Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230322e302f32342d3234203d3e20323638313732.roa
File:                     34352e3137302e3230322e302f32342d3234203d3e20323638313732.roa (raw, json)
Hash identifier:          l40yEnuMmamDKtIO4JRQRPDFluwtUkbDbpxiwsjlB28=
Subject key identifier:   03:12:F4:53:78:AE:C7:6D:A3:E6:1A:7E:D1:DA:C0:BB:36:8A:E8:32
Certificate issuer:       /CN=3D90D603749AF57040F7092DF1F2D266672E47E7
Certificate serial:       7950D6B904FC6BEA19A41D6D10065E7786BAE671
Authority key identifier: 3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230322e302f32342d3234203d3e20323638313732.roa
Signing time:             Fri 03 May 2024 15:00:47 +0000
ROA not before:           Fri 03 May 2024 14:55:47 +0000
ROA not after:            Fri 02 May 2025 15:00:47 +0000
asID:                     268172
IP address blocks:        45.170.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl
                          rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:50:d6:b9:04:fc:6b:ea:19:a4:1d:6d:10:06:5e:77:86:ba:e6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D90D603749AF57040F7092DF1F2D266672E47E7
        Validity
            Not Before: May  3 14:55:47 2024 GMT
            Not After : May  2 15:00:47 2025 GMT
        Subject: CN=0312F45378AEC76DA3E61A7ED1DAC0BB368AE832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b9:4d:8c:ee:18:94:8e:b4:d4:5e:bb:40:87:
                    1d:bd:6c:40:38:15:d5:c1:0c:81:f2:3e:3d:12:5c:
                    ad:13:92:d3:c7:16:32:50:b7:31:be:0e:c0:1f:fa:
                    4e:4d:d8:a3:28:5a:c3:93:45:b2:81:65:01:fc:69:
                    74:70:fe:83:ad:8d:80:1f:3f:bb:da:df:8b:ef:58:
                    86:67:d1:4f:6c:ff:ed:5d:67:eb:9a:e6:6f:4d:83:
                    0d:87:03:e3:fa:8c:39:e0:52:e9:b6:9c:a0:8b:52:
                    6a:28:32:b9:92:1d:9e:a2:79:4e:c0:ae:92:64:ec:
                    47:74:3a:2c:55:1a:b0:85:61:35:80:42:ba:ad:bb:
                    00:dc:48:28:2c:be:8c:06:52:db:30:e3:02:64:88:
                    ca:50:53:aa:4d:84:82:e5:f0:ff:25:67:b2:a3:1f:
                    11:09:56:37:fa:a0:6e:0f:67:59:fe:88:e0:7c:5f:
                    66:9d:74:c8:db:1a:4d:f5:9f:23:3e:44:35:91:70:
                    e2:4c:2e:e1:25:71:4b:5a:24:62:8a:99:f4:1d:0d:
                    6d:e7:67:24:89:44:ce:7d:49:af:1c:36:ae:b9:a7:
                    2b:5c:27:40:e0:ef:50:f6:06:98:71:fd:38:b5:e8:
                    30:33:b8:fb:cc:a5:9e:8b:b8:14:ff:e1:a2:25:a1:
                    0d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:12:F4:53:78:AE:C7:6D:A3:E6:1A:7E:D1:DA:C0:BB:36:8A:E8:32
            X509v3 Authority Key Identifier:
                keyid:3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230322e302f32342d3234203d3e20323638313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:24:5c:31:17:0b:df:ca:e4:08:5b:ab:de:e6:ef:c5:be:df:
         6e:63:5c:2a:25:5e:bb:1c:0c:b7:07:f3:eb:3d:8f:b8:53:2f:
         3a:0f:3b:e5:81:84:b5:a2:a4:d7:52:2f:e1:d1:3d:ca:d5:69:
         f7:b4:01:8a:29:31:00:31:53:62:bf:a7:d6:f0:33:a3:7f:28:
         a4:e7:9c:25:58:ae:9a:74:b5:27:cf:30:69:a0:41:d8:6a:3c:
         09:d4:81:b1:61:0f:e0:ce:3b:10:3f:d3:3e:b5:16:21:23:cd:
         49:28:6e:53:7f:1d:cb:ae:0c:29:3c:53:ac:17:e7:87:1c:01:
         71:3e:00:dd:8d:8f:30:90:eb:0f:0a:a4:24:64:46:bf:98:94:
         ca:09:b1:da:0e:65:12:cc:59:64:cc:b7:84:08:9c:e9:f3:cd:
         59:a0:19:71:63:24:bf:39:af:6e:ef:28:9d:43:db:74:fc:1c:
         8a:41:b8:45:8d:32:ce:86:57:f4:fb:c0:b0:c3:33:f4:c1:d1:
         eb:77:1e:0d:2f:2c:99:98:33:fa:b9:f7:60:c6:50:a6:b3:fc:
         17:e9:a2:51:e1:23:30:fb:6d:7a:1d:f0:a0:52:cf:af:c7:3c:
         bc:d6:84:9c:48:2d:3a:91:0e:02:79:d2:4e:24:18:21:d3:93:
         ea:60:8b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:07 2024 by rpki-client on console-ams.rpki-client.org