Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3233302e302f32332d3233203d3e20323632363137.roa
File:                     34352e36352e3233302e302f32332d3233203d3e20323632363137.roa (raw, json)
Hash identifier:          3QP8AjMSD7HC6DksB17l8iJtbntLzpcVvZLKzLuU+4w=
Subject key identifier:   1B:B7:8A:0C:F7:07:54:E1:B0:8C:2F:0E:66:39:96:54:BE:1C:10:16
Certificate issuer:       /CN=392AEBF74273723B76684580562B17A77CDEF042
Certificate serial:       428B469B5543D025D7330C33F6C272C63318F15B
Authority key identifier: 39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3233302e302f32332d3233203d3e20323632363137.roa
Signing time:             Thu 04 Apr 2024 18:18:28 +0000
ROA not before:           Thu 04 Apr 2024 18:13:28 +0000
ROA not after:            Thu 03 Apr 2025 18:18:28 +0000
asID:                     262617
IP address blocks:        45.65.230.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8b:46:9b:55:43:d0:25:d7:33:0c:33:f6:c2:72:c6:33:18:f1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392AEBF74273723B76684580562B17A77CDEF042
        Validity
            Not Before: Apr  4 18:13:28 2024 GMT
            Not After : Apr  3 18:18:28 2025 GMT
        Subject: CN=1BB78A0CF70754E1B08C2F0E66399654BE1C1016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c1:c4:b5:91:2e:c8:5b:a6:b8:f9:2e:ec:fa:
                    6c:fd:e7:7d:ff:46:72:74:08:05:f2:58:22:2e:dd:
                    cc:1d:d4:e7:f0:3a:02:e9:7f:dd:1c:cc:cd:f3:fa:
                    a9:4b:1f:0b:09:8f:15:17:db:f2:74:9b:f4:23:3d:
                    8d:10:e8:38:85:8d:68:2d:50:57:85:5a:a4:ce:db:
                    b0:30:4e:1e:17:d8:f3:7b:de:46:15:f2:85:ff:a1:
                    a0:6b:7f:f4:53:bf:df:c8:5c:3c:4f:3f:ff:b9:ee:
                    bc:da:48:94:cf:04:11:97:2a:a0:f5:bb:ff:c3:98:
                    0c:47:2a:21:2e:aa:8c:55:11:15:10:11:eb:3c:5c:
                    c4:56:6b:a9:9c:58:f5:9b:3d:19:b8:4b:c1:4f:92:
                    45:b9:1b:23:d3:9f:a6:2b:cf:62:09:72:de:f2:ff:
                    d9:7c:72:e0:14:a8:09:f4:dd:ae:12:26:da:02:88:
                    2c:15:8b:fb:87:88:c5:0c:1e:64:47:2f:7e:c7:e5:
                    db:4a:23:b8:09:cb:29:e8:37:9f:cd:2c:dc:99:7c:
                    94:46:f5:02:a8:fe:6d:a8:2b:7c:20:8a:41:9f:6c:
                    b9:3c:ba:e4:fe:7b:0f:ee:8e:16:52:89:38:46:25:
                    19:65:8e:20:04:bc:a0:fb:0e:4f:43:dc:59:1c:52:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B7:8A:0C:F7:07:54:E1:B0:8C:2F:0E:66:39:96:54:BE:1C:10:16
            X509v3 Authority Key Identifier:
                keyid:39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3233302e302f32332d3233203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:02:00:a1:27:d5:f8:8d:db:57:07:44:fb:36:e1:93:53:63:
         53:c9:3c:b9:f1:da:7e:a6:10:c0:10:eb:43:66:c8:f2:df:5e:
         c2:cd:ed:30:24:d7:e3:26:be:59:7b:4a:0d:bc:42:1c:b3:f8:
         fb:f3:34:1a:de:d4:ca:75:0e:1b:0a:e1:2e:e3:fd:f2:91:ff:
         98:07:6d:06:6c:0d:57:60:df:88:5b:f4:63:ed:8a:b2:90:55:
         eb:a4:8e:4e:7c:1c:93:29:c4:4b:66:0a:1e:81:56:cb:30:31:
         ff:42:71:39:74:a8:74:ab:bf:14:fc:00:3e:d8:11:7a:f2:64:
         89:09:16:8f:6c:97:73:7b:c6:cd:aa:40:89:00:ae:af:18:0f:
         38:5c:d0:1f:fd:d0:f2:5f:a1:b3:e7:82:cf:16:7a:0d:0e:5b:
         66:e5:c8:4f:f2:45:f1:f9:00:86:3b:c8:e0:c7:14:e3:e4:64:
         d8:14:2c:2a:86:4f:c3:6c:f6:53:23:46:77:bc:a4:86:7e:2c:
         7c:61:f2:99:93:28:44:f4:27:82:64:2e:4d:fe:b7:0e:a6:00:
         50:15:5d:e0:3f:68:28:ee:d6:38:42:ce:65:78:33:42:05:7f:
         80:98:56:b7:10:5c:8c:77:a9:61:6d:b9:aa:24:3b:18:5d:6d:
         cb:a5:8e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org