Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130382e302f32322d3332203d3e20323637393939.roa
File:                     34352e3136372e3130382e302f32322d3332203d3e20323637393939.roa (raw, json)
Hash identifier:          /AwEOEG6T+sW0Itv/ncCsftABu7WNHD+ychhyDKDKKc=
Subject key identifier:   46:8B:37:E2:F3:60:53:10:2D:81:98:71:3E:F1:99:7B:C8:A4:C5:E1
Certificate issuer:       /CN=42614C68B5B97437E1FC1379B17F977D9E72CCB3
Certificate serial:       0B54806E60F518DB667B1FD58FE1B1C2926477C2
Authority key identifier: 42:61:4C:68:B5:B9:74:37:E1:FC:13:79:B1:7F:97:7D:9E:72:CC:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42614C68B5B97437E1FC1379B17F977D9E72CCB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130382e302f32322d3332203d3e20323637393939.roa
Signing time:             Mon 03 Jun 2024 16:47:02 +0000
ROA not before:           Mon 03 Jun 2024 16:42:02 +0000
ROA not after:            Mon 02 Jun 2025 16:47:02 +0000
asID:                     267999
IP address blocks:        45.167.108.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/42614C68B5B97437E1FC1379B17F977D9E72CCB3.crl
                          rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/42614C68B5B97437E1FC1379B17F977D9E72CCB3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42614C68B5B97437E1FC1379B17F977D9E72CCB3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 09:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:54:80:6e:60:f5:18:db:66:7b:1f:d5:8f:e1:b1:c2:92:64:77:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42614C68B5B97437E1FC1379B17F977D9E72CCB3
        Validity
            Not Before: Jun  3 16:42:02 2024 GMT
            Not After : Jun  2 16:47:02 2025 GMT
        Subject: CN=468B37E2F36053102D8198713EF1997BC8A4C5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:37:ef:5a:b5:5e:e3:6c:e7:c6:09:aa:c5:
                    f3:8d:18:82:b8:a9:68:f1:c7:6d:eb:35:e5:1b:b8:
                    41:99:c5:fb:d0:77:b0:76:f3:47:2e:b3:a6:bb:26:
                    5b:b1:9c:15:08:4f:44:f5:ca:ac:e6:6d:3f:fd:43:
                    2a:b3:83:62:60:a5:63:c8:da:71:98:1c:4d:32:ea:
                    26:d2:de:b3:df:90:da:1a:65:1b:c7:e8:9f:fa:21:
                    10:98:b9:b3:37:54:48:ff:1f:e7:6c:8b:ea:62:5d:
                    bd:25:ac:78:cb:68:c2:a4:6c:be:77:a9:e9:35:ea:
                    a5:16:39:ef:65:53:68:87:12:3c:3c:19:75:6c:dc:
                    79:f1:df:48:cc:b1:7b:50:6e:28:75:e1:d2:5a:23:
                    16:0d:1a:fa:e5:8f:fc:f1:de:ab:55:b3:6e:ad:f3:
                    95:26:c2:f6:ef:23:09:de:0c:25:27:c2:42:66:4c:
                    31:34:df:69:8c:d8:ca:85:40:36:a9:85:a7:30:19:
                    b6:7a:71:6f:4a:2c:f1:b8:36:5e:18:34:41:6d:89:
                    cb:48:ba:11:d5:ca:de:08:e5:08:16:41:d3:67:90:
                    b2:43:68:7d:ab:8a:7f:33:3d:94:0e:26:bc:0c:7f:
                    53:68:3d:b2:aa:3f:d9:fd:57:60:e8:87:22:27:80:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8B:37:E2:F3:60:53:10:2D:81:98:71:3E:F1:99:7B:C8:A4:C5:E1
            X509v3 Authority Key Identifier:
                keyid:42:61:4C:68:B5:B9:74:37:E1:FC:13:79:B1:7F:97:7D:9E:72:CC:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/42614C68B5B97437E1FC1379B17F977D9E72CCB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42614C68B5B97437E1FC1379B17F977D9E72CCB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130382e302f32322d3332203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:b8:cf:8c:a2:ed:08:5c:03:95:95:6c:dd:4a:43:45:31:3c:
         bb:9f:38:bd:82:91:6e:13:76:8c:0b:4f:69:19:50:24:39:4e:
         01:a4:90:c4:21:bd:28:16:89:df:76:56:ec:03:71:f8:b2:94:
         72:2d:8e:0e:76:19:69:8f:89:dc:87:48:df:ea:9c:cd:33:55:
         94:df:b2:09:72:11:4b:a5:1f:77:2a:e8:91:9e:67:2d:e1:35:
         89:27:00:be:a5:9c:b2:92:47:5a:ea:40:81:3b:51:2a:04:2c:
         03:21:cb:c3:a2:c9:dd:e6:66:e7:b9:75:e1:97:52:a9:90:c2:
         4a:8c:93:be:2e:19:5f:14:a6:f9:fc:f2:9f:4b:cd:02:3c:64:
         aa:0e:ba:4e:d0:86:df:43:b3:4d:fd:e6:07:61:98:81:e2:60:
         aa:08:b9:1e:c4:56:10:3b:91:9e:f9:32:b9:7a:d3:17:82:fb:
         66:dd:3a:37:de:d6:ac:a4:31:03:9e:7d:cc:8d:c3:4b:79:c4:
         5a:26:55:28:53:03:50:f9:6c:11:c9:40:3d:ba:f8:fd:82:8a:
         6a:9b:b7:89:78:2b:d0:64:ad:e0:be:d1:2d:0d:71:dd:0c:1f:
         95:6e:53:b8:6d:a2:b8:de:5f:19:da:6d:65:5c:55:b1:42:a4:
         ef:5f:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:53 2024 by rpki-client on console-fra.rpki-client.org