Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3136392e31322e302f32322d3234203d3e20323638353436.roa
File:                     34352e3136392e31322e302f32322d3234203d3e20323638353436.roa (raw, json)
Hash identifier:          QdwKH2Z0+rh3TnHxOYSAxfwNKyXGFTPqcPIAdOUrZKQ=
Subject key identifier:   BC:DF:C9:6A:2B:7C:3F:FB:29:11:9B:7F:E1:B0:33:21:71:13:10:8A
Certificate issuer:       /CN=37CA3286264D504D79210CC12A74E15D2E230251
Certificate serial:       43FF380EF6E8A5AB7BD780718604467F38B1B54D
Authority key identifier: 37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3136392e31322e302f32322d3234203d3e20323638353436.roa
Signing time:             Mon 12 Aug 2024 13:17:12 +0000
ROA not before:           Mon 12 Aug 2024 13:12:12 +0000
ROA not after:            Mon 11 Aug 2025 13:17:12 +0000
asID:                     268546
IP address blocks:        45.169.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.crl
                          rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ff:38:0e:f6:e8:a5:ab:7b:d7:80:71:86:04:46:7f:38:b1:b5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37CA3286264D504D79210CC12A74E15D2E230251
        Validity
            Not Before: Aug 12 13:12:12 2024 GMT
            Not After : Aug 11 13:17:12 2025 GMT
        Subject: CN=BCDFC96A2B7C3FFB29119B7FE1B033217113108A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:e8:3e:51:66:6a:90:41:a3:db:85:8b:fd:
                    84:b0:b9:ae:bc:0b:c6:e9:81:3d:da:09:a4:18:d5:
                    28:ad:3e:42:7b:5a:e2:63:d1:cb:fa:4c:4a:63:06:
                    98:a0:f2:fb:36:4f:57:de:9d:fc:05:bd:57:13:f8:
                    fe:6c:a1:97:f3:99:ee:40:78:ab:64:87:f4:10:9d:
                    af:40:88:d8:3a:ce:61:c6:37:ac:58:b9:e3:c7:16:
                    3d:2a:d2:46:e3:87:cc:a9:b0:d6:61:8b:8e:9e:3d:
                    b5:0d:e2:62:d9:6a:1e:23:58:06:95:22:86:07:df:
                    ce:fd:91:40:96:67:53:30:31:a1:c4:25:33:8c:6d:
                    61:90:2c:24:ef:53:a5:96:41:63:68:8e:e9:04:93:
                    48:b3:eb:68:d9:19:75:d3:1d:e7:18:55:f1:98:b2:
                    92:e3:ba:9e:62:6e:63:ce:63:16:65:2a:46:59:b0:
                    57:56:49:ce:14:06:28:6c:13:3b:10:31:2e:12:f1:
                    30:82:46:e5:9c:77:d6:c7:53:f8:4c:66:96:85:a5:
                    6c:be:7d:2e:b4:c7:44:69:41:00:8d:84:04:3d:3c:
                    fd:b2:fd:df:12:67:d4:6f:90:09:67:de:58:59:23:
                    eb:16:90:66:3a:ab:38:50:12:c7:77:a6:bd:fc:08:
                    fb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DF:C9:6A:2B:7C:3F:FB:29:11:9B:7F:E1:B0:33:21:71:13:10:8A
            X509v3 Authority Key Identifier:
                keyid:37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3136392e31322e302f32322d3234203d3e20323638353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:1a:1d:34:0f:2b:59:33:f1:e2:f0:a2:e1:84:33:37:3d:51:
         b8:3b:83:50:fb:8d:52:43:26:2e:9a:7e:a7:90:e8:d1:e6:be:
         b5:6d:2a:18:c4:d3:6d:b3:5d:e8:26:83:2a:3a:6c:00:79:a4:
         28:a6:c5:7a:b8:e8:6a:b6:01:6b:3f:a3:64:f9:98:7c:15:06:
         50:62:a9:b4:f8:86:49:9e:5c:3e:be:94:9b:e5:98:4e:40:f0:
         6f:1f:5b:80:01:e2:53:7c:26:37:85:93:30:c0:59:91:63:d0:
         0a:0a:d6:72:ef:58:c4:8f:14:1f:f9:2b:a2:29:9e:e6:d8:16:
         7e:2b:cc:51:a7:0f:19:a3:2b:47:c3:c2:f3:f8:5b:4b:b6:1d:
         6f:3f:30:59:17:8e:c5:ab:63:39:4a:ff:35:84:28:f0:35:69:
         00:12:4c:1e:37:52:bd:fe:75:d3:db:e3:87:bf:8e:9c:fc:f6:
         b4:35:b9:65:73:93:fb:0b:de:41:52:a9:3f:67:61:3f:79:12:
         e4:53:7a:54:7a:1a:47:8d:b7:07:0e:18:17:06:0d:17:ff:0d:
         17:a0:b3:50:91:e5:76:b1:75:b6:7f:c4:44:b7:ad:7e:1b:bb:
         75:c0:a8:6c:f0:31:ec:f2:57:81:37:8d:8c:62:6e:67:c4:90:
         73:73:ee:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:38 2024 by rpki-client on console-ams.rpki-client.org