Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37322e302f32322d3232203d3e20323638313533.roa
File:                     34352e3137302e37322e302f32322d3232203d3e20323638313533.roa (raw, json)
Hash identifier:          /rKHUVOwPbjyXpVNiCGfaCQvL44diBLMdnyvwg3QzUk=
Subject key identifier:   9A:E6:97:5F:12:7E:4D:FD:19:57:25:F3:BA:6C:7A:6E:FD:E9:1B:61
Certificate issuer:       /CN=6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438
Certificate serial:       62CC5F82B70E33D614CE08C4FB9F5AF64E07E105
Authority key identifier: 6B:DD:E9:7E:C2:F2:BE:52:8B:DA:85:FA:60:EA:EA:59:78:0E:A4:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37322e302f32322d3232203d3e20323638313533.roa
Signing time:             Thu 04 Apr 2024 00:54:55 +0000
ROA not before:           Thu 04 Apr 2024 00:49:55 +0000
ROA not after:            Thu 03 Apr 2025 00:54:55 +0000
asID:                     268153
IP address blocks:        45.170.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.crl
                          rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cc:5f:82:b7:0e:33:d6:14:ce:08:c4:fb:9f:5a:f6:4e:07:e1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438
        Validity
            Not Before: Apr  4 00:49:55 2024 GMT
            Not After : Apr  3 00:54:55 2025 GMT
        Subject: CN=9AE6975F127E4DFD195725F3BA6C7A6EFDE91B61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:e9:2c:63:68:3f:48:b9:83:6c:c9:c0:71:
                    ae:d8:a8:32:19:3b:c7:e7:c9:c4:17:31:c7:0c:b3:
                    17:0f:dc:ff:15:8b:73:79:e1:97:8f:e6:9b:42:85:
                    3d:e8:14:03:9e:ef:79:0b:e6:8a:06:44:b4:9c:5b:
                    b8:44:93:3c:db:84:ae:97:2b:1a:57:b0:38:f6:74:
                    38:ac:7b:c2:88:33:d4:38:62:46:04:0c:71:c3:d0:
                    4f:93:e0:1b:03:e9:45:a0:e3:00:89:a7:0d:ec:66:
                    aa:3a:a9:55:c3:72:a0:75:6b:a8:a5:fb:06:d1:1e:
                    8b:c7:84:17:64:4f:e8:c5:15:9b:31:b0:69:2b:13:
                    58:f0:ec:10:fa:21:9d:43:08:5d:fd:3a:b7:60:22:
                    56:79:51:1e:65:90:ce:75:e3:64:5d:9d:04:ca:f0:
                    68:45:32:28:99:b6:07:1b:e4:23:5a:83:b4:8c:52:
                    13:81:72:27:06:4a:9b:d3:4b:94:81:ce:4c:5e:0d:
                    02:c6:91:d7:0b:ff:1d:c7:c0:34:e9:9b:c5:7e:30:
                    48:cf:f6:0b:83:10:42:9e:f7:b1:7e:62:b7:17:41:
                    22:29:86:ce:61:bd:87:3a:3c:d6:eb:75:97:87:f4:
                    ec:af:cb:ea:0b:bf:3a:d0:60:ee:31:48:68:7c:6e:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E6:97:5F:12:7E:4D:FD:19:57:25:F3:BA:6C:7A:6E:FD:E9:1B:61
            X509v3 Authority Key Identifier:
                keyid:6B:DD:E9:7E:C2:F2:BE:52:8B:DA:85:FA:60:EA:EA:59:78:0E:A4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37322e302f32322d3232203d3e20323638313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:51:0f:db:7c:77:f2:72:b3:1b:8c:2c:a1:01:5b:2b:12:39:
         13:10:e0:b1:39:f8:dd:8a:7d:07:13:03:73:3b:da:12:ae:48:
         ff:02:8b:ec:9d:e2:c2:b4:e0:7d:d7:a0:3e:8a:80:fb:d5:18:
         19:a2:dd:10:38:13:9f:f9:f7:6e:12:be:ef:b7:5c:2a:b9:2b:
         d7:90:74:e6:ac:9b:ab:bf:2d:3c:5a:5d:0d:c3:a3:c6:dd:c1:
         39:a2:99:a4:ae:45:3f:3d:51:22:e0:a1:54:92:a7:a7:5b:5f:
         cf:8a:06:82:53:9d:86:fb:84:ba:ee:a6:4a:61:ca:44:d8:c9:
         63:d0:0d:6e:58:c9:4e:61:08:78:0d:56:d0:f9:08:be:f1:6d:
         4c:39:cd:01:86:df:73:cd:ea:ea:33:e2:ef:dc:89:13:18:80:
         06:d3:6e:20:6f:ae:08:c1:89:83:67:42:22:b8:55:b5:f1:5c:
         01:bb:c9:16:14:8d:d3:e9:e4:f3:a5:f6:25:15:b3:be:50:e4:
         70:26:dc:89:73:3a:63:fb:d4:84:3f:59:2a:88:8b:a5:27:c7:
         5f:56:8d:68:94:67:48:64:b0:58:67:c1:f6:be:ee:3b:93:9b:
         f5:4a:28:e9:cd:73:71:94:85:a9:dc:38:46:a2:dc:9f:9e:53:
         2e:37:52:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org