Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138312e35362e302f32322d3234203d3e20323638353436.roa
File:                     34352e3138312e35362e302f32322d3234203d3e20323638353436.roa (raw, json)
Hash identifier:          GX+S4rmGtA+n+zEyisiNDNiQQ3Col39ugGRDBA07x7g=
Subject key identifier:   36:87:66:9B:26:8B:9F:78:E0:E5:75:62:D7:3E:ED:8E:73:78:BD:C0
Certificate issuer:       /CN=37CA3286264D504D79210CC12A74E15D2E230251
Certificate serial:       21629BCA3519310BB8EF6E579F25821162CFDD65
Authority key identifier: 37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138312e35362e302f32322d3234203d3e20323638353436.roa
Signing time:             Mon 12 Aug 2024 13:17:33 +0000
ROA not before:           Mon 12 Aug 2024 13:12:33 +0000
ROA not after:            Mon 11 Aug 2025 13:17:33 +0000
asID:                     268546
IP address blocks:        45.181.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.crl
                          rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:62:9b:ca:35:19:31:0b:b8:ef:6e:57:9f:25:82:11:62:cf:dd:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37CA3286264D504D79210CC12A74E15D2E230251
        Validity
            Not Before: Aug 12 13:12:33 2024 GMT
            Not After : Aug 11 13:17:33 2025 GMT
        Subject: CN=3687669B268B9F78E0E57562D73EED8E7378BDC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:79:51:37:35:6b:ad:83:54:db:7f:eb:a9:
                    d8:b5:80:58:b3:7b:d7:83:7c:1a:2d:c6:f0:e2:59:
                    6d:8d:dc:a4:76:a7:7c:fe:24:9c:ca:77:73:65:11:
                    6b:1b:ce:40:3f:2e:a7:bd:e6:12:a5:51:2b:b0:f9:
                    be:13:17:c8:dc:94:73:42:62:5b:bc:0d:10:fa:87:
                    99:7e:26:0d:46:79:ee:ee:59:d8:66:ba:3b:b2:07:
                    f4:51:89:9d:52:14:e9:e5:93:4a:ae:38:40:ef:09:
                    e9:27:7b:ab:37:29:ba:a8:53:0b:c4:a5:29:a0:8a:
                    76:6c:32:1c:c1:62:90:a3:58:b4:0e:f0:b5:ec:2c:
                    bb:5c:de:de:06:c3:d4:6e:1a:f3:94:fa:af:b0:6f:
                    1f:70:7a:0f:c0:a2:17:b8:02:4f:c5:e6:e4:cf:45:
                    89:b1:03:7d:ca:fa:44:61:89:bb:dd:f0:a6:6a:9d:
                    60:f3:69:9f:13:40:4f:f3:1d:2f:6c:20:4f:b3:8c:
                    a8:db:69:78:6e:f2:60:08:29:7a:9d:e8:58:73:39:
                    56:24:64:26:ae:0d:74:97:fd:73:b8:fc:ea:6f:6e:
                    f9:58:7d:35:89:7a:72:78:c2:81:e7:cc:a9:9d:55:
                    d0:8c:80:20:cb:61:6b:86:2e:52:4c:5b:78:94:33:
                    06:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:87:66:9B:26:8B:9F:78:E0:E5:75:62:D7:3E:ED:8E:73:78:BD:C0
            X509v3 Authority Key Identifier:
                keyid:37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138312e35362e302f32322d3234203d3e20323638353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:f8:7c:85:b6:cf:41:7c:66:74:21:39:d1:9e:07:97:89:c4:
         1b:5c:0f:82:3a:f9:66:12:ce:ff:d9:d2:c2:35:29:d4:af:f5:
         a0:72:b3:69:6c:0b:18:d8:dc:0e:25:f0:1e:23:b1:f6:10:8d:
         5f:29:42:88:55:ab:20:75:aa:d0:98:80:e3:13:5d:76:90:4c:
         aa:41:5e:97:4b:0b:52:aa:7b:cc:4c:dd:4d:61:20:0a:0c:e9:
         86:9a:62:15:20:08:53:d8:22:a7:4e:53:97:5c:ae:cc:d5:56:
         eb:84:4a:c8:d7:68:c2:19:2d:e0:24:bd:9b:00:33:17:eb:4d:
         86:4c:87:40:b2:22:58:bf:ce:ef:81:f6:83:7a:e7:ec:ec:05:
         53:09:97:4a:02:13:54:ad:67:92:07:31:0d:5b:e4:d8:e1:d0:
         93:38:03:56:c3:45:76:ae:e6:c9:4b:56:8f:d3:be:51:db:fc:
         38:53:e9:26:b9:fb:86:5d:8e:bd:72:4d:7f:f0:ee:a1:1f:b9:
         e1:29:13:bf:73:40:a3:33:c1:b9:27:68:cb:26:19:40:2d:aa:
         34:ea:9b:78:88:ea:a4:af:9c:ac:c1:a9:57:7a:46:87:88:9a:
         73:a0:f4:31:32:57:df:a0:b1:13:db:28:a1:cd:04:61:32:2e:
         02:b5:4a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:38 2024 by rpki-client on console-ams.rpki-client.org