Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34352e302f32342d3234203d3e20323636393538.roa
File:                     34352e3232362e34352e302f32342d3234203d3e20323636393538.roa (raw, json)
Hash identifier:          nXi8OoHMPpyFB+67hPFkFTlFGufuJoFfSDpD5UuOY2M=
Subject key identifier:   D3:72:80:F2:F0:E2:87:7E:3A:C3:34:39:5C:6B:26:1A:A3:2F:62:24
Certificate issuer:       /CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
Certificate serial:       35229D0F91F58CD8ACEFF7231CA8A19A0AE3E54D
Authority key identifier: A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34352e302f32342d3234203d3e20323636393538.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     266958
IP address blocks:        45.226.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl
                          rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:22:9d:0f:91:f5:8c:d8:ac:ef:f7:23:1c:a8:a1:9a:0a:e3:e5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject: CN=3082010A0282010100C3D7FB6281544545D44D9CA6B164DC0CC4D3619BA36E3AC03F409C67FBD7A1E82B07795DEC1933CCE9CE8DD5240BABDF9350751F89180CAF61B6B3C95818783E2825AA1641555AF7C5271B11C983E03E46DCDD28CD49BF3DCD82A727B952EF7F45B047C8421F8489D7D9F0167BA5C54EA45797927EC9D907119A5445846DF992EB1EFE25D53510083199FC1E60620D98E2CE5C600D18412031AF54FE5C05E7B53AE662EEB8A3F1D6C967DC86C802392862FBDE61EC642DC76063B2F0B2ED5363981328F88C06653AC995F008FA5938DE792E4AAD4FB2C6551A452CDB942F8D14ADEC474D0755BF8DB5CC73F927511C07ED68B221AF785737CC36368DA1AA92D50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d7:fb:62:81:54:45:45:d4:4d:9c:a6:b1:64:
                    dc:0c:c4:d3:61:9b:a3:6e:3a:c0:3f:40:9c:67:fb:
                    d7:a1:e8:2b:07:79:5d:ec:19:33:cc:e9:ce:8d:d5:
                    24:0b:ab:df:93:50:75:1f:89:18:0c:af:61:b6:b3:
                    c9:58:18:78:3e:28:25:aa:16:41:55:5a:f7:c5:27:
                    1b:11:c9:83:e0:3e:46:dc:dd:28:cd:49:bf:3d:cd:
                    82:a7:27:b9:52:ef:7f:45:b0:47:c8:42:1f:84:89:
                    d7:d9:f0:16:7b:a5:c5:4e:a4:57:97:92:7e:c9:d9:
                    07:11:9a:54:45:84:6d:f9:92:eb:1e:fe:25:d5:35:
                    10:08:31:99:fc:1e:60:62:0d:98:e2:ce:5c:60:0d:
                    18:41:20:31:af:54:fe:5c:05:e7:b5:3a:e6:62:ee:
                    b8:a3:f1:d6:c9:67:dc:86:c8:02:39:28:62:fb:de:
                    61:ec:64:2d:c7:60:63:b2:f0:b2:ed:53:63:98:13:
                    28:f8:8c:06:65:3a:c9:95:f0:08:fa:59:38:de:79:
                    2e:4a:ad:4f:b2:c6:55:1a:45:2c:db:94:2f:8d:14:
                    ad:ec:47:4d:07:55:bf:8d:b5:cc:73:f9:27:51:1c:
                    07:ed:68:b2:21:af:78:57:37:cc:36:36:8d:a1:aa:
                    92:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:72:80:F2:F0:E2:87:7E:3A:C3:34:39:5C:6B:26:1A:A3:2F:62:24
            X509v3 Authority Key Identifier:
                keyid:A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34352e302f32342d3234203d3e20323636393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:a7:85:99:78:34:2b:e1:34:09:2c:3c:fb:2c:20:b8:97:cc:
         f6:27:6f:24:24:58:03:39:e4:ca:d8:58:74:39:db:be:43:6f:
         b5:ac:0e:f1:d1:af:a1:37:1c:3d:ba:13:91:34:22:22:75:3b:
         a6:4b:88:bd:68:4d:48:52:4d:91:f5:13:dd:43:5c:8d:53:ab:
         c5:bd:bb:2a:3b:84:7c:86:5b:da:36:9d:8c:96:3b:80:fe:0e:
         08:99:d1:46:75:29:95:73:b5:96:4a:0e:73:18:07:44:54:26:
         3b:a6:93:6d:f6:dc:cb:67:2f:97:41:fe:e5:a3:bf:a3:35:46:
         e6:7d:04:9f:39:72:1a:06:b7:e2:a4:22:96:34:99:ac:84:6b:
         7a:4b:5f:ca:9d:43:42:99:d1:30:08:80:0b:8f:5c:2f:60:d3:
         42:c0:56:98:02:51:6b:d0:d6:a6:40:7f:ce:71:9a:ec:0d:7f:
         8e:56:12:53:30:88:16:c7:29:06:c9:69:37:80:10:e1:2f:d5:
         20:66:bf:1a:bd:e5:cd:1c:b4:26:94:d6:0d:16:1e:80:3f:7f:
         13:cb:fe:4f:88:fe:c7:f8:b1:d0:ed:88:50:97:86:e5:30:80:
         4b:4e:39:05:4c:2d:90:46:8a:ed:3f:91:38:12:46:10:c2:1a:
         f3:f4:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:13 2024 by rpki-client on console-ams.rpki-client.org