Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3233302e32342e302f32322d3332203d3e20323632383933.roa
File:                     34352e3233302e32342e302f32322d3332203d3e20323632383933.roa (raw, json)
Hash identifier:          gJ1rw5PwIAA4ksIO/Qlx5O+N5IxLBWMwaR5poSaGw30=
Subject key identifier:   E3:D9:28:18:6B:CB:8D:39:0A:F0:91:73:EB:41:B1:F4:A6:B4:F0:93
Certificate issuer:       /CN=99B35081E0645635AD4D8BE70E34F035910FB764
Certificate serial:       656D4630B5ED8FA53EB80472963645278F635617
Authority key identifier: 99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3233302e32342e302f32322d3332203d3e20323632383933.roa
Signing time:             Fri 05 Apr 2024 04:37:28 +0000
ROA not before:           Fri 05 Apr 2024 04:32:28 +0000
ROA not after:            Fri 04 Apr 2025 04:37:28 +0000
asID:                     262893
IP address blocks:        45.230.24.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl
                          rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6d:46:30:b5:ed:8f:a5:3e:b8:04:72:96:36:45:27:8f:63:56:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99B35081E0645635AD4D8BE70E34F035910FB764
        Validity
            Not Before: Apr  5 04:32:28 2024 GMT
            Not After : Apr  4 04:37:28 2025 GMT
        Subject: CN=E3D928186BCB8D390AF09173EB41B1F4A6B4F093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4a:8e:56:05:48:d4:44:24:12:1a:ae:19:9d:
                    39:2e:32:78:31:f9:42:58:75:d1:37:72:e7:0f:18:
                    06:19:75:46:7e:68:3e:17:a6:fd:dc:d4:74:a1:39:
                    bc:a4:4d:f0:2e:27:7d:c5:81:3d:e2:1b:25:b2:6b:
                    0b:84:77:f7:a2:13:90:34:2e:6e:e8:88:6d:4e:94:
                    91:b9:11:7c:1b:27:fa:4e:39:61:4d:7a:65:e8:99:
                    e7:aa:c4:f6:e4:a3:ed:26:e4:e5:bf:3e:dd:68:d7:
                    c0:eb:14:de:b2:3d:80:99:14:ea:0a:f4:f9:02:03:
                    ca:ff:f9:93:dc:9f:ec:07:cd:86:db:48:9a:d0:d8:
                    75:5f:d9:94:8a:38:d6:15:db:8a:50:30:f4:4b:a0:
                    65:89:fc:9b:a6:0b:88:b2:bc:86:44:4a:79:de:93:
                    d2:50:8a:a2:3d:ca:7a:42:f6:70:3e:ae:78:99:d3:
                    0f:1e:c0:b2:d4:37:7f:05:e9:51:f3:8e:d1:72:14:
                    88:f6:7a:ff:70:40:82:4e:cd:5c:7a:ed:92:8e:d6:
                    8e:9a:28:7d:ce:3d:a1:83:cb:f6:60:98:85:a8:23:
                    99:fa:4a:c8:df:0e:b6:9c:05:1c:20:09:e0:d3:2f:
                    2b:9f:da:f0:59:f1:b1:c3:96:62:43:9f:b2:f4:b5:
                    19:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D9:28:18:6B:CB:8D:39:0A:F0:91:73:EB:41:B1:F4:A6:B4:F0:93
            X509v3 Authority Key Identifier:
                keyid:99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3233302e32342e302f32322d3332203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:4f:4c:c4:29:54:3c:ca:ad:2b:4c:50:e7:45:a9:db:89:5f:
         97:43:dc:f4:0d:85:f8:2f:53:f1:d8:fd:72:f8:22:ea:15:f3:
         0e:14:67:ae:1b:d2:dc:99:c6:50:f6:d2:1e:a6:f3:37:e6:f5:
         b0:37:3e:d4:b6:8a:f4:72:71:66:97:ff:bc:fc:b4:fe:e5:4a:
         d4:70:62:e7:cb:c6:a4:83:8f:96:a0:4e:f7:5f:50:64:45:f7:
         ca:30:31:e6:04:d5:64:61:63:0a:30:dd:5e:6e:6f:02:2a:9d:
         1e:6a:8a:0b:e6:41:b9:13:e0:3d:b6:1c:87:20:39:fd:0e:a5:
         7f:ec:39:1b:d0:20:4a:ff:73:57:81:fa:9e:ae:e2:c6:ef:30:
         00:69:d2:f2:e9:e2:b5:f2:88:81:32:01:0d:2b:d2:db:01:b8:
         0b:12:06:5d:15:29:c1:15:6a:82:ef:75:19:ab:e3:e9:51:c6:
         10:ab:66:0b:21:de:97:3a:3a:38:17:37:f7:da:8e:3e:46:d9:
         40:ab:76:55:80:44:0e:83:5e:0d:20:96:80:5c:09:77:d0:04:
         96:5c:3d:7b:a9:ea:f4:cf:12:ab:b1:56:3f:d0:f3:f3:53:86:
         62:1b:33:e7:71:8e:fd:52:78:96:51:96:be:51:68:f6:c2:c2:
         a0:d6:53:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:41 2024 by rpki-client on console-ams.rpki-client.org