Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/34352e3232362e3139362e302f32322d3234203d3e20323636393738.roa
File:                     34352e3232362e3139362e302f32322d3234203d3e20323636393738.roa (raw, json)
Hash identifier:          Y4rJXEeE5LrK18Dtnmhyr1CHYHXItoTJGurD+zaTDw0=
Subject key identifier:   CE:AB:02:CE:2F:BB:EF:C0:78:3E:5F:44:FF:E4:F1:86:1B:4D:52:51
Certificate issuer:       /CN=F23C7711DC6DC3725EC79832C79E956E6DF102FE
Certificate serial:       2E9DF23296BC46F46C0A42DFBBD18AEB1892A879
Authority key identifier: F2:3C:77:11:DC:6D:C3:72:5E:C7:98:32:C7:9E:95:6E:6D:F1:02:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F23C7711DC6DC3725EC79832C79E956E6DF102FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/34352e3232362e3139362e302f32322d3234203d3e20323636393738.roa
Signing time:             Sat 26 Oct 2024 22:01:45 +0000
ROA not before:           Sat 26 Oct 2024 21:56:45 +0000
ROA not after:            Sat 25 Oct 2025 22:01:45 +0000
asID:                     266978
IP address blocks:        45.226.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/F23C7711DC6DC3725EC79832C79E956E6DF102FE.crl
                          rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/F23C7711DC6DC3725EC79832C79E956E6DF102FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F23C7711DC6DC3725EC79832C79E956E6DF102FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9d:f2:32:96:bc:46:f4:6c:0a:42:df:bb:d1:8a:eb:18:92:a8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F23C7711DC6DC3725EC79832C79E956E6DF102FE
        Validity
            Not Before: Oct 26 21:56:45 2024 GMT
            Not After : Oct 25 22:01:45 2025 GMT
        Subject: CN=CEAB02CE2FBBEFC0783E5F44FFE4F1861B4D5251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:03:05:64:e9:77:11:65:e2:74:80:30:0b:8c:
                    7b:7b:a4:f1:6c:b1:c7:02:98:ef:77:99:bc:d2:93:
                    21:06:8a:dd:5d:46:ae:2b:f6:f6:06:30:6f:52:11:
                    b5:c4:a1:05:de:be:1f:63:aa:ed:ea:3c:51:ec:05:
                    9d:58:42:a5:18:df:05:35:10:4d:b4:67:a8:c0:25:
                    74:56:d1:2d:cd:ce:82:6c:b6:a2:a5:b1:01:c7:34:
                    69:89:ff:76:7c:ab:a5:6e:6c:23:f4:a7:93:14:aa:
                    2f:d5:db:4e:04:7a:24:7c:22:ce:6d:0c:d0:ff:84:
                    23:a5:e5:d2:36:51:9c:52:15:34:6e:4d:be:7f:c6:
                    8a:4e:43:16:87:a1:6f:2a:6c:f1:64:a0:8d:1b:a8:
                    d2:f7:c2:41:d8:a4:68:8a:c7:2f:f6:df:83:be:22:
                    78:33:e0:18:1b:a5:b9:cc:05:a4:c6:e3:4a:66:08:
                    56:cb:74:b9:ce:23:85:97:6d:b8:d8:ff:b1:fc:2a:
                    ac:44:dc:34:f3:a2:0e:8b:fa:96:79:98:3f:b8:3f:
                    95:87:71:24:65:43:ad:f2:c8:14:56:92:ab:c9:08:
                    47:21:41:ef:9d:e4:d5:c2:bc:c8:8e:3a:85:50:d1:
                    28:7f:9a:7b:99:fa:9d:b5:33:4e:37:c2:85:2b:67:
                    77:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AB:02:CE:2F:BB:EF:C0:78:3E:5F:44:FF:E4:F1:86:1B:4D:52:51
            X509v3 Authority Key Identifier:
                keyid:F2:3C:77:11:DC:6D:C3:72:5E:C7:98:32:C7:9E:95:6E:6D:F1:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/F23C7711DC6DC3725EC79832C79E956E6DF102FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F23C7711DC6DC3725EC79832C79E956E6DF102FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/34352e3232362e3139362e302f32322d3234203d3e20323636393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:fe:88:8f:25:54:c3:f7:e8:1f:9e:01:99:30:5a:f0:ab:51:
         25:f2:06:7a:cc:b6:e3:b4:7a:cd:95:b1:f6:f0:65:eb:2d:2f:
         c6:29:4a:af:1c:55:54:7b:e2:03:1e:02:21:4c:bd:fc:d5:25:
         f5:22:2a:ac:87:ad:64:e5:4c:ce:a6:b2:a1:1f:02:16:85:7a:
         db:72:7a:07:2b:3a:d4:df:c1:a0:c2:da:05:60:3c:9b:16:85:
         e5:8a:d2:d8:72:18:0d:fd:d0:6b:a1:0f:90:7b:09:fd:24:61:
         31:a2:4e:a8:2b:31:5d:31:e9:fe:be:6d:1c:3a:52:99:46:a3:
         59:3e:e8:b5:25:af:3d:0a:8b:db:bf:72:38:3f:dc:2f:1d:03:
         ed:02:7a:6d:78:b9:18:74:11:13:e1:b5:3b:4c:90:48:9b:e8:
         f3:00:df:94:49:d3:42:6a:28:ff:09:6f:ea:ec:a8:36:ad:d0:
         21:e0:45:d3:77:ae:f9:bd:ea:68:5d:67:8d:85:4b:b3:32:6a:
         7b:11:ad:3c:f1:c7:0d:f3:1a:d0:51:16:b5:ac:0c:b9:64:c3:
         06:06:f7:fe:ed:93:de:95:db:b0:75:c5:82:19:68:5d:6b:ca:
         06:8e:25:05:ce:20:c4:43:e3:d9:12:96:c8:d4:95:db:a3:43:
         0a:0b:05:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:56 2024 by rpki-client on console-fra.rpki-client.org