Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa
File:                     34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          Dn0kJUpW3Ln+SrH537YvczICj3rr6I/3RueWerBjoRM=
Subject key identifier:   84:0C:83:6B:EE:BF:10:E5:12:02:92:76:34:BE:41:E3:A2:F9:84:0F
Certificate issuer:       /CN=8EF1AA8783ADB33CABDBF9713F95F290C225B7FD
Certificate serial:       4E35CAB6E6DD93CEF165A4C90AAE762D9B80FE39
Authority key identifier: 8E:F1:AA:87:83:AD:B3:3C:AB:DB:F9:71:3F:95:F2:90:C2:25:B7:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa
Signing time:             Mon 09 Sep 2024 15:04:37 +0000
ROA not before:           Mon 09 Sep 2024 14:59:37 +0000
ROA not after:            Mon 08 Sep 2025 15:04:37 +0000
asID:                     263665
IP address blocks:        45.227.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 01:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:35:ca:b6:e6:dd:93:ce:f1:65:a4:c9:0a:ae:76:2d:9b:80:fe:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF1AA8783ADB33CABDBF9713F95F290C225B7FD
        Validity
            Not Before: Sep  9 14:59:37 2024 GMT
            Not After : Sep  8 15:04:37 2025 GMT
        Subject: CN=840C836BEEBF10E51202927634BE41E3A2F9840F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e0:0d:58:2e:63:28:73:6a:ec:5a:90:2a:d8:
                    cb:de:b0:6c:df:51:18:47:f3:29:3c:9a:21:f2:76:
                    d0:f2:3a:e2:7a:ff:fd:eb:8d:11:e6:20:37:1f:16:
                    bf:49:44:43:9a:08:f5:12:33:12:7d:51:fb:f6:f9:
                    05:8a:46:82:b2:e3:4c:b7:6c:27:e3:70:43:60:0f:
                    1e:d1:4a:d7:0d:2c:2e:8f:12:9e:90:c5:48:e1:20:
                    1c:33:a0:fe:fd:3f:d6:3b:15:9b:bb:ec:78:fc:30:
                    54:6b:72:8a:76:1c:ad:a3:d4:91:31:b0:21:46:0f:
                    da:b6:48:d0:7d:b0:93:61:b4:65:52:8f:9f:1c:8c:
                    12:06:99:94:8e:0d:da:a5:fa:b1:84:c8:cc:48:ad:
                    10:2a:8f:bb:6b:da:03:a5:4b:d6:20:08:f3:be:79:
                    bc:6d:4c:4d:c1:c7:7d:a4:d1:95:fc:cc:11:53:f9:
                    6b:a4:bf:53:16:74:5a:36:1a:18:e6:57:80:97:ce:
                    b1:11:2b:da:66:ce:ab:fa:fd:82:a7:46:78:ad:4d:
                    0e:58:40:d5:8e:89:da:58:97:d6:72:89:ae:dd:b8:
                    31:2f:53:2f:0c:65:39:26:2b:40:8a:92:0e:60:a6:
                    0d:41:e1:fd:e9:ff:6e:f9:18:44:1f:ef:44:10:01:
                    91:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0C:83:6B:EE:BF:10:E5:12:02:92:76:34:BE:41:E3:A2:F9:84:0F
            X509v3 Authority Key Identifier:
                keyid:8E:F1:AA:87:83:AD:B3:3C:AB:DB:F9:71:3F:95:F2:90:C2:25:B7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:d6:74:2b:e6:0e:b0:12:2b:f3:9b:b9:ec:4a:f4:ba:c6:53:
         1d:00:e3:e8:39:b7:ae:08:c6:e3:f5:05:bb:22:e4:6c:7e:29:
         30:f7:3b:50:56:3e:60:69:b6:c1:b7:a3:29:df:7e:4e:61:3b:
         74:ba:58:2d:91:d6:1b:72:43:98:a0:32:1d:be:ef:dd:99:79:
         8b:a5:d3:dc:07:0f:dd:7e:41:e6:cb:5a:0f:6e:cf:63:7c:9a:
         f2:9a:a4:42:5d:fc:87:06:72:85:6d:f0:8d:89:28:a8:97:33:
         5b:f1:bd:96:13:5e:0e:31:ed:60:91:cc:55:bd:96:35:41:93:
         ba:5c:3d:33:ad:6a:9f:0c:de:02:0f:f9:31:a2:46:f3:1d:7d:
         66:e2:f2:16:8b:67:f9:cd:f8:5b:d4:83:e9:5a:bb:60:43:df:
         b9:c9:11:3d:d2:c1:5e:88:de:f8:52:89:28:97:53:f7:e6:3e:
         b4:97:11:50:89:10:62:a6:6e:9f:14:57:b4:c4:51:51:aa:5d:
         e7:3c:dd:0a:94:72:ec:c3:14:56:fb:0d:08:f5:eb:6e:da:81:
         b6:f0:ce:bd:ee:c7:3f:67:7a:6c:21:f7:69:80:91:1b:8c:33:
         0a:b1:c6:a6:ea:6c:53:7b:a8:a9:e0:e6:29:02:72:55:51:6a:
         a3:20:56:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 01:14:46 2024 by rpki-client on console-ams.rpki-client.org