Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/34352e3137372e3134302e302f32322d3234203d3e20323636353230.roa
File:                     34352e3137372e3134302e302f32322d3234203d3e20323636353230.roa (raw, json)
Hash identifier:          Q5YY1ZQ6uM872/zujTZWapCPEIvtTz6hJ3sGkH1CyMg=
Subject key identifier:   7D:D4:D4:22:AB:75:A1:D3:85:AA:50:58:CD:0C:A7:F6:37:FD:1D:55
Certificate issuer:       /CN=9A8CDCA9443D140D02860AA0070928656A172CE1
Certificate serial:       6DF754BB5B1DE514BF37DCF2FD2DEAE492CD39DE
Authority key identifier: 9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/34352e3137372e3134302e302f32322d3234203d3e20323636353230.roa
Signing time:             Thu 04 Apr 2024 03:00:41 +0000
ROA not before:           Thu 04 Apr 2024 02:55:41 +0000
ROA not after:            Thu 03 Apr 2025 03:00:41 +0000
asID:                     266520
IP address blocks:        45.177.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl
                          rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 22:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f7:54:bb:5b:1d:e5:14:bf:37:dc:f2:fd:2d:ea:e4:92:cd:39:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A8CDCA9443D140D02860AA0070928656A172CE1
        Validity
            Not Before: Apr  4 02:55:41 2024 GMT
            Not After : Apr  3 03:00:41 2025 GMT
        Subject: CN=7DD4D422AB75A1D385AA5058CD0CA7F637FD1D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:00:f3:b0:bb:39:d4:d1:d8:77:5a:b9:66:
                    16:7d:b0:82:58:84:54:54:95:86:11:ad:1a:6f:18:
                    b5:c9:e6:75:45:c1:86:b3:99:c1:07:c9:92:af:01:
                    61:b3:a1:81:41:74:c8:4e:83:94:54:81:c2:c5:e7:
                    f7:e7:05:82:a0:15:3f:8e:c2:c4:f0:52:39:85:d0:
                    6f:81:82:15:83:3c:13:38:11:5a:5e:ab:21:fb:6c:
                    75:7a:f5:cb:1e:37:95:9d:38:e6:76:21:94:37:fa:
                    71:3c:cf:56:0d:34:5c:2f:26:10:5e:16:47:af:05:
                    76:6b:a2:86:21:0f:a4:60:45:0c:ac:a3:ae:60:b9:
                    9f:0f:c3:84:e8:d3:c8:47:bf:b3:31:25:4b:ce:0d:
                    9a:f4:5c:54:75:fb:d7:72:d5:f5:dc:85:d7:a8:c4:
                    1b:99:07:e1:2c:4d:34:bd:30:c2:3d:53:15:6e:47:
                    78:e1:24:9e:a5:b4:13:fe:03:a2:40:49:d2:70:f0:
                    fd:76:23:25:3e:a7:dc:e6:62:73:07:d1:19:2a:bf:
                    5b:4f:3a:fa:45:7b:2d:c3:96:8d:b4:17:bc:99:2f:
                    c6:6d:1d:4d:57:2b:a6:58:5c:d2:51:c3:b6:a9:87:
                    39:ee:20:7d:c6:9e:e9:11:2b:81:14:92:c5:64:4f:
                    92:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D4:D4:22:AB:75:A1:D3:85:AA:50:58:CD:0C:A7:F6:37:FD:1D:55
            X509v3 Authority Key Identifier:
                keyid:9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/34352e3137372e3134302e302f32322d3234203d3e20323636353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:5a:1c:30:8b:60:11:3b:e7:d4:32:e6:d0:a9:5b:bd:c0:d8:
         dd:51:e1:9d:f3:e4:f0:69:de:6a:4f:b2:e7:a4:2a:3f:d2:c1:
         5d:b4:0c:f6:e9:f9:98:03:36:e5:a6:f1:5c:40:47:c2:cc:b2:
         d2:a6:c9:2a:5a:0b:ab:de:c0:0d:44:78:16:a9:b9:2e:94:0d:
         c8:5e:6a:e1:82:85:f5:ca:fe:b2:cf:04:61:0a:5e:38:d4:9c:
         5b:ea:6b:b6:b6:dc:fd:0f:0d:a9:6d:25:00:06:2b:13:19:52:
         e0:16:7a:93:25:6c:8a:6c:39:2d:60:ca:3d:50:5d:c7:4a:17:
         86:65:fd:d6:c9:27:1a:9b:a4:13:5f:fd:cc:e6:c3:ef:6b:71:
         e2:85:6b:4c:07:36:34:5f:c1:3b:80:b7:50:54:bb:50:c3:e0:
         90:16:5f:41:c2:e7:d3:d9:ce:8c:0a:bd:69:24:62:99:12:bd:
         47:25:1e:c3:47:2f:ac:c9:79:bb:07:77:09:3f:2d:6c:c9:ee:
         4d:9e:46:0e:22:1f:1d:fc:fc:ac:02:dc:5d:36:45:90:2d:9d:
         c0:eb:2b:ae:4f:60:db:49:5e:b7:8b:4f:8c:16:68:c3:67:68:
         5d:ed:14:d2:49:d2:c7:aa:fa:b5:61:ac:ea:04:c2:77:03:8f:
         81:a3:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:11:06 2024 by rpki-client on console-ams.rpki-client.org