Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3232392e302f32342d3234203d3e20323637333530.roa
File:                     34352e3233332e3232392e302f32342d3234203d3e20323637333530.roa (raw, json)
Hash identifier:          Bt9cL5QevdGXw/g2JV5ZCLyba91VXMirPoYtmModk5s=
Subject key identifier:   D0:74:E8:3B:B3:6F:D3:45:AC:C5:C1:DA:13:A3:68:A8:FF:72:47:CC
Certificate issuer:       /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial:       2356E1E046798E48A0B74E29D597EB6A2ABEA215
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3232392e302f32342d3234203d3e20323637333530.roa
Signing time:             Sat 06 Jul 2024 01:40:08 +0000
ROA not before:           Sat 06 Jul 2024 01:35:08 +0000
ROA not after:            Sat 05 Jul 2025 01:40:08 +0000
asID:                     267350
IP address blocks:        45.233.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:56:e1:e0:46:79:8e:48:a0:b7:4e:29:d5:97:eb:6a:2a:be:a2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
        Validity
            Not Before: Jul  6 01:35:08 2024 GMT
            Not After : Jul  5 01:40:08 2025 GMT
        Subject: CN=D074E83BB36FD345ACC5C1DA13A368A8FF7247CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:d5:fb:ad:8c:7d:56:71:ce:98:4b:38:e2:
                    2d:7a:b9:88:76:00:71:28:01:b6:92:26:65:55:79:
                    fd:09:b2:85:a8:5e:57:ed:bc:8e:23:b3:01:65:c7:
                    66:d1:57:5d:4a:36:78:27:74:d9:35:46:c6:3f:74:
                    e8:6b:43:ff:34:fd:f4:b3:0f:61:44:dc:3f:02:26:
                    36:22:88:0c:c6:63:3d:07:b2:10:4e:a4:24:22:ba:
                    e4:ad:f2:02:34:76:b7:f4:e9:88:2d:bc:0a:fa:f8:
                    c5:e8:a1:af:fb:8c:5f:58:87:66:f5:7e:c2:a9:e8:
                    68:5d:09:48:73:91:fd:84:0e:30:8b:88:f8:ed:a9:
                    76:3c:a0:fb:fd:7a:6a:cc:7c:5b:54:98:db:25:93:
                    f5:a5:28:24:02:e1:cc:6a:a8:70:7a:e4:a9:1c:fd:
                    5b:bb:23:ad:4e:d3:89:c5:d9:8e:88:5a:91:c2:f5:
                    ff:4d:b9:b2:15:f7:de:97:76:48:bb:8a:0a:a4:12:
                    a3:42:d7:1b:1c:1a:82:90:fc:b2:04:92:d5:09:06:
                    c1:05:58:14:33:35:1a:39:d4:49:b9:38:a9:91:ff:
                    a8:f8:85:c8:72:d9:7c:0f:73:11:66:82:ba:a9:46:
                    b1:0a:07:c7:37:11:af:35:18:6a:ba:17:5f:1d:4e:
                    c8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:74:E8:3B:B3:6F:D3:45:AC:C5:C1:DA:13:A3:68:A8:FF:72:47:CC
            X509v3 Authority Key Identifier:
                keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3232392e302f32342d3234203d3e20323637333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:bf:75:e9:0e:61:ba:f5:6a:e6:78:f0:9e:c1:29:a5:8d:4d:
         51:20:f3:52:3e:74:c1:b0:37:2c:c1:5b:17:e6:87:d4:72:ef:
         0c:27:78:a0:af:12:d0:1c:e6:53:95:4c:58:df:a5:cb:bd:47:
         0a:5e:5d:55:20:e5:a6:9a:df:15:97:20:38:4b:16:d3:5b:f9:
         21:ff:25:eb:1a:a5:02:0b:43:d0:7d:5b:c1:c0:12:17:07:9e:
         01:5b:ff:9f:07:3d:c8:42:52:45:8d:c2:f0:dd:21:d8:53:8a:
         0c:9e:a5:8c:4c:2f:49:be:8f:9f:a9:0d:21:28:d7:21:4f:ac:
         ff:30:eb:99:81:c1:2a:38:de:f8:6b:35:32:87:bc:c8:ee:fe:
         b7:e9:0f:46:71:62:a8:64:fb:d3:2a:07:b1:2a:9c:39:22:b4:
         db:35:db:7a:e1:d1:49:60:51:b5:ea:72:ab:40:89:16:c6:98:
         45:8c:8f:8a:77:22:e7:aa:98:16:5a:31:5d:35:03:a8:48:5b:
         43:cb:cf:7b:c0:06:5c:cb:21:45:19:4d:f5:39:fb:0c:82:9f:
         15:e8:8f:08:a1:f0:d5:8c:37:b1:3d:8d:ea:79:32:32:bc:87:
         b1:dc:24:a6:2c:85:2d:de:de:26:e4:ec:88:83:d6:c8:e3:f9:
         fc:17:c9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:05 2024 by rpki-client on console-ams.rpki-client.org