Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/1/34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa
File:                     34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa (raw, json)
Hash identifier:          19pcaOk9d2isBs1QsgcAQUH/q+VW4IRne7Kjf17/Pjc=
Subject key identifier:   E1:C7:52:6B:B9:B6:A9:22:51:07:08:B8:DE:1E:04:80:26:BC:21:AE
Certificate issuer:       /CN=CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0
Certificate serial:       68C4C11236F81DBD9C6F337C4B11244D4A32B607
Authority key identifier: CF:77:95:52:DE:5E:A3:7B:1A:37:7A:CC:79:C7:AF:3B:D8:07:BB:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/1/34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa
Signing time:             Thu 04 Apr 2024 22:37:39 +0000
ROA not before:           Thu 04 Apr 2024 22:32:39 +0000
ROA not after:            Thu 03 Apr 2025 22:37:39 +0000
asID:                     267270
IP address blocks:        45.232.156.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/1/CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0.crl
                          rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/1/CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c4:c1:12:36:f8:1d:bd:9c:6f:33:7c:4b:11:24:4d:4a:32:b6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0
        Validity
            Not Before: Apr  4 22:32:39 2024 GMT
            Not After : Apr  3 22:37:39 2025 GMT
        Subject: CN=E1C7526BB9B6A922510708B8DE1E048026BC21AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:13:09:a2:f6:83:86:ef:c6:39:6e:e1:2a:
                    8e:e5:17:23:d8:93:30:b4:00:12:8e:e7:68:67:35:
                    3e:d2:f5:84:62:b3:9c:55:99:79:38:15:0a:5c:f6:
                    6c:c6:5d:cf:9e:a5:d1:79:3d:b2:b7:56:3e:a8:8b:
                    ce:37:6a:ca:dc:3f:82:ed:03:6e:88:00:8c:49:59:
                    c0:64:c6:e6:a1:08:35:3d:0f:44:40:2b:ae:d1:62:
                    c5:7c:81:e2:4e:6c:1c:6b:b7:1d:60:19:1d:88:3b:
                    dd:ae:dd:6b:06:89:77:59:05:eb:f1:88:c6:04:65:
                    00:de:6a:02:7d:b3:14:7f:a3:f1:50:8a:e9:89:a6:
                    2c:f4:af:a8:24:21:81:4b:7e:8d:88:a5:ba:bb:11:
                    46:f0:c6:8c:e5:86:59:4c:92:94:de:61:d0:7c:42:
                    c7:d9:8c:bf:f9:39:5a:db:d1:cf:b4:c0:c7:60:3a:
                    1a:81:8c:42:49:c6:4d:bd:58:2d:e1:13:2c:12:32:
                    a1:8c:6b:e3:2f:cf:72:7b:4e:96:75:a3:e0:f5:f8:
                    80:30:e7:59:18:2d:c3:43:0d:8c:03:3c:e2:87:da:
                    23:b5:66:59:ea:c5:6c:11:0a:0c:9c:b1:87:0a:58:
                    7f:f3:df:7b:a7:19:6a:f8:ec:cd:88:81:9d:45:a1:
                    9d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C7:52:6B:B9:B6:A9:22:51:07:08:B8:DE:1E:04:80:26:BC:21:AE
            X509v3 Authority Key Identifier:
                keyid:CF:77:95:52:DE:5E:A3:7B:1A:37:7A:CC:79:C7:AF:3B:D8:07:BB:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/1/CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF779552DE5EA37B1A377ACC79C7AF3BD807BBA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/1/34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:1a:00:ae:ec:96:a1:95:02:ae:a0:c7:b5:d4:e3:b9:77:17:
         02:0d:b5:79:f4:15:0c:f5:80:dd:bb:4c:4a:8f:eb:fd:7f:47:
         c1:d7:13:59:2e:41:a7:0c:ec:b4:35:7d:c9:df:6b:48:25:67:
         af:19:b3:c1:17:ef:86:67:b0:1e:26:71:07:bf:0a:ff:7f:36:
         83:d2:37:67:70:c5:89:61:f5:36:3a:a6:ae:fa:fa:a3:58:06:
         41:a5:2c:83:98:fc:4f:d6:eb:16:2b:b1:ee:48:43:4c:e7:0d:
         44:2c:1a:32:55:c4:23:bc:c3:f7:75:65:04:c2:4f:83:56:4a:
         fc:3c:fa:66:41:c4:b7:23:54:16:ab:8b:40:09:f6:60:7b:32:
         03:a4:5d:29:e0:fe:f4:57:a4:a6:79:69:18:1a:43:2c:16:ce:
         e3:97:db:3d:20:95:6b:6a:33:1f:ff:a2:34:28:80:28:90:e9:
         32:94:2e:ec:ee:bf:50:03:c2:d0:42:bc:72:c9:78:4e:6e:5c:
         2b:f9:ae:90:27:90:62:b1:b5:1d:67:f4:cd:16:ea:ab:54:d7:
         08:3a:31:68:4e:91:53:d7:d3:d6:a8:a2:ab:2e:6b:cd:11:d2:
         f2:6d:a0:b7:48:d0:52:23:da:2f:0e:01:02:3e:71:56:f6:c2:
         bc:b8:8f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:14 2024 by rpki-client on console-ams.rpki-client.org