Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36382e302f32342d3234203d3e20323637333633.roa
File:                     34352e3233342e36382e302f32342d3234203d3e20323637333633.roa (raw, json)
Hash identifier:          AH69a6gcnTE+YMl/6y+1hzgl5Z2xRN0YBUej45EoNCc=
Subject key identifier:   94:C4:44:E5:DD:56:49:77:20:7D:94:54:73:EB:E0:AA:75:C6:C4:15
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       710DF59B1422054F83DABD4E128B4625EF125F25
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36382e302f32342d3234203d3e20323637333633.roa
Signing time:             Thu 04 Apr 2024 13:53:52 +0000
ROA not before:           Thu 04 Apr 2024 13:48:52 +0000
ROA not after:            Thu 03 Apr 2025 13:53:52 +0000
asID:                     267363
IP address blocks:        45.234.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0d:f5:9b:14:22:05:4f:83:da:bd:4e:12:8b:46:25:ef:12:5f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Apr  4 13:48:52 2024 GMT
            Not After : Apr  3 13:53:52 2025 GMT
        Subject: CN=94C444E5DD564977207D945473EBE0AA75C6C415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:63:5b:73:19:eb:d1:7d:5e:2a:79:a1:b0:
                    ea:6a:c0:11:a5:56:c0:60:9b:94:0d:ae:d9:04:48:
                    35:29:f1:10:26:b9:1e:aa:b1:69:44:c2:a0:6d:f7:
                    d9:4f:63:b9:ec:4c:28:74:3f:90:8a:58:ff:24:6e:
                    8e:91:14:f6:a0:0c:83:59:67:68:f7:dd:45:89:9c:
                    25:71:74:b7:7a:e0:d9:ca:82:81:4e:45:2b:74:6f:
                    f1:fe:81:e9:2d:3a:47:5f:d3:ad:2e:1a:9d:d6:a3:
                    ad:08:53:3b:0e:d5:b6:bc:c8:29:19:1a:cd:b6:ae:
                    4a:73:e5:6b:ad:3b:c1:ea:38:1e:aa:50:23:d5:77:
                    b8:7f:55:cf:38:7c:42:ea:c9:c5:66:b4:e7:99:fa:
                    44:60:1e:cb:81:91:49:23:9f:09:01:49:71:d5:51:
                    03:1c:1b:fe:62:fa:3c:3b:1f:5e:34:9c:11:65:4f:
                    26:29:11:64:1e:56:4b:1b:62:70:7f:c1:38:64:25:
                    81:29:51:65:a7:bc:34:32:73:34:c6:88:69:91:80:
                    22:a3:1d:c7:3f:00:c8:84:a5:b4:fe:f9:cf:b4:9e:
                    e5:f0:bb:2f:7a:64:84:38:ef:2f:cb:92:48:f9:37:
                    4b:31:c0:d7:ab:56:85:64:61:64:7a:e9:af:e4:dc:
                    b5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C4:44:E5:DD:56:49:77:20:7D:94:54:73:EB:E0:AA:75:C6:C4:15
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36382e302f32342d3234203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:c1:cf:53:0e:c0:a6:3b:64:9d:6e:a6:37:b3:a9:32:74:c6:
         f3:e1:af:71:90:46:be:de:9c:8e:f9:ba:63:12:e6:63:53:bb:
         83:cf:19:fb:63:28:69:76:8f:d9:c9:21:b2:f6:07:7a:fd:b5:
         5f:43:bc:d4:c0:41:dd:8c:4e:02:83:c5:bd:8b:68:d8:0b:df:
         be:00:a7:25:d9:09:b4:24:a3:2e:47:ac:e8:f4:10:f8:c5:76:
         c9:5d:0d:b4:8f:ff:35:7e:bd:32:5d:3c:6b:59:91:b7:16:28:
         64:2a:bd:01:c9:7a:a2:bd:3c:c0:68:3a:f2:78:c6:eb:3d:3f:
         a8:9f:73:b2:95:f6:91:58:43:da:cb:e1:83:07:12:fc:7b:19:
         cc:9a:59:94:11:4b:c9:91:1b:0f:74:e6:45:a1:66:32:de:7e:
         9f:44:32:eb:23:c0:17:cd:72:48:93:04:f5:e1:6e:4c:0c:b8:
         d2:e5:57:99:28:f3:9d:db:09:d0:e2:d4:7d:bb:72:43:2e:19:
         92:6f:e8:b6:e4:9d:a4:95:17:c2:33:b6:f4:2f:6d:fc:87:df:
         a2:c2:37:f0:75:51:35:69:71:97:e6:c6:b3:c9:e9:56:d2:cc:
         38:de:2c:e6:75:a2:d3:ac:1c:40:e3:84:a2:3b:cf:2b:5e:1e:
         ef:8f:a2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org