Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32322d3332203d3e20323639343637.roa
File:                     34352e3138372e3134302e302f32322d3332203d3e20323639343637.roa (raw, json)
Hash identifier:          pjcdvt+FgUbeo3s8sUzyqHX2RcXf+2nCmDMQYi8Hd78=
Subject key identifier:   46:EF:3E:73:B9:D9:CA:30:58:7D:F8:02:D1:1D:E1:B7:83:98:1D:53
Certificate issuer:       /CN=04AD1F05D68B9B203EF5342540FC9B754E8F2B50
Certificate serial:       71AAC48AF1180B53B385D75643A2F695337A97BD
Authority key identifier: 04:AD:1F:05:D6:8B:9B:20:3E:F5:34:25:40:FC:9B:75:4E:8F:2B:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32322d3332203d3e20323639343637.roa
Signing time:             Fri 19 Jul 2024 13:19:16 +0000
ROA not before:           Fri 19 Jul 2024 13:14:16 +0000
ROA not after:            Fri 18 Jul 2025 13:19:16 +0000
asID:                     269467
IP address blocks:        45.187.140.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.crl
                          rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:aa:c4:8a:f1:18:0b:53:b3:85:d7:56:43:a2:f6:95:33:7a:97:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04AD1F05D68B9B203EF5342540FC9B754E8F2B50
        Validity
            Not Before: Jul 19 13:14:16 2024 GMT
            Not After : Jul 18 13:19:16 2025 GMT
        Subject: CN=46EF3E73B9D9CA30587DF802D11DE1B783981D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:11:67:6c:a2:64:f7:92:34:46:67:4a:2c:
                    83:61:53:81:fb:25:04:31:f9:1d:d2:4d:aa:bc:95:
                    1a:29:5a:28:86:61:01:c2:d5:46:6e:51:6b:fa:a9:
                    24:b9:f9:1a:d5:34:22:bc:55:ec:88:51:53:33:3b:
                    1d:7c:72:eb:0e:19:49:97:bb:c9:d1:1c:33:92:5f:
                    da:fe:5b:b5:bd:ab:4d:de:88:ed:cb:04:4c:58:d5:
                    22:a1:26:dd:46:0d:12:12:9b:1b:42:44:49:cc:d8:
                    8d:31:98:1b:8e:cc:f6:6a:02:e7:b0:ce:59:01:77:
                    4b:b0:a0:b0:99:d1:45:39:4f:29:56:3e:4e:6b:ac:
                    ef:99:90:0a:8b:36:1c:a2:ed:ad:45:86:92:04:9b:
                    f8:0e:67:cc:6c:5c:c0:21:dc:f8:2e:fe:91:9f:1b:
                    d6:55:fc:e6:f6:d8:79:21:db:00:36:93:40:67:b9:
                    fd:33:bd:7d:6e:f6:8f:42:b2:07:d7:0c:63:8e:7c:
                    00:8f:55:ae:03:6f:e6:22:e6:13:f1:41:c5:19:69:
                    23:de:cc:c8:9d:90:47:b6:e4:c5:a2:b6:4b:2c:8a:
                    40:a1:57:48:d6:6b:67:00:02:0a:09:78:2d:cc:16:
                    38:c2:81:a4:ba:1f:19:8f:8b:04:40:b3:1d:38:94:
                    94:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EF:3E:73:B9:D9:CA:30:58:7D:F8:02:D1:1D:E1:B7:83:98:1D:53
            X509v3 Authority Key Identifier:
                keyid:04:AD:1F:05:D6:8B:9B:20:3E:F5:34:25:40:FC:9B:75:4E:8F:2B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32322d3332203d3e20323639343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:87:08:fb:4a:b2:ba:00:ce:85:0c:d9:cc:2a:b2:12:45:5e:
         02:3a:24:07:5a:56:e5:2e:a2:92:62:17:1c:54:ef:82:80:81:
         b4:4b:f4:4b:d2:c0:df:c0:68:e7:9b:df:2b:29:50:83:3c:b1:
         36:79:8d:6d:d2:24:24:04:5c:f5:83:43:2e:9f:c1:71:03:f8:
         4c:4f:fe:e1:5c:fd:9f:75:be:b5:01:a4:3a:49:44:75:aa:b9:
         fa:dc:d1:18:10:53:b5:25:27:a3:d9:2f:5f:67:cb:69:9a:7c:
         a4:a1:ca:d8:e9:3a:40:ca:4d:bd:43:00:c0:77:80:86:2e:ec:
         52:59:0b:3a:4e:55:b7:37:70:75:f5:9b:b2:95:84:99:52:76:
         61:1d:2e:55:35:b4:87:fd:64:4c:f8:45:9c:9f:f5:2b:e4:61:
         10:1c:2c:5e:85:b9:d4:f2:ba:89:ee:58:52:f2:73:1f:32:3e:
         68:1a:fd:f3:a0:06:af:da:f9:7f:5a:61:7a:e3:97:30:bb:7d:
         09:76:73:8d:56:d1:90:b4:f0:37:f5:33:81:62:15:f2:e0:15:
         c2:78:39:de:95:76:57:03:85:35:47:52:9c:0b:42:a2:e4:02:
         25:a0:82:78:de:b7:0f:92:94:4b:2c:c6:23:3d:d8:02:33:11:
         25:3c:25:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:39 2024 by rpki-client on console-fra.rpki-client.org