Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32312e302f32342d3234203d3e20323637303931.roa
File:                     34352e3232392e32312e302f32342d3234203d3e20323637303931.roa (raw, json)
Hash identifier:          I7BIDIJi3iCaWYerp/PhHNnLTqF8EU3R+zjy8+DnC1E=
Subject key identifier:   B7:9A:1F:A7:98:8E:B7:54:69:00:C8:43:67:3E:0F:53:D5:47:D2:86
Certificate issuer:       /CN=E533674BA5C26CC97186C54907220754478B1596
Certificate serial:       6F00B66D780013B5E1010A9186AB6C4FB36CDC79
Authority key identifier: E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32312e302f32342d3234203d3e20323637303931.roa
Signing time:             Wed 31 Jul 2024 17:44:27 +0000
ROA not before:           Wed 31 Jul 2024 17:39:27 +0000
ROA not after:            Wed 30 Jul 2025 17:44:27 +0000
asID:                     267091
IP address blocks:        45.229.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl
                          rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:00:b6:6d:78:00:13:b5:e1:01:0a:91:86:ab:6c:4f:b3:6c:dc:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E533674BA5C26CC97186C54907220754478B1596
        Validity
            Not Before: Jul 31 17:39:27 2024 GMT
            Not After : Jul 30 17:44:27 2025 GMT
        Subject: CN=B79A1FA7988EB7546900C843673E0F53D547D286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:c6:87:49:10:65:ff:0a:5a:bf:28:e5:7f:
                    df:6c:c1:4c:2c:fc:42:31:ef:76:ff:cd:d0:af:54:
                    27:04:10:55:5b:63:6c:bc:c2:da:98:5a:67:e3:c4:
                    ad:75:c1:aa:bd:f5:38:b1:ae:92:f2:30:70:fd:ba:
                    3a:48:29:7b:56:af:c9:0d:da:bf:a4:67:c5:07:66:
                    80:d7:62:1e:d2:be:95:a1:a2:b7:1e:d0:37:97:24:
                    e0:29:79:cc:39:8f:41:79:30:ba:d7:93:54:04:53:
                    5a:fb:1b:aa:c4:96:94:c5:ee:c6:d1:05:cd:21:3e:
                    01:b7:7c:95:f6:e8:35:33:cf:59:45:da:c9:d1:71:
                    32:38:da:f7:09:33:9c:90:04:18:6a:5f:9d:64:9d:
                    83:95:38:b3:e5:f7:40:27:be:3b:7f:15:2c:01:98:
                    a4:3b:e2:97:b0:b2:b6:8b:aa:c8:14:35:90:77:c5:
                    92:f9:d0:1c:d2:f8:20:8c:4c:b7:c1:d5:2d:a8:a1:
                    c5:e4:6c:c2:b5:da:8d:7c:b4:42:1f:14:09:b0:37:
                    6e:32:3f:39:0d:f1:40:c8:3d:19:bd:df:ab:c4:bb:
                    c1:2e:de:f6:03:c3:c3:1a:49:bc:ae:d3:69:1f:c3:
                    50:9d:b2:28:ac:0f:db:9e:75:84:a2:60:57:5c:c1:
                    ed:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9A:1F:A7:98:8E:B7:54:69:00:C8:43:67:3E:0F:53:D5:47:D2:86
            X509v3 Authority Key Identifier:
                keyid:E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32312e302f32342d3234203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:b8:f7:51:67:a9:f4:20:97:1e:5f:2b:89:f5:6c:89:1e:f9:
         e4:f5:59:62:d8:2c:cd:50:36:45:31:72:32:d9:63:20:6c:bb:
         84:3a:8d:04:8d:41:71:f7:3f:27:67:26:32:d1:f5:24:b8:f5:
         13:28:49:80:eb:1e:1d:3b:13:2c:fc:e3:b4:72:9a:6d:b5:a0:
         bd:fb:23:d8:d5:47:aa:ce:59:00:4f:b0:12:06:7d:e7:bf:64:
         04:57:3a:66:fa:c6:83:8f:4c:49:da:69:3a:6f:d8:23:2b:22:
         d2:65:43:b6:8c:98:ca:9e:3f:cd:3a:fe:d1:94:99:e8:51:0a:
         60:69:cc:16:38:df:36:82:a1:b6:91:05:42:ab:75:78:e4:ce:
         a9:ee:5f:dd:e0:06:aa:f4:6e:9e:94:f0:09:a3:ce:38:6f:3d:
         12:51:aa:b6:bc:84:f2:c2:f2:f6:f8:db:5b:d3:d6:4f:1b:dd:
         53:be:33:e7:4e:38:3a:62:ca:9d:a1:ea:ae:dc:43:e1:d5:77:
         01:1d:8f:d4:00:f3:c2:8e:17:d1:50:aa:df:89:4d:22:fc:df:
         ae:fe:4b:d2:7a:ed:7e:52:9c:e9:37:ff:3e:f9:eb:c8:b2:11:
         0d:67:d5:5a:9d:d1:a9:eb:9b:57:4f:8e:40:cb:29:b3:88:02:
         74:4e:42:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:55:48 2024 by rpki-client on console-ams.rpki-client.org