Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/34352e3233382e37322e302f32322d3332203d3e20323638333238.roa
File:                     34352e3233382e37322e302f32322d3332203d3e20323638333238.roa (raw, json)
Hash identifier:          qYMr6pnNtpMSrD28RDnPEpF6CJESmfWkjpEEh47L64Q=
Subject key identifier:   C2:5C:1F:FE:C3:15:56:6C:9D:FD:BC:A1:82:EF:03:F9:6D:B1:8C:2F
Certificate issuer:       /CN=E6E6AF41B9D58C2D534839F63D9C82E00609A428
Certificate serial:       79C3B8F495D9EE592EB3560E46FAEC3A60E2BE33
Authority key identifier: E6:E6:AF:41:B9:D5:8C:2D:53:48:39:F6:3D:9C:82:E0:06:09:A4:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E6AF41B9D58C2D534839F63D9C82E00609A428.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/34352e3233382e37322e302f32322d3332203d3e20323638333238.roa
Signing time:             Tue 23 Apr 2024 12:51:59 +0000
ROA not before:           Tue 23 Apr 2024 12:46:59 +0000
ROA not after:            Tue 22 Apr 2025 12:51:59 +0000
asID:                     268328
IP address blocks:        45.238.72.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/E6E6AF41B9D58C2D534839F63D9C82E00609A428.crl
                          rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/E6E6AF41B9D58C2D534839F63D9C82E00609A428.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E6AF41B9D58C2D534839F63D9C82E00609A428.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c3:b8:f4:95:d9:ee:59:2e:b3:56:0e:46:fa:ec:3a:60:e2:be:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E6AF41B9D58C2D534839F63D9C82E00609A428
        Validity
            Not Before: Apr 23 12:46:59 2024 GMT
            Not After : Apr 22 12:51:59 2025 GMT
        Subject: CN=C25C1FFEC315566C9DFDBCA182EF03F96DB18C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:96:bb:ea:60:ed:d2:36:61:e8:12:28:ec:e3:
                    e3:5b:b9:fc:1a:a0:6b:38:02:f9:6c:ec:da:47:1f:
                    ee:41:82:8f:90:b2:1f:f5:6e:c2:ec:f4:87:e5:05:
                    42:2e:fc:bc:b8:e2:19:80:65:2f:09:1c:67:c4:46:
                    92:d8:e0:b9:06:a8:92:c7:32:8d:3a:34:8b:de:cf:
                    15:ab:47:cf:e7:7b:59:06:52:61:73:56:19:b8:ec:
                    4d:6c:b7:aa:2b:e7:28:15:f0:86:19:1c:01:8c:1e:
                    3f:ec:1b:ee:b7:d1:15:7e:f2:71:82:86:4a:ce:6c:
                    1e:30:e1:be:f4:c6:66:49:51:ad:76:b3:27:0e:6c:
                    e2:13:1b:af:ed:20:c4:c8:9d:ee:a4:4b:42:f3:71:
                    96:95:cd:24:e4:5a:0c:66:ab:b1:81:2c:0d:c6:8d:
                    71:61:bc:13:6b:25:21:0b:07:5d:89:1e:56:ba:1d:
                    21:58:40:06:6c:a5:d4:fd:f7:7a:34:0c:5f:b4:cd:
                    22:b2:19:44:63:f3:5a:15:3d:90:85:64:62:f1:e6:
                    c6:87:e3:3b:74:97:21:65:dd:c8:70:36:9a:5b:34:
                    f6:1f:c2:b3:6c:e1:2a:e0:8e:ef:6c:22:48:da:5c:
                    46:25:34:a6:5b:8e:a7:18:34:6b:1a:c5:e2:86:57:
                    0a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5C:1F:FE:C3:15:56:6C:9D:FD:BC:A1:82:EF:03:F9:6D:B1:8C:2F
            X509v3 Authority Key Identifier:
                keyid:E6:E6:AF:41:B9:D5:8C:2D:53:48:39:F6:3D:9C:82:E0:06:09:A4:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/E6E6AF41B9D58C2D534839F63D9C82E00609A428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E6AF41B9D58C2D534839F63D9C82E00609A428.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/34352e3233382e37322e302f32322d3332203d3e20323638333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:32:5d:c4:30:10:8e:a9:cd:99:e1:47:29:2c:a2:49:1a:23:
         eb:0a:ea:2f:3c:73:2d:16:f0:cd:65:5f:70:36:c6:26:85:55:
         08:9e:4b:2b:d9:e5:5e:69:ab:94:96:50:ef:3b:8b:dd:9f:0d:
         ad:b7:96:aa:01:19:13:4b:a2:7f:cc:c6:95:37:49:e2:f5:86:
         81:cd:fa:20:83:ed:4a:0a:24:7e:f8:7b:dd:d2:b4:9d:44:49:
         ea:1d:67:66:e2:83:cf:25:5a:1a:91:a4:7b:8b:ae:09:fa:b1:
         97:17:de:28:d0:36:96:e3:5b:1e:b5:1c:47:fa:e0:51:9c:71:
         e4:08:99:b0:c6:e0:6c:17:e7:94:19:e6:b7:f1:be:bb:0d:f5:
         ec:d6:b8:9d:b2:0c:39:e9:8a:d2:b2:fe:df:0e:f2:91:0c:a6:
         6b:5a:00:48:31:8c:60:54:07:66:25:44:13:03:67:ce:a5:af:
         cc:fa:79:5e:09:a4:7e:06:09:f6:a3:3d:4a:dd:ce:14:7a:94:
         4b:a9:dc:36:07:5c:e3:03:57:17:53:45:97:da:94:7a:b3:b3:
         9b:81:d8:0b:29:5b:e7:71:06:fd:09:1d:1e:03:28:34:56:e5:
         26:80:8d:be:62:74:94:a7:74:62:b6:9b:d2:bb:01:bb:91:89:
         da:75:d6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:17 2024 by rpki-client on console-fra.rpki-client.org