Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa
File:                     34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          sPWeYOTdaB0UwmXQ2S1p+9VKxoIfsSc2R55IYXW/t4o=
Subject key identifier:   46:F5:0C:E3:2E:DE:7D:65:CB:7F:51:2E:1B:F1:47:B2:4B:8D:4C:2F
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       7B4CE752EA31D2BCF8F6E38370645EB08CB636F3
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa
Signing time:             Thu 07 Nov 2024 20:54:50 +0000
ROA not before:           Thu 07 Nov 2024 20:49:50 +0000
ROA not after:            Thu 06 Nov 2025 20:54:50 +0000
asID:                     263665
IP address blocks:        45.227.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4c:e7:52:ea:31:d2:bc:f8:f6:e3:83:70:64:5e:b0:8c:b6:36:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: Nov  7 20:49:50 2024 GMT
            Not After : Nov  6 20:54:50 2025 GMT
        Subject: CN=46F50CE32EDE7D65CB7F512E1BF147B24B8D4C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:40:dc:69:6c:8b:14:74:ff:3f:36:b2:4f:
                    a2:51:26:f4:12:a0:fa:fd:27:9f:b0:8a:e2:6c:f4:
                    fd:75:aa:36:67:b8:32:18:24:ac:50:83:e6:aa:f7:
                    58:f5:99:c1:6f:57:f8:4c:68:3c:48:8b:0d:89:47:
                    0e:8e:68:cb:38:7e:b0:9b:13:3d:25:2c:d9:4a:ca:
                    86:4a:5e:77:0a:e8:93:9a:03:2f:d1:b5:25:ac:eb:
                    e0:b6:00:54:f6:3d:1c:db:97:cd:1c:49:4c:16:76:
                    88:3f:1b:ff:c4:5f:85:d1:14:f6:5f:ea:6e:80:38:
                    cb:20:23:75:40:b5:19:ab:fc:cc:b8:12:c8:93:e6:
                    57:09:b9:6d:0d:8f:6b:34:46:88:73:c3:d0:b9:ea:
                    a5:0c:6f:30:07:1d:28:5a:37:da:25:c3:5d:b6:49:
                    f8:b2:40:6a:7b:d7:d1:a0:5f:42:48:fe:61:ae:f2:
                    fe:15:d2:84:be:89:5f:96:79:73:05:37:c0:e6:4d:
                    96:3c:4e:88:5c:90:5a:a3:0f:1e:6a:bc:64:3d:29:
                    f5:8b:76:8a:3e:fd:5a:4f:f3:8e:79:4c:2e:9c:4a:
                    1e:11:34:39:e8:b4:24:b6:04:0a:e3:81:9c:b3:14:
                    05:a2:ae:b4:2a:37:18:87:38:7f:5a:66:11:ec:a5:
                    06:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F5:0C:E3:2E:DE:7D:65:CB:7F:51:2E:1B:F1:47:B2:4B:8D:4C:2F
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:42:c6:37:66:91:00:e7:a1:e0:c5:9d:66:80:12:20:e2:47:
         f8:27:93:e5:9c:90:9f:3e:c5:c8:4f:5a:df:38:b3:b5:ba:82:
         42:8d:76:4c:0f:b6:40:40:c2:f1:83:5f:2a:5b:91:b9:04:41:
         f4:e1:cc:74:de:26:ce:47:d1:3f:91:60:1b:80:29:7b:4a:7d:
         10:7b:a4:7c:12:1f:f6:59:40:d4:2d:5c:18:d6:f2:bf:3f:60:
         a6:47:d1:ef:f9:01:14:51:40:b0:a1:ce:5e:2b:9d:eb:fd:22:
         eb:a3:ac:53:aa:b0:11:7f:0e:3a:7d:a8:75:ab:c4:fa:e2:c7:
         02:aa:3e:d1:36:3b:6d:10:9b:38:44:7d:62:42:bd:ed:98:99:
         b7:e2:39:15:d1:97:f8:bd:c0:ae:fe:0a:5f:8f:1b:38:54:52:
         61:c2:e7:c0:50:27:4d:c7:d2:78:c9:db:02:22:11:a4:3b:76:
         48:94:61:f3:03:f1:d2:62:64:33:a1:2c:a2:95:f0:38:22:50:
         a2:d8:cf:f8:10:85:81:a4:a3:b3:96:c5:54:4b:90:fc:b6:c2:
         9b:03:ab:8e:be:b6:96:68:60:5a:bf:88:8c:d1:a9:08:ab:6e:
         d3:7a:dc:9b:0a:59:a7:f7:93:9d:b1:31:fc:a4:d0:4a:d9:f1:
         96:3b:39:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org