Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa
File:                     34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa (raw, json)
Hash identifier:          bkLtlK7aeU/UKsqP8rQFGiHXtPuKFAxLCDiXFM4ds3s=
Subject key identifier:   47:02:12:1E:4B:12:A2:40:88:8D:C2:52:31:85:B5:C0:FC:8C:00:37
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       62392A354921B3E566F2AC9526420D7102E8AD45
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa
Signing time:             Thu 04 Apr 2024 08:42:03 +0000
ROA not before:           Thu 04 Apr 2024 08:37:03 +0000
ROA not after:            Thu 03 Apr 2025 08:42:03 +0000
asID:                     268296
IP address blocks:        45.237.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:39:2a:35:49:21:b3:e5:66:f2:ac:95:26:42:0d:71:02:e8:ad:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Apr  4 08:37:03 2024 GMT
            Not After : Apr  3 08:42:03 2025 GMT
        Subject: CN=4702121E4B12A240888DC2523185B5C0FC8C0037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fa:fa:f2:69:cd:33:ad:5e:94:2a:91:de:95:
                    05:5f:27:43:f0:83:1e:18:fe:c3:95:5e:ba:e3:bb:
                    81:5e:44:6a:c8:d7:dc:42:af:55:45:62:29:44:83:
                    1e:ae:8d:49:ed:00:69:b9:e0:a1:df:f6:53:33:17:
                    68:f1:81:14:c9:66:e1:ec:39:49:b6:f9:3c:66:b9:
                    00:14:9d:e3:97:dd:8d:e4:b2:9b:ed:ea:22:93:f8:
                    d0:a0:7e:86:45:8a:da:0f:db:53:d5:84:ea:d0:00:
                    c4:17:01:61:30:4a:cb:47:b4:1d:4f:7b:a2:13:58:
                    ea:e8:5b:0e:36:2a:34:b1:2e:ae:19:0e:9d:6d:24:
                    ca:44:0b:a5:11:ad:86:40:1d:eb:cf:d0:c7:4b:1e:
                    d0:1d:de:21:32:d9:82:6d:7b:61:51:5d:6e:84:93:
                    ca:d6:7a:b2:ae:36:84:2e:8b:28:45:29:42:8e:3c:
                    b0:18:e9:26:99:f2:c1:fe:ff:f4:ef:d5:6b:d9:59:
                    13:77:4d:6b:09:99:02:00:c5:01:ba:8c:be:90:8d:
                    71:c5:c0:86:22:b2:cc:17:e2:e6:b2:5c:d7:41:6d:
                    10:65:60:bc:1a:f9:53:59:8c:c9:eb:8d:72:d0:dd:
                    d4:e6:12:5f:fe:e0:be:b1:fe:60:a1:df:3c:43:10:
                    76:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:02:12:1E:4B:12:A2:40:88:8D:C2:52:31:85:B5:C0:FC:8C:00:37
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:28:4a:3e:45:f4:77:d2:9c:03:5c:ff:4a:e2:17:dd:ce:09:
         94:c7:ee:6d:e7:3d:5e:11:bb:08:d9:5f:df:d9:0b:32:27:12:
         cc:eb:2c:e5:a4:1d:a9:1b:1d:f6:56:ae:76:76:a5:c7:95:ca:
         1d:70:f0:08:c4:b4:8f:f5:28:8c:4b:a0:e5:fb:d9:0e:86:d8:
         93:9e:a0:4b:32:c0:be:74:30:08:af:75:12:f5:4a:fd:f8:80:
         75:93:55:6e:4c:a7:74:37:31:5e:b8:2c:fe:9a:d9:77:81:98:
         d5:d0:e2:06:aa:d9:25:10:37:e7:1c:a9:28:ce:6b:8c:d9:63:
         b2:63:e3:63:1f:78:61:4c:54:56:5d:b1:2f:35:26:8a:30:bd:
         38:61:9b:eb:e4:04:b7:15:69:91:eb:4b:75:5b:ab:34:c6:24:
         85:41:be:5a:f2:6b:40:5f:6d:d4:c3:07:0c:bd:c5:bd:61:e1:
         5a:65:ad:46:30:99:82:0d:6e:d2:f6:e2:93:bb:97:3e:cc:9a:
         d1:95:fb:a3:50:ea:cc:7e:bd:68:65:77:e4:11:45:53:02:92:
         e3:1c:2a:1b:8b:4e:ff:18:cd:76:4f:4c:b6:1a:a5:b4:4f:12:
         35:66:2c:2e:e1:8f:cc:61:f3:fb:9b:be:f5:6a:3c:f9:50:bc:
         87:53:91:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:05 2024 by rpki-client on console-ams.rpki-client.org