Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa
File:                     34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa (raw, json)
Hash identifier:          30x2/slNuBDlXZZOTqipbfISM99lRlHBh/BIz+02zmk=
Subject key identifier:   F8:DB:D3:95:88:F6:07:0C:A6:E7:9C:BA:37:BD:D0:A2:D8:BF:D7:CC
Certificate issuer:       /CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA
Certificate serial:       1408D5CDF83A5DFC0A83D6D474734EA11BF3AFB0
Authority key identifier: DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa
Signing time:             Wed 03 Apr 2024 18:32:34 +0000
ROA not before:           Wed 03 Apr 2024 18:27:34 +0000
ROA not after:            Wed 02 Apr 2025 18:32:34 +0000
asID:                     269471
IP address blocks:        45.187.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl
                          rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:08:d5:cd:f8:3a:5d:fc:0a:83:d6:d4:74:73:4e:a1:1b:f3:af:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA
        Validity
            Not Before: Apr  3 18:27:34 2024 GMT
            Not After : Apr  2 18:32:34 2025 GMT
        Subject: CN=F8DBD39588F6070CA6E79CBA37BDD0A2D8BFD7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:76:2f:cb:71:ac:87:33:0e:01:fd:ff:cc:54:
                    aa:a1:ad:58:04:33:62:34:28:03:42:3b:87:cd:61:
                    f4:76:bc:f0:69:fb:66:d3:4e:ad:82:77:da:bc:50:
                    05:78:8b:13:09:95:2d:ec:d1:56:27:0b:d1:43:6f:
                    c5:25:22:57:b1:c2:c2:37:0e:a9:cb:c5:04:1a:6b:
                    46:6a:2e:52:10:0e:15:27:a8:f4:3b:45:50:da:3d:
                    82:28:9f:17:c1:6d:c4:bc:f0:9e:e2:58:d4:2f:25:
                    93:f8:fd:49:eb:19:24:07:fa:51:b4:7b:19:d3:4b:
                    7d:c5:42:83:ee:8d:ef:bc:04:27:0b:3f:15:11:06:
                    c0:7a:4c:ba:35:fd:1a:20:68:a6:29:29:3c:3b:77:
                    2e:db:20:14:d3:5e:e1:01:1c:31:75:bd:b8:60:1c:
                    ed:5c:83:c8:f0:4c:e4:b8:cc:3d:61:a5:dc:9b:60:
                    24:07:d6:40:02:c8:0c:a8:dc:e2:fe:d3:85:97:66:
                    ce:65:0f:58:b8:18:5a:1c:0f:74:6b:e2:3b:b2:50:
                    09:ab:17:c0:4f:70:c4:e3:94:b7:1c:61:0f:27:7b:
                    ff:8c:c2:00:37:56:16:77:04:52:2c:57:57:91:69:
                    d3:b6:67:64:30:de:62:8e:42:4d:82:2d:84:1a:f5:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DB:D3:95:88:F6:07:0C:A6:E7:9C:BA:37:BD:D0:A2:D8:BF:D7:CC
            X509v3 Authority Key Identifier:
                keyid:DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:92:b3:ec:fb:71:34:4a:80:d7:27:6c:db:f9:c9:97:55:42:
         5a:3c:60:a5:66:7f:a2:27:ec:e0:72:93:8d:9e:64:26:69:d6:
         26:5f:a3:27:99:4f:05:fe:14:59:e7:1f:01:d2:56:ff:8e:1e:
         e1:82:44:d1:a7:50:b4:7e:bc:64:b8:e8:69:02:31:f3:64:1f:
         8a:ed:b8:b8:3a:16:59:d4:81:b7:d4:bc:cb:6c:a3:5c:3c:f1:
         87:23:24:e9:bc:63:d2:34:c8:a9:1c:1f:04:3b:6a:bc:7c:40:
         be:84:0b:ab:84:da:60:31:29:71:fb:81:85:d4:df:00:9e:d0:
         18:18:61:27:2e:d5:21:a7:4d:68:8a:1d:1d:c3:9b:73:16:2d:
         ba:23:e1:77:19:e7:50:71:ee:00:8b:0c:d2:8a:d3:61:a2:8a:
         ff:65:a1:a4:68:e0:ef:05:88:e2:6e:0b:3c:f8:39:7e:6e:ff:
         10:5b:88:89:00:f0:b6:9e:80:f1:3b:5c:cb:70:ad:54:6f:e6:
         58:48:48:d4:ef:a9:c1:22:29:9a:1a:1f:62:e2:7b:b5:cf:2d:
         ff:f8:15:dc:3a:60:5c:57:34:b5:ec:f6:e7:57:eb:8e:19:2c:
         4d:bc:49:59:67:b2:68:b3:3c:8a:b9:84:4d:05:1b:f3:94:58:
         ee:de:25:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:11 2024 by rpki-client on console-ams.rpki-client.org