Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/1/34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa
File:                     34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa (raw, json)
Hash identifier:          bDvYO+NxbBw5PFRbcoFdNuBNVd9SMKHxOtd9pqiyS1I=
Subject key identifier:   B6:75:0B:B3:70:DE:B7:96:E5:42:4C:4A:CE:EB:7F:DD:39:1F:D1:6F
Certificate issuer:       /CN=3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC
Certificate serial:       62B0402B2451167C0289A93FB3DABEA509B6610D
Authority key identifier: 3D:DB:32:FD:8D:43:D6:6A:02:BF:AD:FC:FB:7E:1A:9F:F3:91:26:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/1/34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa
Signing time:             Thu 04 Apr 2024 11:32:00 +0000
ROA not before:           Thu 04 Apr 2024 11:27:00 +0000
ROA not after:            Thu 03 Apr 2025 11:32:00 +0000
asID:                     268973
IP address blocks:        45.176.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/1/3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC.crl
                          rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/1/3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b0:40:2b:24:51:16:7c:02:89:a9:3f:b3:da:be:a5:09:b6:61:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC
        Validity
            Not Before: Apr  4 11:27:00 2024 GMT
            Not After : Apr  3 11:32:00 2025 GMT
        Subject: CN=B6750BB370DEB796E5424C4ACEEB7FDD391FD16F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:cf:22:ab:1d:7a:67:b2:9f:60:fa:29:f4:
                    ba:1b:04:76:1b:fa:9f:55:85:7b:12:1e:5a:82:7a:
                    bf:d3:82:89:cd:aa:ca:d3:a5:ff:6c:62:04:19:6d:
                    2b:d1:5f:e9:94:d5:00:c9:50:08:86:6f:2e:3e:93:
                    a4:c8:13:05:80:ce:60:b2:ee:f7:4a:3f:9b:d5:46:
                    41:51:29:9e:99:3c:95:72:9a:06:84:18:c7:77:03:
                    80:9b:90:30:8f:14:55:7d:ea:b5:95:4a:85:a9:3a:
                    07:7e:84:ce:e7:9a:c3:d6:42:11:88:a3:7c:72:6a:
                    67:e3:fc:4c:bb:8d:4e:15:f0:8d:7f:59:b1:92:a6:
                    60:41:d6:63:61:ed:3d:fb:35:86:8f:3c:5a:d2:39:
                    3a:60:d5:b6:9d:01:b4:cf:50:45:8f:c5:77:6a:0b:
                    2c:5f:26:10:58:0e:9e:ef:e0:bb:84:ea:40:34:99:
                    34:9d:b0:1c:53:9c:cc:f5:96:67:9f:8f:0c:20:b0:
                    49:72:bf:58:85:d1:b2:7f:f5:2b:ba:cc:f0:92:c6:
                    81:cd:23:d8:85:f6:d0:06:d4:d3:f9:42:0b:ad:5e:
                    3d:07:5d:7a:cb:17:ee:dc:f4:99:0a:4a:6b:54:ec:
                    6d:73:be:b0:dc:91:d1:48:52:27:17:20:e4:c0:44:
                    38:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:75:0B:B3:70:DE:B7:96:E5:42:4C:4A:CE:EB:7F:DD:39:1F:D1:6F
            X509v3 Authority Key Identifier:
                keyid:3D:DB:32:FD:8D:43:D6:6A:02:BF:AD:FC:FB:7E:1A:9F:F3:91:26:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/1/3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/1/34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:7f:50:af:01:ff:99:8a:d7:14:58:05:be:c8:d1:ea:39:eb:
         86:c0:34:cd:a4:d9:ed:4d:84:f4:66:e9:d3:c9:9e:17:7b:aa:
         5b:40:17:ec:63:f1:21:d5:f8:60:59:3d:ff:01:2c:92:a1:d8:
         f6:13:ff:2a:a1:f1:a9:5a:05:6b:80:18:c6:f9:8c:06:cf:ae:
         84:1b:03:c5:84:79:0b:dc:f5:2e:1a:4c:39:7a:7d:a3:bc:a3:
         1a:56:eb:44:7a:40:a1:62:e9:6c:b2:bc:b1:37:b2:d7:52:a7:
         b6:11:fe:8a:d0:b2:90:eb:d4:cf:9f:b3:ca:83:ba:59:b5:b1:
         85:11:9d:cb:e1:44:88:41:c3:df:a6:15:77:d7:bb:84:e6:8c:
         dc:7b:9d:4d:fa:c7:a1:ea:7c:4f:50:fa:1b:3f:eb:20:0e:23:
         cd:6a:f7:5a:05:dc:6b:49:72:03:f8:fd:b7:88:94:7f:0e:03:
         70:0b:b1:6d:04:82:2a:26:a3:4a:05:61:b2:f0:87:6f:fb:fb:
         af:00:40:87:41:12:76:68:c7:e3:88:e3:26:c3:bd:aa:9c:c4:
         00:da:37:77:92:a6:1d:9c:f7:99:04:a1:49:71:bc:93:4b:2f:
         82:de:9b:39:80:f3:d7:e8:43:c7:c0:35:bf:d5:18:24:3f:d3:
         33:92:0a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:34 2024 by rpki-client on console-ams.rpki-client.org