Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34372e302f32342d3234203d3e20323636393538.roa
File:                     34352e3232362e34372e302f32342d3234203d3e20323636393538.roa (raw, json)
Hash identifier:          sfxzbw10ksmYRVMNZz/D6uJGWOkKMOPNhlMmKnyJIiI=
Subject key identifier:   B0:94:05:FA:B8:13:C3:BD:EE:FE:3D:3C:6F:5A:9B:F8:27:0A:AE:21
Certificate issuer:       /CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
Certificate serial:       2DC03BF52A49926E6D0F9A270C25C23152DD11F5
Authority key identifier: A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34372e302f32342d3234203d3e20323636393538.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     266958
IP address blocks:        45.226.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl
                          rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c0:3b:f5:2a:49:92:6e:6d:0f:9a:27:0c:25:c2:31:52:dd:11:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:1b:35:c2:14:73:cf:6d:fc:94:04:59:c4:
                    b3:b7:c6:ee:88:3c:a5:1a:37:90:f6:f9:b6:2e:0e:
                    0c:b9:cb:55:31:fe:6f:10:67:b3:f2:07:65:f9:81:
                    3f:5c:72:70:44:11:0e:81:24:4d:59:f7:82:ee:d3:
                    11:91:1d:11:bb:62:97:ff:0a:01:15:e0:4e:5d:e2:
                    1b:67:59:8b:67:ad:0c:0b:df:5c:66:cb:28:eb:87:
                    65:5d:42:27:4c:07:e0:89:ae:bd:c0:cd:6a:e6:25:
                    72:7f:b1:98:46:8f:26:58:a3:2f:1c:65:24:10:8c:
                    1c:e2:ee:f1:3e:f1:5e:ce:64:01:01:f5:9f:66:99:
                    33:06:ac:da:e0:8c:8b:a6:cf:1a:bd:32:eb:f8:45:
                    88:6b:19:f7:51:f3:f7:78:c5:64:f8:3e:25:1d:e5:
                    d3:f4:6e:11:c7:19:9e:4e:38:aa:d7:8a:5e:91:79:
                    ac:ba:8c:a2:f3:b5:50:82:49:a8:28:65:d6:74:18:
                    56:ba:1f:41:98:71:82:1b:0c:15:f6:a7:c8:7d:c0:
                    77:a8:76:4b:20:f1:b2:23:4e:60:33:16:f0:48:67:
                    de:34:62:f4:5d:50:86:92:47:f0:df:23:0a:e7:21:
                    80:c3:b3:fd:8a:9e:fd:9f:54:92:fe:a3:74:53:0e:
                    c8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:94:05:FA:B8:13:C3:BD:EE:FE:3D:3C:6F:5A:9B:F8:27:0A:AE:21
            X509v3 Authority Key Identifier:
                keyid:A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/34352e3232362e34372e302f32342d3234203d3e20323636393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:07:a0:3e:42:bd:7d:2e:68:7d:03:51:47:3b:20:86:ca:33:
         52:d4:00:6e:64:eb:dc:5b:56:30:f0:b0:87:46:b9:8a:8e:de:
         9b:97:69:64:bc:d3:70:91:bc:e0:87:62:36:c5:e7:4d:39:02:
         81:82:15:0e:a5:53:16:47:45:69:1e:c5:2d:8f:94:41:56:97:
         75:92:4c:59:62:10:44:bd:1e:f1:85:69:ec:64:4a:52:01:b9:
         f4:8a:1a:fb:36:c1:13:ba:7b:a8:a6:b5:a3:4e:5a:76:f1:3c:
         98:9e:ce:af:6e:1f:ab:58:8c:eb:65:8e:1c:2e:3f:00:c1:ad:
         50:2f:ce:f6:51:a7:ca:74:6d:ba:ad:9e:20:82:33:e6:8a:b8:
         99:2a:8c:df:62:3b:34:f3:ab:1f:23:3b:09:cc:c7:b6:3f:d9:
         77:98:dd:90:37:24:12:af:93:ba:da:dd:5c:33:4d:4c:6c:60:
         68:d5:b3:df:bc:4a:b2:52:a1:98:ef:6b:9d:04:3d:3c:91:2f:
         8c:b5:44:de:3e:bb:3d:36:44:88:fb:a8:36:cc:9b:3f:12:55:
         ba:f3:5f:2a:f3:25:3a:55:7b:54:22:f2:25:24:f8:e0:02:5b:
         15:55:9e:fc:9d:30:15:0d:16:59:5c:4e:52:be:84:89:04:1f:
         53:9a:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:05 2024 by rpki-client on console-fra.rpki-client.org