Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/34352e3136312e3130302e302f32322d3234203d3e20323638343538.roa
File:                     34352e3136312e3130302e302f32322d3234203d3e20323638343538.roa (raw, json)
Hash identifier:          JkRhppaDZABN2Dx0W2kCZzFyUbm/bDlsck0TjxgkVbg=
Subject key identifier:   C7:D0:53:57:BA:49:D0:46:0A:3E:21:65:CB:EA:B6:EA:6E:58:09:58
Certificate issuer:       /CN=AC469298E4E56983439AA441B4B6CAFBB04F8F28
Certificate serial:       32221551420AEB407A8E630F814D8BA6E03CB7DF
Authority key identifier: AC:46:92:98:E4:E5:69:83:43:9A:A4:41:B4:B6:CA:FB:B0:4F:8F:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/34352e3136312e3130302e302f32322d3234203d3e20323638343538.roa
Signing time:             Thu 04 Apr 2024 22:45:16 +0000
ROA not before:           Thu 04 Apr 2024 22:40:16 +0000
ROA not after:            Thu 03 Apr 2025 22:45:16 +0000
asID:                     268458
IP address blocks:        45.161.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.crl
                          rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:22:15:51:42:0a:eb:40:7a:8e:63:0f:81:4d:8b:a6:e0:3c:b7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC469298E4E56983439AA441B4B6CAFBB04F8F28
        Validity
            Not Before: Apr  4 22:40:16 2024 GMT
            Not After : Apr  3 22:45:16 2025 GMT
        Subject: CN=C7D05357BA49D0460A3E2165CBEAB6EA6E580958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:41:22:9f:c4:b4:73:34:11:8d:76:56:8f:
                    8c:06:bd:77:44:a8:e0:e6:d9:93:52:2d:fc:9f:4a:
                    86:9d:16:33:c2:da:dd:ce:5d:26:e5:33:34:a6:e7:
                    c1:ca:e4:64:27:c8:47:70:af:cf:7b:75:dc:de:31:
                    e9:ad:ae:87:fa:1b:23:76:ba:af:8f:42:65:1e:9a:
                    58:f3:8e:e4:e8:95:78:20:83:b8:18:0a:77:09:c1:
                    fd:79:7a:8b:3f:5b:eb:8a:3a:69:0e:ab:76:49:1e:
                    c9:da:09:2f:6d:49:e7:20:38:8d:de:f1:e1:ba:fb:
                    db:9e:59:45:ac:09:27:41:92:a5:c6:26:76:eb:36:
                    68:51:2a:0f:de:b5:f9:ff:e8:17:bf:6c:56:91:20:
                    e1:4b:c9:1e:c5:7c:ba:e7:db:ca:43:15:9b:b1:34:
                    4e:3b:b7:9b:45:62:fa:f2:b4:24:4e:54:35:37:78:
                    a9:e3:ea:8c:2a:24:86:48:90:49:ba:ee:a4:8b:bb:
                    ff:9f:95:89:44:88:b6:e6:8e:81:f1:d0:bb:c4:3b:
                    35:70:a2:e3:2f:40:78:d8:e5:87:5d:23:0d:3e:f9:
                    c3:ec:fc:38:3c:94:a5:63:b8:f3:8a:72:6f:e9:d2:
                    d4:16:32:a3:c3:42:02:62:3c:ed:02:9a:12:1b:63:
                    9c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D0:53:57:BA:49:D0:46:0A:3E:21:65:CB:EA:B6:EA:6E:58:09:58
            X509v3 Authority Key Identifier:
                keyid:AC:46:92:98:E4:E5:69:83:43:9A:A4:41:B4:B6:CA:FB:B0:4F:8F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/34352e3136312e3130302e302f32322d3234203d3e20323638343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:1e:1f:b8:0d:9a:5e:e5:63:90:73:ce:c3:c6:58:f0:c4:98:
         1c:3d:86:bf:ba:ce:3e:3d:2b:9f:d7:04:aa:ab:c3:f8:d5:07:
         87:20:c5:72:46:58:24:f7:ad:9c:37:04:22:bd:86:24:91:a6:
         c0:06:5b:14:86:ac:e0:ca:0a:86:48:39:f8:2f:78:70:83:7c:
         55:35:fd:6e:f6:fa:34:f9:6f:90:bc:66:74:74:87:c5:12:fe:
         87:95:c2:e7:60:15:26:65:3b:4f:ac:86:a9:5a:30:f8:5d:a3:
         bb:36:68:23:5b:9d:40:a9:59:47:64:dc:01:5b:3d:ea:40:04:
         e1:2c:38:df:28:d8:05:9d:d9:3f:3e:a6:69:10:5b:2c:8d:ad:
         0c:fd:cf:7a:46:07:b8:aa:f6:7e:3f:f9:14:4c:9b:59:5a:f9:
         00:f2:fa:7d:e5:67:ca:12:5d:b4:cb:e0:48:6b:95:fa:60:f9:
         ab:90:40:95:71:0f:a4:c9:fc:99:c7:c5:28:59:c3:2e:13:8f:
         46:68:51:b9:66:ae:93:94:a2:25:dc:76:a1:77:93:18:d1:ce:
         d9:3d:67:0b:1d:98:cb:75:8f:b8:63:df:98:0f:64:20:b6:fd:
         c2:c5:7d:ba:03:b6:c2:2b:66:a9:1c:c3:5b:06:42:c6:6c:4d:
         c9:35:1b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:55 2024 by rpki-client on console-ams.rpki-client.org