Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/34352e3233302e3133322e302f32322d3234203d3e20323637313638.roa
File:                     34352e3233302e3133322e302f32322d3234203d3e20323637313638.roa (raw, json)
Hash identifier:          AlcaLRuSacGQ7AwslxYAmhushF5MYqtOJx2SwJ3PNV4=
Subject key identifier:   F0:FC:F4:25:2C:51:DE:C1:42:3B:48:7B:27:6E:C6:6D:FE:4F:05:1B
Certificate issuer:       /CN=E4AF52A93147A03E56F1324181051B26FD71F0D6
Certificate serial:       2F30C0A09F77512C079C7D20DA3F4BA0D6C577DF
Authority key identifier: E4:AF:52:A9:31:47:A0:3E:56:F1:32:41:81:05:1B:26:FD:71:F0:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/34352e3233302e3133322e302f32322d3234203d3e20323637313638.roa
Signing time:             Thu 04 Apr 2024 01:40:07 +0000
ROA not before:           Thu 04 Apr 2024 01:35:07 +0000
ROA not after:            Thu 03 Apr 2025 01:40:07 +0000
asID:                     267168
IP address blocks:        45.230.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.crl
                          rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:30:c0:a0:9f:77:51:2c:07:9c:7d:20:da:3f:4b:a0:d6:c5:77:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4AF52A93147A03E56F1324181051B26FD71F0D6
        Validity
            Not Before: Apr  4 01:35:07 2024 GMT
            Not After : Apr  3 01:40:07 2025 GMT
        Subject: CN=F0FCF4252C51DEC1423B487B276EC66DFE4F051B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:11:23:fe:e2:9d:6f:49:b1:69:2c:48:d1:
                    7d:d1:ba:f8:0c:22:d7:7f:8b:db:3d:6d:6f:00:b2:
                    46:d5:4f:10:cf:1f:4a:00:5f:fd:ba:0b:77:b9:bd:
                    59:87:6c:6b:e3:b6:21:2c:e1:0d:c8:05:a1:1e:f2:
                    0e:16:d7:dd:98:6b:ce:c5:a2:4f:04:37:57:cc:c3:
                    96:26:46:fb:96:29:22:88:17:24:6d:fb:35:aa:f7:
                    12:1b:d6:7f:5d:34:d6:cd:1e:dc:b6:f8:dc:2a:c3:
                    a3:e2:b1:fa:a1:81:89:15:18:c1:31:bf:58:56:70:
                    71:6a:67:87:4e:35:eb:d0:ee:e9:b3:8a:48:84:e1:
                    ca:55:0d:95:92:a1:f0:2c:71:c5:a1:ad:10:82:74:
                    36:10:ec:47:b4:27:0b:21:82:09:ee:41:88:04:e7:
                    27:df:34:2a:fb:18:93:b1:91:00:02:2a:4f:83:5c:
                    69:00:30:bc:c2:72:35:b3:18:83:ec:14:b2:0d:46:
                    4f:6e:a9:f0:09:f9:e2:a6:aa:6e:65:83:9e:7c:55:
                    74:4f:96:06:2a:bd:ce:b1:d4:e3:c5:ff:08:62:6d:
                    d2:b8:72:fb:85:49:ed:4c:90:15:af:c9:24:39:86:
                    18:97:f3:8e:2d:ca:d9:55:79:1a:8a:7b:b6:76:d6:
                    64:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FC:F4:25:2C:51:DE:C1:42:3B:48:7B:27:6E:C6:6D:FE:4F:05:1B
            X509v3 Authority Key Identifier:
                keyid:E4:AF:52:A9:31:47:A0:3E:56:F1:32:41:81:05:1B:26:FD:71:F0:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4AF52A93147A03E56F1324181051B26FD71F0D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/1/34352e3233302e3133322e302f32322d3234203d3e20323637313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:7d:31:07:b4:d4:be:c2:87:46:1f:27:77:31:72:f4:0c:c4:
         67:f4:bb:bb:19:70:45:19:ae:b2:58:f2:1c:bf:8c:5c:6a:2f:
         62:c1:82:93:8f:ac:93:37:49:2e:4d:d3:7d:1b:e8:2a:fe:76:
         e5:f5:fb:1b:d9:0e:c3:2c:79:c9:1b:4b:24:ae:d1:35:f3:80:
         ec:c5:46:3c:6f:0f:d8:58:47:68:fb:ab:5d:77:bb:1e:9e:32:
         5b:da:f0:56:2d:e1:51:b2:f0:e4:a8:79:1e:90:e3:f5:d2:0f:
         22:84:62:0d:ab:3a:9e:24:7d:26:a5:49:c8:d6:d5:6a:1d:4a:
         21:59:91:13:25:f6:a3:27:9b:43:45:af:ea:3e:d5:a2:be:2a:
         f6:67:15:f6:20:93:70:e6:39:70:fe:05:16:e2:96:1d:0c:ac:
         20:db:e8:d2:73:1b:0c:ca:a9:95:05:41:5d:c4:ab:b3:b4:c4:
         d6:27:e1:8b:aa:cf:a8:cd:cb:14:1f:8e:e9:72:4c:d4:d9:2f:
         15:31:45:b2:90:73:b3:98:ce:a2:15:66:4b:93:b9:67:9a:01:
         af:db:26:fe:45:3b:37:c1:40:2b:44:4c:73:9f:10:a8:42:9a:
         c8:e1:0e:67:81:20:7a:d4:38:f9:9f:42:20:34:82:af:9e:24:
         d0:4c:61:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org