Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/34352e3233392e3234342e302f32322d3234203d3e20323638343832.roa
File:                     34352e3233392e3234342e302f32322d3234203d3e20323638343832.roa (raw, json)
Hash identifier:          WDAnJOVb2c88yo412gxzj/gCMU2ObMEI0n7NOJh3nvQ=
Subject key identifier:   7D:96:66:F6:00:AB:07:F6:A2:4B:D5:60:62:B3:3E:F0:EE:20:96:73
Certificate issuer:       /CN=83318EF9934F62654EC63A75033AEDCCD1657C52
Certificate serial:       3673157BF5BA926234AE69189D3A19F242895EF2
Authority key identifier: 83:31:8E:F9:93:4F:62:65:4E:C6:3A:75:03:3A:ED:CC:D1:65:7C:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83318EF9934F62654EC63A75033AEDCCD1657C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/34352e3233392e3234342e302f32322d3234203d3e20323638343832.roa
Signing time:             Wed 03 Apr 2024 19:12:48 +0000
ROA not before:           Wed 03 Apr 2024 19:07:48 +0000
ROA not after:            Wed 02 Apr 2025 19:12:48 +0000
asID:                     268482
IP address blocks:        45.239.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/83318EF9934F62654EC63A75033AEDCCD1657C52.crl
                          rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/83318EF9934F62654EC63A75033AEDCCD1657C52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83318EF9934F62654EC63A75033AEDCCD1657C52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:73:15:7b:f5:ba:92:62:34:ae:69:18:9d:3a:19:f2:42:89:5e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83318EF9934F62654EC63A75033AEDCCD1657C52
        Validity
            Not Before: Apr  3 19:07:48 2024 GMT
            Not After : Apr  2 19:12:48 2025 GMT
        Subject: CN=7D9666F600AB07F6A24BD56062B33EF0EE209673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:37:81:10:f1:7d:bc:3d:3d:c5:5b:34:0f:5d:
                    a5:6d:41:f8:e5:ca:42:d9:92:61:92:cd:68:8e:19:
                    11:a6:3d:c0:7d:17:b0:d4:67:76:5c:51:ae:06:50:
                    41:a3:58:7f:aa:69:d1:f9:73:76:00:fa:cd:25:9e:
                    b0:66:ee:a6:79:6c:56:54:5d:36:d9:40:8c:38:1a:
                    99:f0:9e:33:9b:88:59:7d:ce:0b:56:bb:d0:a4:cb:
                    50:46:ff:79:02:a5:6f:49:73:fa:9b:51:d0:7e:7b:
                    fe:6b:64:5b:bd:6b:55:9c:11:1a:52:a3:31:f8:f0:
                    58:7a:7b:a8:ae:ab:cd:ad:43:f3:c7:f1:5d:d0:7d:
                    1c:54:e4:29:92:31:a2:d8:ed:dd:89:8a:ec:ad:b8:
                    34:55:08:23:cf:30:39:af:64:72:99:eb:fc:e2:c9:
                    d4:83:61:86:60:eb:52:d6:e5:e9:b4:71:1d:c5:a8:
                    2e:70:ee:80:60:06:29:7c:2f:34:15:35:e0:1b:8c:
                    47:f2:e1:ec:65:66:17:0f:61:cb:d5:83:9d:c9:68:
                    e8:00:46:65:96:28:79:40:f7:35:1c:d5:93:d4:b8:
                    1c:7c:fa:0e:32:7d:c5:8c:a4:6b:7c:2c:cc:ff:0f:
                    f9:7f:9a:73:fb:b8:8d:4c:67:18:ce:4a:45:30:48:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:96:66:F6:00:AB:07:F6:A2:4B:D5:60:62:B3:3E:F0:EE:20:96:73
            X509v3 Authority Key Identifier:
                keyid:83:31:8E:F9:93:4F:62:65:4E:C6:3A:75:03:3A:ED:CC:D1:65:7C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/83318EF9934F62654EC63A75033AEDCCD1657C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83318EF9934F62654EC63A75033AEDCCD1657C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/34352e3233392e3234342e302f32322d3234203d3e20323638343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:a0:61:90:03:26:83:34:22:fa:88:ee:0d:5f:cb:04:e5:0b:
         14:19:01:fa:4f:92:d6:3f:f1:06:2e:4f:2a:fe:cc:2e:04:ee:
         19:44:c3:71:5f:84:74:cf:20:34:e8:0f:fc:9a:64:b6:1d:59:
         43:20:19:27:d0:05:1c:d2:71:81:80:b4:5b:1b:d3:42:ea:b0:
         de:ce:62:dd:86:64:68:fd:9a:66:d1:89:6c:6c:a1:27:1b:32:
         d1:2b:ad:7e:b8:12:56:3f:c3:d6:d2:d0:7e:6e:18:0b:92:db:
         cf:ce:a0:cc:1f:76:42:89:09:45:8b:af:f2:dc:4d:43:30:4e:
         ad:97:3b:ae:3f:4f:cd:02:eb:b8:3a:c1:17:e7:16:88:3b:95:
         87:53:df:cf:dd:8b:4f:5e:98:ec:be:14:de:b3:87:4b:f0:f1:
         42:78:47:75:78:2b:a3:c6:f2:7a:cd:76:e9:f3:ca:ce:7e:55:
         71:cb:9a:91:31:72:82:06:09:bd:a3:8c:b5:42:df:50:ea:34:
         85:e8:42:24:5e:b1:47:37:6e:86:9e:8d:85:20:83:5a:6c:a8:
         ab:4f:d5:bc:26:2d:8f:35:65:1c:aa:40:c6:f0:16:30:ca:7a:
         ce:ca:fb:63:9e:51:f5:3d:66:5e:e4:de:77:93:e8:90:45:59:
         7d:65:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org