Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/34352e3233312e32302e302f32322d3234203d3e20323637313833.roa
File:                     34352e3233312e32302e302f32322d3234203d3e20323637313833.roa (raw, json)
Hash identifier:          iVo5NNICXeAk9HoAX9B5/GOnM3ZBxAkSu/O0jkEtumE=
Subject key identifier:   2E:AA:05:5A:41:DE:2E:F9:EA:16:F0:9C:E1:95:BA:5E:1B:E6:AE:97
Certificate issuer:       /CN=ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411
Certificate serial:       2B54D395F522B25EC560E27525A7968E2836AFE9
Authority key identifier: AD:D1:8D:4B:9D:4E:B5:B8:E5:52:0C:0E:00:32:C2:2E:DB:05:F4:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/34352e3233312e32302e302f32322d3234203d3e20323637313833.roa
Signing time:             Wed 03 Apr 2024 19:12:57 +0000
ROA not before:           Wed 03 Apr 2024 19:07:57 +0000
ROA not after:            Wed 02 Apr 2025 19:12:57 +0000
asID:                     267183
IP address blocks:        45.231.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl
                          rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:54:d3:95:f5:22:b2:5e:c5:60:e2:75:25:a7:96:8e:28:36:af:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411
        Validity
            Not Before: Apr  3 19:07:57 2024 GMT
            Not After : Apr  2 19:12:57 2025 GMT
        Subject: CN=2EAA055A41DE2EF9EA16F09CE195BA5E1BE6AE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:a7:78:66:b4:1f:fa:2e:7e:6b:22:bd:06:
                    6a:d1:db:93:0a:3c:18:68:78:58:ae:ca:8c:e3:43:
                    e5:98:c4:06:cf:e1:f0:71:86:0c:74:49:86:bf:6d:
                    d3:5d:78:68:da:92:a2:f8:9a:50:a4:bd:b8:3c:9b:
                    94:b9:b7:d6:3f:91:16:e1:3d:f9:65:b2:e0:06:bf:
                    4c:9b:0a:13:29:1b:fb:86:92:20:0f:c5:f8:c4:50:
                    68:18:eb:d9:8a:9f:0c:6c:c6:25:cf:da:7f:c3:a8:
                    84:8b:57:fa:78:4d:69:c0:68:1c:7d:88:01:eb:07:
                    32:a6:fb:db:56:9f:0c:64:da:3f:bf:8b:e3:69:c5:
                    33:91:fe:16:23:87:c8:28:75:11:c7:db:d4:76:3d:
                    5c:42:7a:3f:01:1c:bf:ee:e3:5f:68:c6:53:be:4d:
                    cc:13:f9:35:27:84:7d:cd:f3:a3:e6:73:6b:44:61:
                    65:e5:c5:73:4f:ad:12:24:c4:d9:f2:f6:b2:a2:21:
                    73:44:3e:b8:ef:ed:59:2e:f6:f1:2d:bb:79:cb:de:
                    66:34:24:b8:11:b4:34:f5:4b:86:cb:d3:60:d6:bf:
                    d8:72:4d:1e:06:ac:05:bf:ba:a6:81:09:c4:01:39:
                    8c:60:79:28:f4:95:3b:1e:ed:9f:dc:4b:aa:da:11:
                    7a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AA:05:5A:41:DE:2E:F9:EA:16:F0:9C:E1:95:BA:5E:1B:E6:AE:97
            X509v3 Authority Key Identifier:
                keyid:AD:D1:8D:4B:9D:4E:B5:B8:E5:52:0C:0E:00:32:C2:2E:DB:05:F4:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/34352e3233312e32302e302f32322d3234203d3e20323637313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:5b:bb:1f:28:1f:0b:58:4a:f2:f5:50:26:bb:0f:de:74:69:
         35:ab:4e:0d:1a:bf:b1:ce:a3:cb:d7:fb:bc:f6:4d:81:08:f1:
         24:10:37:5d:b1:f1:9a:92:99:4f:d7:22:87:ec:50:c2:be:66:
         6a:b4:04:28:7f:af:d2:8b:a6:19:b1:83:5f:b9:0f:76:7c:53:
         18:e4:a3:3b:78:55:c0:37:2d:3c:08:61:a2:a0:95:0d:7b:60:
         02:59:7f:3c:fc:b7:30:fc:20:c1:93:4d:fd:54:a5:af:ee:63:
         0a:0d:f4:ed:6b:40:55:ef:bd:a4:88:a1:ad:c9:e7:42:f3:53:
         3c:55:17:38:69:42:5d:49:cd:e5:13:18:2d:30:3a:0b:34:c6:
         bd:20:b8:58:a4:4a:de:b8:5d:d8:8b:be:b4:f3:7d:23:78:e7:
         2d:26:10:d7:6a:b8:7b:20:3d:94:e5:c8:7d:ec:e0:d1:74:fe:
         f8:fc:8e:46:d6:5b:e9:77:90:71:30:c5:cf:9d:ed:82:3b:d9:
         0d:de:04:25:e7:6d:5b:9b:fa:be:d3:51:0e:17:c1:85:6b:ea:
         62:55:bb:f7:33:92:8b:2f:e0:f6:c9:3c:67:71:95:f2:1d:c3:
         77:bd:6a:63:b4:07:77:da:de:0a:ee:57:77:57:7a:7d:35:40:
         01:a2:03:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:27 2024 by rpki-client on console-fra.rpki-client.org