Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa
File:                     34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa (raw, json)
Hash identifier:          3X5rZxjJhdrs3KGmqtOjEgZoPD8a2bSXsHpFIT7CqAc=
Subject key identifier:   FC:89:E5:24:17:F8:C1:0D:CD:1C:43:33:AB:5F:D7:BE:E7:B3:00:F0
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       1603B59B673CEE4FB04127CF1AE2E7C5816172CD
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa
Signing time:             Thu 04 Apr 2024 08:42:02 +0000
ROA not before:           Thu 04 Apr 2024 08:37:02 +0000
ROA not after:            Thu 03 Apr 2025 08:42:02 +0000
asID:                     268296
IP address blocks:        45.237.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:03:b5:9b:67:3c:ee:4f:b0:41:27:cf:1a:e2:e7:c5:81:61:72:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Apr  4 08:37:02 2024 GMT
            Not After : Apr  3 08:42:02 2025 GMT
        Subject: CN=FC89E52417F8C10DCD1C4333AB5FD7BEE7B300F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:51:0e:00:ae:8a:a1:58:66:f2:ae:e2:a8:
                    cc:fc:b8:fd:ab:e7:46:87:cf:c0:19:b9:e5:cd:4e:
                    86:cf:64:63:36:3c:ca:3c:3c:af:38:f2:30:fc:ed:
                    d9:78:35:60:c8:26:c7:0e:00:30:cc:c8:cf:5a:6e:
                    ce:bc:83:43:a7:ec:ee:de:e9:fc:ca:d9:07:8f:2f:
                    fe:27:03:fb:4b:87:ed:b1:23:71:b9:b5:fb:89:23:
                    a7:7f:cf:6c:57:c1:6f:79:a6:62:96:3c:17:76:8a:
                    3c:f5:51:54:e9:64:8c:63:b8:35:df:c5:ef:34:7d:
                    b8:8a:03:b0:e4:d3:c7:b2:b8:00:0f:07:87:f8:e8:
                    c5:2a:df:12:2f:8e:b3:a9:d8:ab:9f:e1:18:df:c2:
                    fd:25:1f:dd:97:fb:cd:08:28:f6:76:0f:d7:5e:89:
                    b3:cb:be:8d:ab:72:bb:20:23:c6:77:f4:de:b9:c4:
                    00:1e:e2:00:79:ac:18:08:5c:89:52:49:d1:a9:ad:
                    4b:77:c3:77:09:24:c7:92:36:2c:3e:b7:cd:35:ab:
                    6a:29:72:3b:db:4d:4f:26:5c:ff:3c:16:5a:b4:55:
                    6d:9d:4b:78:03:ff:84:42:5d:e5:c9:76:e5:4c:d2:
                    92:c1:93:ba:b2:eb:46:4f:79:eb:08:ce:ee:02:e3:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:89:E5:24:17:F8:C1:0D:CD:1C:43:33:AB:5F:D7:BE:E7:B3:00:F0
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:54:2c:2a:fb:c4:04:a6:70:ad:8f:64:49:84:57:ed:19:32:
         19:84:58:ab:0c:9f:cb:1f:77:58:da:bc:d2:a2:27:fd:02:d0:
         26:6b:08:d4:47:73:9f:8f:e3:c2:32:24:42:c3:8a:eb:b7:3b:
         27:a6:e9:7a:b4:0e:84:0b:76:b1:da:e4:e5:7d:08:e4:45:d4:
         c6:9a:eb:e8:7d:56:9e:66:d9:8e:4a:e9:67:a4:c3:86:4d:86:
         9c:5b:e2:be:36:d7:31:f4:33:3b:4d:04:fa:3c:c9:02:dd:6c:
         fb:5b:35:7d:f1:b6:0f:a2:07:09:23:54:bb:8e:6c:12:3b:60:
         62:6a:7e:1c:0a:91:0f:47:63:14:40:42:39:98:68:65:6f:33:
         28:0f:90:15:49:8f:b3:ec:48:de:b7:b5:be:fb:23:9a:76:0b:
         5b:a8:fd:80:df:71:bd:78:f6:d4:d5:87:fd:12:2a:0a:5a:4f:
         25:c0:41:ea:ec:f0:f4:6f:6b:93:c4:c4:66:e4:c9:07:6d:d7:
         4a:70:a2:e4:d8:40:54:c2:7c:fa:81:7b:d0:b8:2e:d4:c5:9e:
         b2:14:05:c7:87:4e:ef:eb:56:8f:a0:a7:99:9b:3b:98:63:81:
         53:5f:71:09:ef:fa:8c:32:82:4e:eb:49:6d:5d:fc:08:55:52:
         1f:ec:47:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:03:58 2024 by rpki-client on console-fra.rpki-client.org