Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/34352e3233322e3133352e302f32342d3234203d3e203238323130.roa
File:                     34352e3233322e3133352e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          zKLZKMa2c1mytWE6XfRVS41CaXM6FkrqwT+Tpf4VFNw=
Subject key identifier:   7D:7B:8D:BB:1B:D2:26:BD:5A:5E:46:EC:49:DA:21:70:63:2B:89:82
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       7FA949ADB351095B41B193BE0093EA97AB4F3952
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/34352e3233322e3133352e302f32342d3234203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:48 +0000
ROA not before:           Thu 04 Apr 2024 04:32:48 +0000
ROA not after:            Thu 03 Apr 2025 04:37:48 +0000
asID:                     28210
IP address blocks:        45.232.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Jul 2024 11:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a9:49:ad:b3:51:09:5b:41:b1:93:be:00:93:ea:97:ab:4f:39:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:48 2024 GMT
            Not After : Apr  3 04:37:48 2025 GMT
        Subject: CN=7D7B8DBB1BD226BD5A5E46EC49DA2170632B8982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:de:53:bd:b0:5c:27:05:e2:b0:00:9c:41:
                    80:7a:c3:2a:83:f9:12:01:99:f2:9e:4f:29:bf:9f:
                    b3:0f:de:77:f1:93:73:2e:6e:3e:ad:cd:e2:07:3e:
                    15:d6:b9:08:8e:d6:fb:f4:36:79:25:3e:1d:3b:58:
                    d4:bb:c0:0f:66:90:81:f4:97:8c:0e:56:c4:5a:13:
                    d9:f3:dc:00:12:46:ab:fc:08:8c:28:38:9c:5b:bb:
                    2e:1c:1a:45:42:96:1c:12:05:76:ea:72:fd:79:79:
                    b8:c9:f4:3b:7d:1d:a0:08:03:31:13:f5:39:f6:7a:
                    02:d8:36:d3:62:5c:f6:51:29:64:27:8f:7b:89:11:
                    ba:10:1f:c3:b8:62:4b:8a:90:ec:d9:28:9c:61:17:
                    6c:d0:55:40:14:d9:6a:ab:38:70:89:65:38:d8:18:
                    6a:72:60:a4:24:28:27:5e:fc:c7:a3:a8:09:6c:b8:
                    71:1b:0f:e1:f5:e7:de:7a:24:96:e1:4f:18:34:5c:
                    39:bf:de:df:7a:55:21:6d:3d:71:8f:eb:88:38:1f:
                    fa:40:62:c4:2d:65:cd:b0:f4:b9:77:4c:17:e8:57:
                    2a:e5:8a:f3:ad:cd:2a:e9:91:31:2b:d6:38:6f:10:
                    14:cb:fd:24:14:3b:d7:6b:71:4a:92:1d:c7:40:84:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7B:8D:BB:1B:D2:26:BD:5A:5E:46:EC:49:DA:21:70:63:2B:89:82
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/34352e3233322e3133352e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:aa:f3:a5:8e:41:ee:ca:69:f9:28:0d:1f:b1:96:62:70:1a:
         b6:48:f1:70:12:9c:2a:10:ba:9a:15:57:e1:0f:46:81:18:67:
         3b:ce:a6:ca:f9:5d:78:40:6b:7a:3f:7a:12:1a:a7:1c:fd:e4:
         0b:d4:46:08:92:5b:9d:c7:34:4d:cc:a2:49:0b:7f:e1:02:5a:
         39:4f:a8:3b:00:c1:3f:a7:4a:c1:29:bf:84:b8:76:b3:08:d9:
         89:95:11:f8:a4:27:2a:2c:5e:71:ab:3e:30:9b:c6:da:83:13:
         3b:fd:9e:a7:ac:43:46:0c:24:07:6f:51:96:b6:1f:c3:09:24:
         92:90:31:d9:95:11:0a:7a:f5:de:fc:92:40:fa:a8:8c:eb:b5:
         f3:80:22:8a:63:68:3c:0f:15:34:3e:cf:84:0f:0c:ba:43:f2:
         bc:40:64:4a:85:ea:61:fc:bb:46:a1:9e:5b:6f:55:c1:19:6b:
         f5:21:8b:97:54:62:34:7c:1f:7d:71:a9:ba:29:1e:6d:17:6a:
         94:24:18:72:e9:1a:d3:34:ec:6d:54:c0:31:96:56:b1:f7:b6:
         4e:9d:80:11:78:90:99:ef:45:ce:18:f7:29:bf:c6:6e:eb:83:
         6d:92:15:03:4c:9e:00:c8:a7:e9:c2:d8:6f:dc:7c:97:60:4f:
         d9:a5:88:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 10:48:24 2024 by rpki-client on console-ams.rpki-client.org