Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/34352e3138382e3134302e302f32332d3234203d3e20323639353332.roa
File:                     34352e3138382e3134302e302f32332d3234203d3e20323639353332.roa (raw, json)
Hash identifier:          nm0QDKaoRDb7CQv68oEWErnznnOjUrMGi7b6mOCbXoM=
Subject key identifier:   89:D9:BD:0B:74:97:24:8E:AF:5F:F4:00:02:4E:99:30:23:9A:14:0F
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       49973999AC7DC6765BA587D6F652BFD44D8F6695
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/34352e3138382e3134302e302f32332d3234203d3e20323639353332.roa
Signing time:             Wed 03 Apr 2024 18:31:33 +0000
ROA not before:           Wed 03 Apr 2024 18:26:33 +0000
ROA not after:            Wed 02 Apr 2025 18:31:33 +0000
asID:                     269532
IP address blocks:        45.188.140.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl
                          rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:97:39:99:ac:7d:c6:76:5b:a5:87:d6:f6:52:bf:d4:4d:8f:66:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Apr  3 18:26:33 2024 GMT
            Not After : Apr  2 18:31:33 2025 GMT
        Subject: CN=3082010A0282010100B036A64B21AAC4FC78825E89FDFCB9263D3F8549C6FC9B0248B72E454A5FDEC41C0CC8A3F9A3DD2C562C9F612F756CADE233DA3E8066EE09597991BF2DCAA2EAE8F9CF18B7991540A0154C8A56103BC473D6D860FA29B38D1B0CFC8ADF2D56941BFC8DE5CEB375CCB0C77383F7F6AD4FAE34EFAE54C3EE5CD8FC2909C2E838B90F4F31A885227682333C0DCB425C154DE15053F328D49DC86536FC52C1290C2A592640B05DEF35F7A0C2D0A55D5C9261C40AB9C4EBE4008CC81EE2352E9069130BB6B175E2A3A0F7E47823F4289E05F2CDAB23D5BE8F021E5B9B04185BA43CB024D08710350839257A3839CB2F62C63B8290B763E9F610CF3E8981616BB83F070203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:a6:4b:21:aa:c4:fc:78:82:5e:89:fd:fc:
                    b9:26:3d:3f:85:49:c6:fc:9b:02:48:b7:2e:45:4a:
                    5f:de:c4:1c:0c:c8:a3:f9:a3:dd:2c:56:2c:9f:61:
                    2f:75:6c:ad:e2:33:da:3e:80:66:ee:09:59:79:91:
                    bf:2d:ca:a2:ea:e8:f9:cf:18:b7:99:15:40:a0:15:
                    4c:8a:56:10:3b:c4:73:d6:d8:60:fa:29:b3:8d:1b:
                    0c:fc:8a:df:2d:56:94:1b:fc:8d:e5:ce:b3:75:cc:
                    b0:c7:73:83:f7:f6:ad:4f:ae:34:ef:ae:54:c3:ee:
                    5c:d8:fc:29:09:c2:e8:38:b9:0f:4f:31:a8:85:22:
                    76:82:33:3c:0d:cb:42:5c:15:4d:e1:50:53:f3:28:
                    d4:9d:c8:65:36:fc:52:c1:29:0c:2a:59:26:40:b0:
                    5d:ef:35:f7:a0:c2:d0:a5:5d:5c:92:61:c4:0a:b9:
                    c4:eb:e4:00:8c:c8:1e:e2:35:2e:90:69:13:0b:b6:
                    b1:75:e2:a3:a0:f7:e4:78:23:f4:28:9e:05:f2:cd:
                    ab:23:d5:be:8f:02:1e:5b:9b:04:18:5b:a4:3c:b0:
                    24:d0:87:10:35:08:39:25:7a:38:39:cb:2f:62:c6:
                    3b:82:90:b7:63:e9:f6:10:cf:3e:89:81:61:6b:b8:
                    3f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D9:BD:0B:74:97:24:8E:AF:5F:F4:00:02:4E:99:30:23:9A:14:0F
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/34352e3138382e3134302e302f32332d3234203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:d0:1b:29:ad:ae:a6:76:dd:2d:d7:42:85:35:3b:61:8e:ee:
         4a:80:1e:7b:bd:a6:c9:e7:34:1d:48:4b:ef:82:e4:9d:9c:3d:
         1d:9a:62:b5:0b:77:08:d1:82:fa:a5:3f:29:81:11:a2:ae:fc:
         88:ae:78:e5:3d:9d:8d:19:6e:6c:af:6d:8d:28:d9:ea:e2:9c:
         14:96:64:29:92:dc:76:f6:ae:49:e6:09:b9:08:ac:2d:86:bd:
         d8:dc:09:91:02:e2:dc:61:c3:83:f9:88:d9:91:d9:58:e2:3d:
         47:e7:14:34:94:48:70:96:1d:be:56:d4:26:71:13:ad:bb:e8:
         23:6c:20:9c:16:0d:62:5d:82:dc:38:82:eb:fb:5d:39:5e:43:
         61:5f:4b:7c:b2:16:74:3b:46:59:e4:3f:29:79:05:d3:e4:d7:
         4c:06:d7:eb:07:cf:db:24:93:b6:35:52:0d:b2:65:c3:31:07:
         a7:cd:6a:91:54:56:c7:b2:61:cb:69:49:9f:6d:22:94:5f:16:
         48:d1:f1:16:de:37:d8:69:b6:3d:9c:8f:a5:3f:66:20:04:32:
         86:30:47:06:fc:f7:4b:c2:f8:aa:df:79:70:34:94:18:26:34:
         73:7b:e2:71:68:97:f1:a7:e9:e6:54:18:4f:d9:fb:e7:c0:b3:
         e6:6b:7b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:01 2024 by rpki-client on console-ams.rpki-client.org