Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/34352e3138382e3135322e302f32322d3234203d3e203631393137.roa
File:                     34352e3138382e3135322e302f32322d3234203d3e203631393137.roa (raw, json)
Hash identifier:          X8HIPM4xGd8rmikptfcCjQfvQCjWb64Ep6a56HEFu2E=
Subject key identifier:   43:49:1A:37:F9:CF:E3:3B:E8:F3:D7:58:2F:2A:3B:8E:A6:F1:13:55
Certificate issuer:       /CN=2B9866B6675820B4CEA1CD085C75C53F640B6695
Certificate serial:       613124C3E4DFA7BA781AC33718A30393552AD2A3
Authority key identifier: 2B:98:66:B6:67:58:20:B4:CE:A1:CD:08:5C:75:C5:3F:64:0B:66:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9866B6675820B4CEA1CD085C75C53F640B6695.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/34352e3138382e3135322e302f32322d3234203d3e203631393137.roa
Signing time:             Thu 29 Aug 2024 17:21:15 +0000
ROA not before:           Thu 29 Aug 2024 17:16:15 +0000
ROA not after:            Thu 28 Aug 2025 17:21:15 +0000
asID:                     61917
IP address blocks:        45.188.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/2B9866B6675820B4CEA1CD085C75C53F640B6695.crl
                          rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/2B9866B6675820B4CEA1CD085C75C53F640B6695.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9866B6675820B4CEA1CD085C75C53F640B6695.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:31:24:c3:e4:df:a7:ba:78:1a:c3:37:18:a3:03:93:55:2a:d2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B9866B6675820B4CEA1CD085C75C53F640B6695
        Validity
            Not Before: Aug 29 17:16:15 2024 GMT
            Not After : Aug 28 17:21:15 2025 GMT
        Subject: CN=43491A37F9CFE33BE8F3D7582F2A3B8EA6F11355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:ef:e4:f9:00:81:11:23:11:27:db:1a:03:
                    82:ce:7b:4d:04:80:10:5d:f1:ef:f0:9b:30:05:99:
                    76:48:38:6e:ae:a9:f2:16:c8:77:12:ca:38:4d:ec:
                    72:51:11:63:84:68:2b:c8:01:0f:24:a6:6f:6d:fb:
                    5c:40:b5:37:d2:66:57:d7:79:e0:3f:23:cb:7c:10:
                    07:b4:ff:27:5e:de:14:a6:3d:ca:e7:17:1b:0a:0a:
                    dc:7f:14:60:b8:fd:d0:68:d1:62:9f:53:e4:6a:f2:
                    08:97:64:f7:f0:4a:8a:ac:72:57:9e:f9:05:b6:48:
                    ab:29:74:c8:01:e5:5c:cd:22:7e:e9:be:12:0e:2d:
                    a5:9d:a8:7e:3a:76:a6:89:1a:73:f0:4f:71:36:e6:
                    7d:14:14:e8:93:bd:65:fa:0d:16:40:c2:92:77:fc:
                    fd:05:55:c2:1a:3c:5e:fa:cb:74:c4:5c:84:e0:22:
                    5a:ef:bd:51:b0:ba:5e:d4:9e:68:77:eb:4b:05:5f:
                    22:b5:b7:52:ca:2b:98:19:ff:eb:c9:1a:36:0a:04:
                    2f:b9:53:39:e4:eb:48:99:28:16:e0:23:a6:86:0f:
                    5f:28:bb:ea:5b:ab:85:d1:84:a7:a7:45:8f:27:2b:
                    95:06:bb:5b:9b:75:ca:ae:da:85:33:6c:06:ce:33:
                    5a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:49:1A:37:F9:CF:E3:3B:E8:F3:D7:58:2F:2A:3B:8E:A6:F1:13:55
            X509v3 Authority Key Identifier:
                keyid:2B:98:66:B6:67:58:20:B4:CE:A1:CD:08:5C:75:C5:3F:64:0B:66:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/2B9866B6675820B4CEA1CD085C75C53F640B6695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9866B6675820B4CEA1CD085C75C53F640B6695.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/34352e3138382e3135322e302f32322d3234203d3e203631393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:4c:38:96:9f:0c:16:c5:54:41:c9:dd:41:ed:17:55:e2:a6:
         64:57:fe:65:53:14:9c:94:81:54:a3:e8:60:50:55:1c:2b:5c:
         72:c3:17:eb:76:ea:b8:04:2c:d5:5e:18:3d:b3:16:4c:64:a6:
         0e:0a:3e:c8:d2:44:7a:37:95:07:73:cd:44:8f:d7:21:10:2e:
         df:e8:05:98:84:59:a1:bd:e1:d9:49:63:52:43:3f:92:c6:44:
         60:3c:e4:dd:b9:0e:11:18:57:96:b6:c9:67:78:a7:86:fc:ea:
         d1:07:11:aa:ad:0d:ee:e5:f5:7d:d0:ba:7b:df:84:d6:81:d5:
         2e:b6:48:df:66:04:9a:36:c6:15:d8:ee:63:09:ed:a2:93:8c:
         9a:63:62:1e:32:32:94:69:ae:37:13:e2:4e:2a:6a:7d:fe:01:
         39:26:5d:08:46:0e:4b:16:71:fb:68:7d:b2:1b:2b:fb:4a:db:
         5c:ce:ba:3f:f5:29:4c:3f:55:e2:8d:67:bb:30:b5:44:ea:b8:
         26:c7:34:24:09:fc:2c:b9:bb:7c:10:27:fc:75:91:7b:47:3a:
         ec:e0:6f:d6:53:c2:9d:7a:c5:11:cf:21:8f:36:7b:a4:9b:74:
         cd:1b:23:19:36:fa:04:85:75:d0:8f:65:18:a8:be:9a:dd:02:
         93:1a:c5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:33 2024 by rpki-client on console-ams.rpki-client.org