Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/1/34352e3232382e31352e302f32342d3234203d3e20323636353833.roa
File:                     34352e3232382e31352e302f32342d3234203d3e20323636353833.roa (raw, json)
Hash identifier:          /eIzEAezwShG/LFEaaDVrWTGCmhW7mbsXUSyTysmevQ=
Subject key identifier:   6E:E0:40:5E:20:A3:98:3A:32:AF:36:99:45:69:2A:88:56:35:0B:2E
Certificate issuer:       /CN=18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5
Certificate serial:       1840A260E489F9C8BC97E890BE0A497F5102D770
Authority key identifier: 18:C7:AE:0E:5E:CF:5E:5F:44:B8:24:90:8A:FB:21:AC:F1:30:53:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/1/34352e3232382e31352e302f32342d3234203d3e20323636353833.roa
Signing time:             Wed 03 Apr 2024 22:55:31 +0000
ROA not before:           Wed 03 Apr 2024 22:50:31 +0000
ROA not after:            Wed 02 Apr 2025 22:55:31 +0000
asID:                     266583
IP address blocks:        45.228.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/1/18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5.crl
                          rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/1/18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 15:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:40:a2:60:e4:89:f9:c8:bc:97:e8:90:be:0a:49:7f:51:02:d7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5
        Validity
            Not Before: Apr  3 22:50:31 2024 GMT
            Not After : Apr  2 22:55:31 2025 GMT
        Subject: CN=6EE0405E20A3983A32AF369945692A8856350B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8a:91:df:63:8d:11:ae:2b:46:df:7d:39:8d:
                    cc:63:9c:df:cf:40:11:be:b9:b3:a1:45:79:0f:dd:
                    e9:02:d6:f1:c5:9f:1a:dc:d8:a1:ba:37:28:09:29:
                    7a:fe:47:d6:f0:a0:70:59:56:d2:ff:d0:37:d9:b0:
                    ac:14:b8:3b:3b:33:9c:87:97:1b:eb:68:12:32:bd:
                    fd:a2:25:08:38:bb:c2:a1:bc:b4:b3:4f:42:46:2d:
                    32:37:80:24:f9:21:ed:55:16:3c:31:6d:e3:61:3f:
                    0c:4e:c3:bb:47:b0:8a:bb:30:92:c6:e8:b0:f4:39:
                    4a:e4:49:d2:1e:89:58:2d:65:22:2d:4f:0c:4a:74:
                    7b:2f:48:10:c2:41:fc:53:a9:d6:80:7e:d7:87:10:
                    35:27:84:eb:d0:f5:74:81:fa:07:e8:1d:06:6b:cc:
                    7c:a1:86:f2:9f:9e:65:5c:55:97:f4:df:03:b1:f0:
                    05:91:c1:ab:27:d4:d6:10:06:44:ac:da:73:a6:b5:
                    6f:a6:8e:cf:5a:f4:39:31:18:85:f8:d2:c9:8b:3b:
                    bd:a8:17:6a:09:fd:5c:b4:a5:e1:5d:e8:68:19:85:
                    95:4a:3f:77:72:2d:e8:af:ba:10:14:5b:33:f2:0d:
                    4b:72:3b:12:46:bf:95:27:e3:55:2e:16:d3:90:eb:
                    41:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E0:40:5E:20:A3:98:3A:32:AF:36:99:45:69:2A:88:56:35:0B:2E
            X509v3 Authority Key Identifier:
                keyid:18:C7:AE:0E:5E:CF:5E:5F:44:B8:24:90:8A:FB:21:AC:F1:30:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/1/18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/1/34352e3232382e31352e302f32342d3234203d3e20323636353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:d7:62:82:cc:47:d6:32:1c:b4:e7:aa:de:ab:71:e4:7d:a0:
         fb:3c:ef:9c:7f:64:3b:a9:4a:3f:42:e9:7f:c7:cd:49:ba:5f:
         d1:b9:90:cc:9d:33:ec:1b:15:96:b8:05:f8:a5:91:b4:cb:7c:
         ae:e8:4a:94:75:d0:9a:fd:70:d4:68:17:50:8b:b1:ad:69:e8:
         de:b3:cc:d4:b4:aa:5e:cf:83:be:80:fc:c4:f5:55:48:ae:89:
         99:8c:da:3a:2e:28:e3:ce:91:33:d5:1d:b8:11:2e:60:72:74:
         57:96:f6:33:0d:57:a2:8a:fc:e3:e2:4b:f8:a2:2e:02:ad:e9:
         d1:ee:c7:cc:ea:e6:65:1c:2d:80:3b:84:4b:20:fb:7c:eb:18:
         e2:c9:2d:0e:bb:fc:1f:69:d9:8f:02:ff:09:5f:de:08:30:bb:
         78:95:90:3b:ed:74:66:f1:09:18:e1:18:93:d3:a4:cc:a9:a4:
         70:92:47:d6:43:63:e7:29:15:a2:a7:e5:47:b9:a8:6e:49:53:
         61:19:8c:67:1b:7e:a8:c4:62:07:cc:73:b0:eb:84:de:06:09:
         09:82:d5:05:c4:48:56:99:67:ba:82:69:8d:df:98:d5:c5:7d:
         67:ed:4c:46:03:e1:6a:ec:be:00:73:21:4d:51:9c:5c:4f:4c:
         b1:5c:dd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:18:17 2024 by rpki-client on console-ams.rpki-client.org