Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/34352e372e3232342e302f32322d3234203d3e20323636363135.roa
File:                     34352e372e3232342e302f32322d3234203d3e20323636363135.roa (raw, json)
Hash identifier:          w+uVf9gdpRU2xYZouy8MuOniKRFYyXFcplY07AKau80=
Subject key identifier:   C6:5E:69:86:E5:4E:0E:E2:19:E8:46:0A:C7:AF:3F:7E:56:74:D2:93
Certificate issuer:       /CN=72F69467673B0BB3A13EC651F1D0BF66BAE31FD8
Certificate serial:       695032119157F67766D1EC107742015D1AD70D64
Authority key identifier: 72:F6:94:67:67:3B:0B:B3:A1:3E:C6:51:F1:D0:BF:66:BA:E3:1F:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/34352e372e3232342e302f32322d3234203d3e20323636363135.roa
Signing time:             Thu 04 Apr 2024 09:06:56 +0000
ROA not before:           Thu 04 Apr 2024 09:01:56 +0000
ROA not after:            Thu 03 Apr 2025 09:06:56 +0000
asID:                     266615
IP address blocks:        45.7.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl
                          rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 00:30:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:50:32:11:91:57:f6:77:66:d1:ec:10:77:42:01:5d:1a:d7:0d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F69467673B0BB3A13EC651F1D0BF66BAE31FD8
        Validity
            Not Before: Apr  4 09:01:56 2024 GMT
            Not After : Apr  3 09:06:56 2025 GMT
        Subject: CN=C65E6986E54E0EE219E8460AC7AF3F7E5674D293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:00:5c:d4:45:3d:74:9e:ad:4a:c8:a1:5f:
                    b8:a6:43:0f:20:ee:ef:89:17:20:28:b9:f3:f9:46:
                    ef:67:d1:70:35:b2:c0:c6:c4:1b:5b:3c:51:87:c6:
                    88:81:a2:d8:f3:18:4a:bf:e7:52:d5:aa:67:fa:90:
                    65:b5:c1:d6:08:92:6c:5d:a0:e5:6c:be:fb:fc:3f:
                    f4:58:08:8a:f8:6e:c3:da:c3:b3:0f:6c:d6:76:ed:
                    4a:94:28:94:99:55:cf:46:27:4b:6e:d0:c0:86:87:
                    fe:c5:11:85:b6:d2:03:5b:b4:e1:d8:48:e8:8f:2c:
                    72:29:87:a4:5a:98:80:b0:25:04:bb:2d:34:fc:32:
                    e9:45:6a:0e:43:c2:e1:47:98:54:e5:b1:a3:a8:55:
                    0e:aa:70:96:90:52:4f:83:b9:1b:4e:ce:57:83:22:
                    77:8b:17:22:aa:50:29:e2:b6:51:43:58:ca:71:8e:
                    7c:e9:81:88:0b:d1:46:43:b4:f8:de:f6:88:e2:6f:
                    85:d7:9e:1e:85:18:cf:29:04:aa:b7:cd:2b:66:76:
                    73:f9:e3:2f:c8:04:8b:4a:68:27:23:5c:b5:8d:01:
                    87:e7:d9:a2:42:2d:78:38:a7:8b:a9:82:d4:99:cb:
                    f7:26:46:22:c1:32:b4:2d:01:3e:3c:48:a2:dd:b5:
                    1f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5E:69:86:E5:4E:0E:E2:19:E8:46:0A:C7:AF:3F:7E:56:74:D2:93
            X509v3 Authority Key Identifier:
                keyid:72:F6:94:67:67:3B:0B:B3:A1:3E:C6:51:F1:D0:BF:66:BA:E3:1F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/34352e372e3232342e302f32322d3234203d3e20323636363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:f4:53:73:7c:b4:b6:f2:fb:9f:32:c4:21:b0:86:f6:bf:c3:
         fe:5a:7a:1e:56:9e:78:81:fe:05:62:87:86:eb:df:1b:07:d2:
         f9:a6:97:10:27:e9:6c:ce:5b:4d:a0:1f:fd:21:a2:58:9d:67:
         00:ed:c9:f1:b4:79:32:47:81:69:19:6b:63:9c:42:a9:ec:2f:
         06:87:e9:5e:96:cd:b8:7c:be:d3:56:ef:a2:d6:e7:e8:9d:92:
         8c:e7:cd:bc:9a:2a:51:ad:f1:4a:03:d8:b4:07:88:b5:49:c4:
         9f:ba:68:b1:96:fb:aa:6d:c7:94:18:a4:3a:d0:ec:89:4c:7a:
         b1:9d:cd:f8:eb:56:a6:79:09:28:39:59:7b:c8:7b:4b:6b:bb:
         83:d4:e5:15:dd:13:60:82:81:e4:59:bb:3d:be:49:31:97:64:
         69:db:19:ca:f8:43:98:92:37:4f:aa:c8:63:67:c0:00:f8:83:
         46:5a:0d:7f:04:64:11:56:63:50:e4:57:6b:09:ef:b0:41:d7:
         cf:08:72:e3:bd:97:b3:ac:35:0f:10:2f:96:54:5e:ed:bf:a1:
         43:76:b3:ca:0f:94:d1:bd:be:fe:e6:55:ab:ea:4a:10:d1:9e:
         25:bc:ac:94:26:9b:14:8c:2b:79:93:05:1b:ee:1f:7e:99:e5:
         3c:30:ae:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:26:30 2024 by rpki-client on console-fra.rpki-client.org