62:F1:48:0A:C8:CF:9B:22:F3:88:5A:9A:42:68:09:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa
Signing time:             Thu 04 Apr 2024 13:22:05 +0000
ROA not before:           Thu 04 Apr 2024 13:17:05 +0000
ROA not after:            Thu 03 Apr 2025 13:22:05 +0000
asID:                     268160
IP address blocks:        45.170.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.crl
                          rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7e:7b:77:3e:6d:71:5d:27:c9:51:70:fc:97:2e:0a:6c:fa:ee:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620FC0DB62F1480AC8CF9B22F3885A9A4268099E
        Validity
            Not Before: Apr  4 13:17:05 2024 GMT
            Not After : Apr  3 13:22:05 2025 GMT
        Subject: CN=48847AFBCCF0EA378EF7BAE1C1E9724267EDCB69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:16:c1:e1:d4:73:2e:cc:ad:f4:f7:3e:97:ab:
                    1e:05:c3:cf:ed:6a:57:6f:52:d4:68:c6:db:02:0e:
                    56:93:16:19:79:fb:03:93:e0:89:ad:ad:c1:a5:8b:
                    cd:cb:dd:c0:8a:af:dd:fa:cd:f9:a6:5f:79:50:7d:
                    d5:6d:0e:c2:67:74:91:d0:ee:6a:e6:e8:ed:18:20:
                    a0:7c:14:ee:60:a0:43:d3:53:d2:2a:45:6f:96:aa:
                    28:57:a9:3c:17:12:58:d0:d4:49:c8:d9:af:9e:25:
                    2d:d2:96:a4:10:62:dc:41:6f:07:b9:96:d5:ee:fa:
                    55:a9:82:ee:0f:62:a3:fa:b0:08:1c:2a:5e:d5:d9:
                    ce:9b:6e:f5:fd:1b:ae:d4:f2:1b:71:5c:3d:a1:5b:
                    83:a3:23:6d:4b:2f:12:e2:c8:19:a4:0a:f0:a5:8c:
                    25:de:24:5b:b8:33:dc:ba:ff:b8:36:b4:fd:9c:78:
                    b7:0c:03:80:18:42:9e:d5:a0:c1:1d:a0:a8:32:c1:
                    10:f7:2e:83:1f:dd:85:e0:64:c1:c0:ff:bc:9b:57:
                    23:cc:d6:1a:46:a0:87:04:3b:77:b3:75:77:57:43:
                    2a:a1:b8:18:d2:3d:f7:d0:e4:2a:e1:33:b5:f3:44:
                    6b:66:3f:2a:ad:fa:4c:18:d5:76:4a:a9:0e:58:c6:
                    15:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:84:7A:FB:CC:F0:EA:37:8E:F7:BA:E1:C1:E9:72:42:67:ED:CB:69
            X509v3 Authority Key Identifier:
                keyid:62:0F:C0:DB:62:F1:48:0A:C8:CF:9B:22:F3:88:5A:9A:42:68:09:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:91:4e:c6:a0:d2:40:63:59:06:e5:ea:f8:33:a0:e0:cf:cf:
         35:a6:a8:9a:91:fe:50:df:26:62:75:59:80:60:89:ac:64:30:
         d0:6b:75:80:8c:1a:68:b8:81:f3:e0:f9:1e:00:4b:c1:fa:f6:
         71:1e:a5:62:c0:f3:b8:2e:af:c2:ea:4e:58:16:d8:b9:2b:a8:
         1c:52:3e:e0:41:28:d2:b2:4b:ac:78:f8:f3:81:7f:6c:88:6f:
         77:aa:a4:14:1c:7e:e6:d4:fa:40:bc:3e:bb:54:40:b0:7d:20:
         ab:17:6e:31:88:ed:51:f6:b0:b8:e4:97:50:07:1d:c4:18:81:
         95:2c:fe:ec:ca:6e:36:9b:df:1f:a1:9c:57:36:61:82:ef:99:
         dc:9e:35:83:96:1c:62:34:29:a1:dc:ba:eb:3b:af:25:69:19:
         f1:6a:ab:08:71:c1:2a:67:1d:fd:1f:37:1d:f2:e5:8a:5c:7c:
         6d:26:35:b3:d4:16:66:af:bd:f9:6f:73:55:37:0d:be:c4:d1:
         aa:fb:01:27:6b:7a:11:5b:1c:2d:51:2a:f0:aa:76:0d:59:93:
         ca:24:34:ac:c2:6c:09:b7:21:f4:89:de:b2:44:58:8e:44:d2:
         9f:50:0c:c2:d6:45:15:b1:e3:3e:d6:2f:ac:7d:c6:83:6a:1a:
         52:b0:f7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:16 2024 by rpki-client on console-ams.rpki-client.org