Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/34352e3139302e3133362e302f32322d3232203d3e20323639363437.roa
File:                     34352e3139302e3133362e302f32322d3232203d3e20323639363437.roa (raw, json)
Hash identifier:          nu+N1QPCxOTwvWgL+fFfEZ1wxAatNe2/ZODAIGCiZHE=
Subject key identifier:   54:F4:5D:96:78:5A:E8:2D:BF:CD:A7:91:32:5D:76:E3:2A:EE:E4:94
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       17227533F3DC3AD8BDE88386B787976365C304CB
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/34352e3139302e3133362e302f32322d3232203d3e20323639363437.roa
Signing time:             Thu 04 Apr 2024 08:17:33 +0000
ROA not before:           Thu 04 Apr 2024 08:12:33 +0000
ROA not after:            Thu 03 Apr 2025 08:17:33 +0000
asID:                     269647
IP address blocks:        45.190.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:22:75:33:f3:dc:3a:d8:bd:e8:83:86:b7:87:97:63:65:c3:04:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Apr  4 08:12:33 2024 GMT
            Not After : Apr  3 08:17:33 2025 GMT
        Subject: CN=54F45D96785AE82DBFCDA791325D76E32AEEE494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d5:88:59:41:46:98:c1:c0:7f:5b:28:2d:d3:
                    c8:d5:71:0d:5b:2d:bf:c8:b7:d2:0b:87:34:23:be:
                    20:e9:41:16:aa:67:65:46:30:71:3d:83:2a:c0:04:
                    8c:81:1f:f9:26:74:18:60:17:a8:b0:d0:30:4a:4c:
                    fe:56:ca:bc:64:fa:34:42:23:c1:af:95:62:84:60:
                    6a:d3:08:60:30:e6:e0:74:45:e1:c8:29:6a:4b:4c:
                    47:09:86:b3:6d:68:51:c4:fb:3a:a8:f0:df:6c:c1:
                    98:2b:ab:98:9e:df:ac:13:67:ad:f2:ec:cf:d9:74:
                    9d:4e:39:24:88:16:8d:c1:57:3e:cb:ab:72:cf:2d:
                    51:fd:43:a8:e3:d5:29:e5:d9:db:bd:f9:7c:89:15:
                    ef:a9:3f:21:4c:0c:cc:51:6f:8a:4b:40:4b:b7:47:
                    ad:ec:6e:8f:84:00:75:f0:9e:bd:b3:8f:5a:95:0b:
                    e4:03:e3:7f:3d:56:c5:1a:2e:de:a2:84:39:2d:3b:
                    33:cc:e0:22:7e:69:45:aa:0e:7e:f4:f2:18:bb:4a:
                    07:88:76:e3:0c:69:20:1b:f7:c3:e5:46:d3:ac:0d:
                    50:1d:20:b6:6e:c6:47:37:b8:8b:06:b9:12:f7:7a:
                    03:7b:c9:2d:f2:18:03:d7:d7:d3:02:8b:93:04:90:
                    85:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F4:5D:96:78:5A:E8:2D:BF:CD:A7:91:32:5D:76:E3:2A:EE:E4:94
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/34352e3139302e3133362e302f32322d3232203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:4b:4a:44:4d:d6:3a:69:21:10:be:c7:ea:2f:77:82:c8:f9:
         74:28:02:8f:65:1d:66:26:da:da:a2:f8:ff:21:e3:b2:5c:22:
         8f:8d:07:77:03:af:e5:55:11:03:ae:07:be:35:7d:b9:18:12:
         76:a6:5d:51:51:65:aa:a5:f3:b1:d0:30:fb:b9:ac:cf:05:c5:
         cc:6e:76:8c:e0:d1:14:ca:88:ff:b7:44:9d:21:a1:80:82:03:
         3e:9a:7b:70:1e:3e:f0:e9:71:be:1f:43:61:d1:76:4b:1b:e4:
         88:3e:5c:34:01:f7:10:10:bb:43:3c:60:88:e0:f0:fe:cc:a7:
         b4:79:24:c5:37:a3:b8:8f:ea:e2:61:52:0c:2c:ac:df:a8:94:
         69:4b:75:49:70:55:56:6b:43:10:33:b7:d2:6a:f6:58:9e:dc:
         fb:2e:02:63:8f:60:6e:a6:00:c1:81:f2:36:0d:84:61:58:86:
         4e:0f:6a:74:bd:37:58:50:df:a6:d0:5e:78:8f:d5:14:9d:0a:
         74:ec:1d:bb:35:b5:88:2e:93:01:97:12:a6:54:eb:aa:8b:66:
         9f:15:04:5e:d2:c6:7f:82:ea:a3:17:81:cc:fb:1a:d3:31:50:
         9c:e6:9a:60:d0:6a:22:c2:c1:a3:cb:a4:87:2a:3d:6b:6f:10:
         f4:a1:f6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:17 2024 by rpki-client on console-fra.rpki-client.org