Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/34352e3137322e3131362e302f32322d3332203d3e20323638373634.roa
File:                     34352e3137322e3131362e302f32322d3332203d3e20323638373634.roa (raw, json)
Hash identifier:          hZXoz19+AqZZOpxAcYqiHCjv2+PUmj/STJqxmJnmZ9Y=
Subject key identifier:   A2:42:A4:92:1B:BE:D9:87:5F:A8:C5:52:24:11:CE:27:59:C6:9C:25
Certificate issuer:       /CN=74287883336D6F371731FA4B90A26208089B2DB3
Certificate serial:       18950C0B3F6F6BE86968425EE1DDDC51C3358656
Authority key identifier: 74:28:78:83:33:6D:6F:37:17:31:FA:4B:90:A2:62:08:08:9B:2D:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74287883336D6F371731FA4B90A26208089B2DB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/34352e3137322e3131362e302f32322d3332203d3e20323638373634.roa
Signing time:             Wed 31 Jul 2024 15:31:06 +0000
ROA not before:           Wed 31 Jul 2024 15:26:06 +0000
ROA not after:            Wed 30 Jul 2025 15:31:06 +0000
asID:                     268764
IP address blocks:        45.172.116.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/74287883336D6F371731FA4B90A26208089B2DB3.crl
                          rsync://rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/74287883336D6F371731FA4B90A26208089B2DB3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74287883336D6F371731FA4B90A26208089B2DB3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:95:0c:0b:3f:6f:6b:e8:69:68:42:5e:e1:dd:dc:51:c3:35:86:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74287883336D6F371731FA4B90A26208089B2DB3
        Validity
            Not Before: Jul 31 15:26:06 2024 GMT
            Not After : Jul 30 15:31:06 2025 GMT
        Subject: CN=A242A4921BBED9875FA8C5522411CE2759C69C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d0:3f:b0:16:c8:44:3e:ed:a8:c0:11:04:81:
                    fb:87:28:1b:b7:e3:76:19:77:55:59:51:a0:74:ae:
                    4d:c7:99:77:13:b7:73:ef:36:02:dd:de:e3:5b:fd:
                    ec:9f:22:e3:26:af:79:73:8d:e9:49:7a:22:7b:1a:
                    f4:2f:68:94:4d:aa:f7:a0:c7:9d:3e:2e:29:38:be:
                    29:f7:a1:d6:7f:f6:40:d1:6d:3d:ed:22:aa:7a:79:
                    98:5a:93:28:9e:dc:75:47:5b:88:94:ba:bc:86:04:
                    32:0b:61:fd:b5:fb:d4:16:05:cf:08:29:f2:fc:0f:
                    a6:bf:89:4b:74:e9:a7:5d:c8:da:ba:21:34:43:c5:
                    32:1d:73:5c:1f:17:75:89:95:ea:a2:01:fb:ff:19:
                    25:90:dd:ee:c5:08:94:7a:6c:9e:12:51:82:20:5b:
                    06:6b:f0:fd:de:88:ea:05:df:b3:47:0e:4b:f7:7d:
                    e0:86:be:0d:59:45:79:be:a8:a2:7b:dc:12:7f:21:
                    b5:04:d6:8a:a4:8f:74:06:c7:c2:11:06:9e:d4:70:
                    68:5e:23:ff:62:a9:f8:10:8b:4d:6e:75:3a:8a:b4:
                    b1:63:15:b5:87:5b:44:2a:a9:f8:5e:5c:0f:87:6c:
                    48:6e:e1:6f:64:8b:0d:49:ff:56:10:4e:91:11:85:
                    d7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:42:A4:92:1B:BE:D9:87:5F:A8:C5:52:24:11:CE:27:59:C6:9C:25
            X509v3 Authority Key Identifier:
                keyid:74:28:78:83:33:6D:6F:37:17:31:FA:4B:90:A2:62:08:08:9B:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/74287883336D6F371731FA4B90A26208089B2DB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74287883336D6F371731FA4B90A26208089B2DB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/34352e3137322e3131362e302f32322d3332203d3e20323638373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:42:b0:ee:d3:64:6a:24:78:75:4a:e6:1b:f3:27:b4:ee:36:
         9e:e3:b2:d8:3b:be:14:a4:91:28:d3:e6:e9:35:ab:a0:22:18:
         d9:b7:5a:76:60:51:98:8c:f3:5b:a7:ad:04:5e:62:36:f7:ea:
         85:ce:fc:b7:85:1c:db:0e:ef:a9:4b:4c:b6:1e:39:57:40:b2:
         c4:66:8f:bd:3f:15:b4:51:59:35:9f:73:24:7e:1a:b5:20:4c:
         a6:78:2d:01:34:c7:04:98:8b:c9:bc:9c:15:d3:f5:33:0f:46:
         5c:c6:07:e4:2d:63:80:e7:a3:77:9a:5a:e1:20:fd:35:e8:74:
         1c:12:0a:a9:0e:62:10:b1:82:8c:da:a2:50:58:40:d8:e7:a1:
         52:41:fd:48:e0:62:11:00:10:3b:4c:93:a9:8c:3c:a2:4d:64:
         e9:fc:30:f2:f7:04:33:9f:98:46:87:bf:76:fb:47:74:e2:bc:
         af:38:7e:d0:d4:d1:cd:cc:8f:b4:79:9f:0c:d3:ec:5f:8e:37:
         e9:12:16:83:68:6b:9b:5f:b4:41:1b:99:0c:68:77:ed:8e:8c:
         2f:5d:10:17:b5:a8:9b:15:0b:cf:aa:fa:59:1f:74:ca:bf:f4:
         e6:d7:7d:61:35:1b:d6:dd:95:46:21:ba:d9:f5:2c:64:33:cb:
         53:95:9d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:52 2024 by rpki-client on console-fra.rpki-client.org