Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33362e302f32332d3233203d3e20323636313532.roa
File:                     34352e362e33362e302f32332d3233203d3e20323636313532.roa (raw, json)
Hash identifier:          JFqIVo6HBGJM86L6GZvo9idDZAsOGVgV+pJrKmeV7P8=
Subject key identifier:   0B:78:6D:2B:91:5C:4C:A1:D3:13:D8:7E:98:9D:B1:C4:86:F1:64:89
Certificate issuer:       /CN=0D1F0EF9B6879F5981F0279711EDA3C940B65CC9
Certificate serial:       347898EF55E40EF78A6AE7E45594B55CBC479706
Authority key identifier: 0D:1F:0E:F9:B6:87:9F:59:81:F0:27:97:11:ED:A3:C9:40:B6:5C:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33362e302f32332d3233203d3e20323636313532.roa
Signing time:             Fri 30 Aug 2024 19:36:37 +0000
ROA not before:           Fri 30 Aug 2024 19:31:37 +0000
ROA not after:            Fri 29 Aug 2025 19:36:37 +0000
asID:                     266152
IP address blocks:        45.6.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.crl
                          rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:78:98:ef:55:e4:0e:f7:8a:6a:e7:e4:55:94:b5:5c:bc:47:97:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1F0EF9B6879F5981F0279711EDA3C940B65CC9
        Validity
            Not Before: Aug 30 19:31:37 2024 GMT
            Not After : Aug 29 19:36:37 2025 GMT
        Subject: CN=0B786D2B915C4CA1D313D87E989DB1C486F16489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:51:7f:26:81:dd:8b:2e:5b:53:b2:90:2a:dd:
                    b0:af:8d:c4:88:9e:d3:59:4d:fa:bf:02:2b:83:15:
                    e5:a9:e5:f8:6b:17:7c:9f:d2:cc:c7:f7:de:9a:6b:
                    39:b3:45:2c:74:d4:70:f9:18:e6:b7:ee:de:94:d3:
                    bd:e1:1e:d4:28:98:a8:30:28:b8:60:34:75:0b:f5:
                    fc:b9:19:61:10:c9:2d:55:f0:7d:dc:ed:d8:0f:7e:
                    25:6c:9f:0f:c3:db:c9:90:3d:f1:6b:22:8a:ab:03:
                    73:e4:de:63:18:d8:f1:c2:aa:74:aa:5d:4f:92:e8:
                    32:ad:22:95:ce:e6:77:93:66:08:1e:18:19:73:33:
                    88:f4:9a:4d:c5:c9:9c:17:43:16:98:4c:d2:02:1f:
                    c2:df:b4:bf:12:e7:24:c2:d3:74:e1:3b:39:2e:f7:
                    b9:23:ba:2b:93:0e:95:45:25:fc:ce:96:0c:35:9e:
                    b6:3d:2d:e0:62:9e:a7:00:e1:9e:ed:49:ad:0a:73:
                    f1:92:32:5a:2c:bb:04:91:9a:55:c2:31:fd:1f:0a:
                    b3:79:36:3f:42:04:a4:be:fb:bd:8f:f3:4b:45:26:
                    84:5d:d6:27:30:23:17:a8:5c:ed:90:31:0a:19:f9:
                    74:b1:9c:1f:16:b7:d5:c7:f4:be:52:93:99:ee:9b:
                    08:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:78:6D:2B:91:5C:4C:A1:D3:13:D8:7E:98:9D:B1:C4:86:F1:64:89
            X509v3 Authority Key Identifier:
                keyid:0D:1F:0E:F9:B6:87:9F:59:81:F0:27:97:11:ED:A3:C9:40:B6:5C:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33362e302f32332d3233203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:fe:66:de:03:b6:91:7c:08:d2:a6:8a:bf:99:dd:46:7c:aa:
         f5:51:ce:6b:b2:53:48:48:37:72:fd:c7:52:6a:2c:7f:8e:ad:
         2b:61:5d:a4:7d:10:65:21:21:36:d7:ca:9f:97:a7:21:5d:ff:
         03:b3:77:22:52:29:22:ac:02:bb:c5:1d:35:bc:e9:3f:58:b0:
         1a:59:55:f0:a0:a9:f3:c4:d6:a5:a0:ec:d7:e1:92:20:d2:63:
         b1:3b:2f:9a:2a:86:37:e5:b6:ba:c0:a1:ab:65:f0:e4:c0:f9:
         83:15:b1:3d:68:2b:38:02:a0:46:5f:3f:10:b2:2a:3c:a5:ee:
         cd:52:38:4e:be:ae:11:02:dc:7c:f5:2e:a3:ac:ca:5c:57:18:
         08:62:6e:a2:0c:60:99:e8:b6:5a:f2:4b:e4:6e:f9:f9:76:fc:
         d9:c9:31:aa:b6:cf:d2:48:a6:5f:f3:31:a4:51:0f:c8:ad:a5:
         c4:a6:75:d5:4a:8e:cc:20:98:58:e1:6b:f7:02:6e:88:b8:28:
         f4:44:ff:ef:32:10:9b:b4:1e:95:ac:30:99:69:f0:ce:03:31:
         a7:a6:ca:62:f7:f5:66:72:09:2a:a2:47:16:87:38:7e:bd:b5:
         d9:62:3e:77:7e:a8:f3:0d:aa:2e:84:78:16:98:30:ba:d9:28:
         e5:10:02:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org