Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa
File:                     34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa (raw, json)
Hash identifier:          wcfe7UJ64MCo0Q2488q5lzFxH8+r907X8WF8LDuykfs=
Subject key identifier:   51:7D:32:DD:36:8B:10:AA:52:D5:FD:AD:B2:7D:69:21:F0:39:39:7D
Certificate issuer:       /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
Certificate serial:       67478D7CC94B17A25A5CE7345C988548E457C8BD
Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa
Signing time:             Sat 31 Aug 2024 19:37:01 +0000
ROA not before:           Sat 31 Aug 2024 19:32:01 +0000
ROA not after:            Sat 30 Aug 2025 19:37:01 +0000
asID:                     269626
IP address blocks:        45.190.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl
                          rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:47:8d:7c:c9:4b:17:a2:5a:5c:e7:34:5c:98:85:48:e4:57:c8:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
        Validity
            Not Before: Aug 31 19:32:01 2024 GMT
            Not After : Aug 30 19:37:01 2025 GMT
        Subject: CN=517D32DD368B10AA52D5FDADB27D6921F039397D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:0f:25:e2:c9:2c:ea:fc:e1:f8:49:e8:e3:
                    41:54:21:54:01:63:46:60:d4:ba:b7:bf:46:03:88:
                    ad:7f:65:9d:5b:2f:36:43:05:96:b0:2c:13:54:a0:
                    39:1c:ff:d9:ae:db:f1:46:9c:a2:63:40:13:52:69:
                    5d:1e:a6:6d:b6:68:56:16:93:9c:36:0b:49:cf:ca:
                    ac:3b:bd:4e:7b:9c:9c:c2:9c:1b:cd:ee:8e:0e:6c:
                    50:2a:5f:fa:d7:f5:7d:3b:25:ee:03:b3:45:69:7a:
                    e9:ae:1a:46:cf:8c:33:8d:46:6a:c7:c0:4a:4e:4a:
                    63:6a:81:e8:8f:ff:d6:a9:76:5c:62:89:e0:b2:85:
                    01:dd:c6:02:61:59:36:28:c4:bf:ba:bb:3c:e9:85:
                    02:30:10:33:3a:a6:2d:1d:df:ea:9b:6c:1d:24:62:
                    c8:f9:2d:fc:8d:3c:7f:7c:16:69:0f:ab:f7:ca:bd:
                    fe:6f:34:73:5c:3a:2e:99:11:b9:a6:69:e4:62:d6:
                    15:42:9c:d1:fe:0c:04:b5:a2:8e:88:ad:06:83:6f:
                    39:03:1a:62:c5:f5:a4:b2:b6:f9:70:0a:4f:91:29:
                    22:f2:70:bf:36:1f:0b:11:42:b8:ea:23:3a:00:35:
                    e0:30:ef:44:2a:db:82:0e:69:63:e1:88:1d:fd:b8:
                    b6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7D:32:DD:36:8B:10:AA:52:D5:FD:AD:B2:7D:69:21:F0:39:39:7D
            X509v3 Authority Key Identifier:
                keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:d9:e7:9e:01:5d:21:2e:39:c5:e6:12:ba:78:b8:e3:0b:72:
         b1:b7:9e:bf:e8:e6:bc:c7:2d:24:15:33:0b:cf:bb:dc:61:d4:
         a0:6d:4b:5d:4b:34:e9:5e:7a:0a:90:85:87:83:0f:a5:1c:6c:
         2b:ea:71:72:5e:97:8e:33:33:e0:5f:f2:ba:3e:f7:70:80:ae:
         81:91:ec:0c:d7:12:78:ac:fb:0d:a8:89:52:b3:8b:a1:e3:54:
         b4:b7:7e:f1:20:54:77:df:c1:04:33:94:f3:d0:73:e7:ed:46:
         b8:7d:b4:84:20:4d:4d:83:9d:43:9b:db:ad:27:f8:67:9b:50:
         61:ec:9a:ae:ea:49:41:42:11:9c:93:c0:01:39:b2:79:09:dd:
         91:33:ae:ef:35:72:7f:c1:4d:c6:d1:31:62:aa:f4:b8:ce:7a:
         a9:22:6b:ae:10:7a:27:5d:9d:51:34:f8:fe:a3:ee:a6:e6:4b:
         93:ed:63:65:5b:ad:f1:72:89:3a:c6:3f:af:f1:59:f7:a9:8f:
         11:55:4d:32:6c:23:8c:26:34:96:d9:9d:fd:41:78:33:81:e0:
         e8:b8:ba:81:b9:50:e9:a0:b5:8c:a0:6e:11:40:bf:2b:98:90:
         90:41:93:d1:eb:b0:2b:e6:4c:44:3d:c7:9f:d3:6d:94:c2:96:
         42:bf:df:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:34 2024 by rpki-client on console-ams.rpki-client.org