Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36382e302f32332d3233203d3e20323637333633.roa
File:                     34352e3233342e36382e302f32332d3233203d3e20323637333633.roa (raw, json)
Hash identifier:          eWSZBUar6189R07jVOWpml4fRatgR2qxD44dVio4nHc=
Subject key identifier:   46:BF:45:91:60:EE:F4:52:EF:87:FA:79:69:72:3A:3B:00:7D:B7:48
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       0EB1B0471920A19326E32D5268E1ECB361AFCAD1
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36382e302f32332d3233203d3e20323637333633.roa
Signing time:             Thu 04 Apr 2024 13:53:52 +0000
ROA not before:           Thu 04 Apr 2024 13:48:52 +0000
ROA not after:            Thu 03 Apr 2025 13:53:52 +0000
asID:                     267363
IP address blocks:        45.234.68.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b1:b0:47:19:20:a1:93:26:e3:2d:52:68:e1:ec:b3:61:af:ca:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Apr  4 13:48:52 2024 GMT
            Not After : Apr  3 13:53:52 2025 GMT
        Subject: CN=46BF459160EEF452EF87FA7969723A3B007DB748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1c:2b:b4:85:26:10:f3:ad:b7:45:cb:82:70:
                    de:e0:f9:eb:31:0e:f0:f2:16:a8:a5:6f:d3:29:ef:
                    27:72:99:a4:6e:25:f9:68:48:83:2c:3b:bf:9f:0c:
                    25:a3:aa:be:55:b1:34:d3:f9:73:0a:69:8c:91:2a:
                    77:e9:2c:93:a8:e5:d0:4c:08:d9:6b:fe:51:81:c9:
                    86:78:f6:13:a1:b8:95:d8:1c:68:ed:5b:1e:5f:92:
                    57:ac:fa:25:f1:d6:30:c5:a9:62:09:f6:de:44:c0:
                    e3:2a:45:c8:75:5e:14:83:94:39:7a:fb:bb:db:e7:
                    7f:bc:34:33:09:2a:e3:1b:0a:c4:b3:5d:0a:d0:06:
                    cb:8a:ea:4a:27:3a:07:63:67:84:75:fc:0e:ab:6a:
                    a8:0d:01:80:8e:f3:9c:9e:aa:1e:6b:83:9b:c3:04:
                    5e:7c:8d:ad:ea:9c:2f:48:e6:44:26:29:61:dc:00:
                    b2:73:3f:df:a2:a9:64:96:9e:90:2e:4e:01:ed:83:
                    be:0e:3c:92:52:7f:3e:85:78:97:f2:1a:94:8c:41:
                    d1:d0:dc:8e:b4:c8:9a:b9:f2:3a:79:81:00:76:38:
                    c3:f4:a9:54:ea:d0:c9:c3:23:1b:71:ad:93:96:30:
                    96:d0:91:cd:e7:32:55:66:41:e2:58:69:ef:1e:4e:
                    b2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BF:45:91:60:EE:F4:52:EF:87:FA:79:69:72:3A:3B:00:7D:B7:48
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36382e302f32332d3233203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:68:34:55:63:3e:b9:35:2b:05:e7:85:04:b8:51:9d:da:7b:
         13:6a:5f:68:9e:3f:43:21:91:03:99:af:04:2f:30:52:b9:a9:
         d4:0b:9a:fe:c2:a5:5f:16:14:cc:0e:ff:d7:8f:ec:39:a2:37:
         62:b1:fa:cd:ca:7e:31:4c:f8:ee:0a:5c:e8:2c:26:ac:07:22:
         04:36:20:ba:71:c9:a5:43:e5:0a:23:8d:9d:c4:9c:2a:a4:56:
         da:ed:9d:8f:af:b3:c6:6b:b8:62:75:cd:a1:29:63:c0:7b:0a:
         2e:ea:e8:6a:96:a0:3d:0b:01:81:8d:63:b4:50:45:ef:dc:33:
         9b:e1:38:ab:ea:ae:ef:9c:ec:78:2e:8f:0f:2f:3d:e6:cf:af:
         56:2f:f3:12:83:af:2c:de:a5:57:ce:42:2c:58:4a:59:8e:ce:
         87:91:6f:7b:f9:7a:16:53:f3:e3:e9:b2:c7:8d:6e:99:ee:3e:
         fe:43:97:d1:f1:82:ef:d7:75:0c:d2:96:f5:2b:8e:9d:0a:86:
         e5:8d:36:be:f5:e5:1d:ef:2c:a9:52:4f:49:63:4e:7a:94:72:
         90:b3:14:91:5e:fc:55:38:82:e5:46:e8:d3:17:53:7d:7a:b7:
         ec:fd:34:54:11:9d:0c:2c:32:bd:93:97:f3:ad:ce:0d:11:be:
         ec:4b:34:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org