Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa
File:                     34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa (raw, json)
Hash identifier:          Y9qphqLnZFf8LXiTWveisRC/af4mMwwn/uPz6dMV0GU=
Subject key identifier:   AD:EA:3A:8D:42:54:53:ED:F3:DF:F5:2E:6E:FA:81:60:ED:60:F0:23
Certificate issuer:       /CN=1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC
Certificate serial:       1F8FF9734147B3805B8BAEC3750BE5051FF9702D
Authority key identifier: 1B:17:47:FF:CB:5B:39:7A:C6:6D:00:BF:76:A4:03:AA:7D:0B:2D:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa
Signing time:             Wed 03 Apr 2024 23:44:19 +0000
ROA not before:           Wed 03 Apr 2024 23:39:19 +0000
ROA not after:            Wed 02 Apr 2025 23:44:19 +0000
asID:                     268112
IP address blocks:        45.169.120.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.crl
                          rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8f:f9:73:41:47:b3:80:5b:8b:ae:c3:75:0b:e5:05:1f:f9:70:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC
        Validity
            Not Before: Apr  3 23:39:19 2024 GMT
            Not After : Apr  2 23:44:19 2025 GMT
        Subject: CN=ADEA3A8D425453EDF3DFF52E6EFA8160ED60F023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8e:47:00:c8:a8:27:00:3e:6d:1c:c5:70:6a:
                    ed:4f:60:9f:27:d7:09:76:95:dc:d5:34:ce:58:26:
                    c8:4e:55:86:6d:31:a7:ab:01:d1:09:c9:55:73:b2:
                    cf:f5:cb:46:f0:c0:69:9e:9a:c6:83:af:a6:b6:c3:
                    f3:8c:d5:56:66:f9:d0:8d:7e:f8:f6:83:39:4f:76:
                    97:81:ee:eb:60:c7:c5:75:06:69:57:7c:b2:da:4b:
                    c7:07:75:90:e5:68:4c:29:e8:a6:00:b8:88:5b:14:
                    49:8a:04:c5:1d:be:d9:8a:bb:00:b5:28:6d:0b:f8:
                    3c:00:ec:5c:51:21:ae:fc:19:81:e3:ff:ad:00:86:
                    3e:05:2e:32:3c:90:38:2c:f6:b0:11:e6:ab:b1:10:
                    8a:6a:11:0f:79:bf:3c:7c:a2:2a:a7:6e:c4:1d:54:
                    ab:89:69:6b:28:f3:e0:9a:56:27:3f:07:73:47:82:
                    36:ba:05:dd:4a:1c:f3:47:a9:35:9b:c8:af:e7:60:
                    cf:04:44:de:37:cf:dd:de:96:bd:e0:20:ae:ce:33:
                    36:ad:e8:61:55:57:d9:cf:ca:b4:a6:45:e1:e3:df:
                    83:5b:ba:eb:2e:2e:c6:17:b7:aa:c2:66:6a:57:68:
                    e3:2a:d7:66:3c:f9:82:20:63:e2:10:54:f4:c9:23:
                    1a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EA:3A:8D:42:54:53:ED:F3:DF:F5:2E:6E:FA:81:60:ED:60:F0:23
            X509v3 Authority Key Identifier:
                keyid:1B:17:47:FF:CB:5B:39:7A:C6:6D:00:BF:76:A4:03:AA:7D:0B:2D:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:f3:34:2f:56:60:9b:7b:92:56:9f:fa:b0:81:04:53:a1:c5:
         1d:2b:8f:05:29:95:89:78:66:d5:ba:fb:03:fb:68:5a:4a:83:
         9d:48:3e:58:27:fb:db:61:13:ca:87:e0:15:b8:cf:cc:91:0b:
         68:5f:fa:b6:32:ac:7f:03:bb:ff:ca:58:6c:b9:9a:b9:74:59:
         9d:85:4e:39:c9:e6:d7:eb:0a:6d:7c:2e:90:12:5b:f9:61:76:
         ec:67:70:44:c3:8b:c9:fc:b7:f0:76:3f:2b:90:67:bc:0c:2a:
         13:00:c5:d8:e4:96:14:78:aa:13:44:49:54:65:6b:45:d4:91:
         3e:55:77:68:3f:f5:65:48:67:df:a3:4d:b2:08:3c:ab:fa:d8:
         dd:a0:e4:8c:be:a1:92:e2:51:f8:38:2c:d7:bd:9c:c6:33:b6:
         ce:22:e3:25:47:8e:3e:e5:31:00:56:60:27:f4:96:02:e7:84:
         31:f2:5c:ff:93:dc:1b:f1:25:9e:19:95:39:1a:92:26:e4:c7:
         ae:1e:0c:25:80:27:03:96:33:58:cd:62:bd:58:53:fb:81:d4:
         b5:cf:6f:aa:49:1d:b4:a4:3d:9a:91:39:34:3c:23:fa:f5:44:
         49:d9:76:e7:77:0f:26:5e:75:34:59:74:49:5c:d7:61:e6:e7:
         cd:9f:3b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:08 2024 by rpki-client on console-fra.rpki-client.org