Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e3138342e3134342e302f32322d3332203d3e2030.roa
File:                     34352e3138342e3134342e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier:          tmylSaszTs41gQKn6GZ3iyvCGzqC9+ucGdoGfw+adac=
Subject key identifier:   5D:FE:67:7C:18:81:93:D0:3E:04:C8:FB:6F:C7:2E:75:23:D4:94:E1
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       201CB8BB8016630DBD65769CEEDC177394D6838C
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e3138342e3134342e302f32322d3332203d3e2030.roa
Signing time:             Mon 15 Apr 2024 17:43:59 +0000
ROA not before:           Mon 15 Apr 2024 17:38:59 +0000
ROA not after:            Mon 14 Apr 2025 17:43:59 +0000
asID:                     0
IP address blocks:        45.184.144.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1c:b8:bb:80:16:63:0d:bd:65:76:9c:ee:dc:17:73:94:d6:83:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:59 2024 GMT
            Not After : Apr 14 17:43:59 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:ba:01:4d:99:44:fc:57:72:b2:05:72:d1:
                    76:b7:b1:92:2c:a2:5b:94:b2:ac:3d:a2:15:c1:47:
                    a3:c6:d8:61:d9:78:7f:58:fc:2d:66:a9:9b:83:49:
                    be:cc:e4:66:85:cd:38:88:53:ae:fd:18:fc:b7:75:
                    de:44:48:62:b9:2b:54:93:f1:21:70:26:8c:c9:48:
                    ac:33:d0:96:9b:6e:c8:2b:fd:1e:cc:01:90:5f:9d:
                    e6:f2:17:dc:8a:22:22:33:e4:70:b9:88:bd:55:19:
                    f1:80:3b:de:56:40:17:19:0a:15:a0:fa:80:76:f0:
                    f0:86:d8:64:88:80:41:0f:50:69:1d:3f:ae:2c:cd:
                    c3:68:33:5c:68:da:93:77:81:0f:be:9b:c7:1b:b4:
                    cb:88:24:c6:c8:2e:56:3a:35:4d:1c:ed:16:d3:05:
                    4a:89:d8:0b:21:71:69:30:3f:98:ac:ae:2d:37:f8:
                    c3:a9:83:87:bb:ea:60:9b:14:58:22:8a:fc:51:c4:
                    ea:c0:db:18:73:42:b6:b5:5c:6e:2a:02:29:a9:cc:
                    f7:c7:a5:53:1c:67:3b:22:2b:d2:d4:01:8b:d0:bc:
                    8c:38:38:6d:2a:be:74:94:0a:7b:57:90:bd:17:7a:
                    0d:23:d2:9d:a0:9c:e1:88:e9:0c:51:24:9b:12:7c:
                    71:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FE:67:7C:18:81:93:D0:3E:04:C8:FB:6F:C7:2E:75:23:D4:94:E1
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e3138342e3134342e302f32322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:83:7c:a1:d6:10:dc:d6:5f:cc:ed:1b:b8:f9:4d:b9:d0:d1:
         22:08:08:ea:f0:a4:c3:e9:41:1a:d5:e6:5f:97:a1:8e:21:ea:
         55:78:5a:d0:f9:36:2a:20:bd:df:cd:67:b9:81:c0:72:9e:24:
         fe:9f:43:d0:9b:46:1b:9e:10:d1:94:64:3a:09:a5:b6:6a:4b:
         29:a9:0b:37:e1:fe:d6:11:01:2b:83:61:bd:bd:7a:c1:9c:29:
         2f:0f:8b:a6:31:3a:c5:05:a2:14:ac:48:38:ed:8a:7c:18:dd:
         b5:97:c2:60:c5:10:6a:94:2d:be:9c:06:90:f6:31:f5:ed:de:
         de:e5:da:9b:12:22:d3:8d:2a:c7:05:6e:dc:d3:ed:d0:5f:1c:
         e5:62:7f:00:b3:a4:84:4e:1a:84:d9:5e:e3:60:8f:b7:c9:81:
         d9:30:c5:cd:94:25:c5:9e:5f:34:c7:c8:83:09:fb:54:84:37:
         e3:b7:f4:e3:25:5a:5c:67:e7:98:8e:8d:2e:48:b8:56:e4:59:
         1b:be:35:d8:85:ba:1a:99:36:9f:ec:6a:d4:93:e3:93:71:32:
         cd:8e:6e:28:63:b3:1a:91:89:30:a8:44:89:1e:8f:89:41:bd:
         66:56:cb:c6:4b:f6:38:99:eb:e0:28:89:d6:75:8b:57:11:79:
         02:73:81:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:56 2024 by rpki-client on console-ams.rpki-client.org