Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/34352e3138372e3230342e302f32322d3234203d3e20323639343937.roa
File:                     34352e3138372e3230342e302f32322d3234203d3e20323639343937.roa (raw, json)
Hash identifier:          mznaxL6qFqexM2UFdYzxC0Qfcz792ss3emJVMTG2sRU=
Subject key identifier:   9F:E1:44:04:6A:D9:31:C8:3C:54:EF:EF:D2:83:C1:A5:AB:F7:F9:0A
Certificate issuer:       /CN=BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7
Certificate serial:       0E17FA84B293D441C1A3F9C950DE3159E85A88DB
Authority key identifier: BD:82:DD:BC:32:3F:4C:52:9A:2B:DA:07:55:A1:A8:F7:BF:2B:B0:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/34352e3138372e3230342e302f32322d3234203d3e20323639343937.roa
Signing time:             Thu 11 Apr 2024 20:40:35 +0000
ROA not before:           Thu 11 Apr 2024 20:35:35 +0000
ROA not after:            Thu 10 Apr 2025 20:40:35 +0000
asID:                     269497
IP address blocks:        45.187.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7.crl
                          rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:17:fa:84:b2:93:d4:41:c1:a3:f9:c9:50:de:31:59:e8:5a:88:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7
        Validity
            Not Before: Apr 11 20:35:35 2024 GMT
            Not After : Apr 10 20:40:35 2025 GMT
        Subject: CN=3082010A0282010100DD3D4E317478A342506696F01BC832D0FE7E258395183981F7D6170BD75115C92A2F314A571E9FE4623AE00382585AEDFAAC97E5E5F824253217D703F167C1CC96306EDE5EF95AE0BB801503AF2F9418E991582CC017BE21EAA3BB954B42C57FD604D35EACAF0A40DEDF86A8A3ABE9AE52614390EF3DD76D9ED212C8B105E251402B774E70230B1C33FE55C8CC71E56B34721462BF1F3299FD8C2738B0992CA49D41DF11B76EEBBCAE84730252E699D5040CE7309FB285DDA53A100560CE75F825C45185D853F3F92AFEDB58B65655E2661617C9E43B53D0C5BFE435615AF6074B18335D3956BB7E57E90076E069A2D921E455EEB64C7C5A240311DDBEA267B50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3d:4e:31:74:78:a3:42:50:66:96:f0:1b:c8:
                    32:d0:fe:7e:25:83:95:18:39:81:f7:d6:17:0b:d7:
                    51:15:c9:2a:2f:31:4a:57:1e:9f:e4:62:3a:e0:03:
                    82:58:5a:ed:fa:ac:97:e5:e5:f8:24:25:32:17:d7:
                    03:f1:67:c1:cc:96:30:6e:de:5e:f9:5a:e0:bb:80:
                    15:03:af:2f:94:18:e9:91:58:2c:c0:17:be:21:ea:
                    a3:bb:95:4b:42:c5:7f:d6:04:d3:5e:ac:af:0a:40:
                    de:df:86:a8:a3:ab:e9:ae:52:61:43:90:ef:3d:d7:
                    6d:9e:d2:12:c8:b1:05:e2:51:40:2b:77:4e:70:23:
                    0b:1c:33:fe:55:c8:cc:71:e5:6b:34:72:14:62:bf:
                    1f:32:99:fd:8c:27:38:b0:99:2c:a4:9d:41:df:11:
                    b7:6e:eb:bc:ae:84:73:02:52:e6:99:d5:04:0c:e7:
                    30:9f:b2:85:dd:a5:3a:10:05:60:ce:75:f8:25:c4:
                    51:85:d8:53:f3:f9:2a:fe:db:58:b6:56:55:e2:66:
                    16:17:c9:e4:3b:53:d0:c5:bf:e4:35:61:5a:f6:07:
                    4b:18:33:5d:39:56:bb:7e:57:e9:00:76:e0:69:a2:
                    d9:21:e4:55:ee:b6:4c:7c:5a:24:03:11:dd:be:a2:
                    67:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E1:44:04:6A:D9:31:C8:3C:54:EF:EF:D2:83:C1:A5:AB:F7:F9:0A
            X509v3 Authority Key Identifier:
                keyid:BD:82:DD:BC:32:3F:4C:52:9A:2B:DA:07:55:A1:A8:F7:BF:2B:B0:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD82DDBC323F4C529A2BDA0755A1A8F7BF2BB0C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/34352e3138372e3230342e302f32322d3234203d3e20323639343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:34:5f:fb:65:a0:17:c1:a4:54:8f:33:f4:fc:68:42:3a:0d:
         5b:29:c0:40:3d:97:34:f1:6d:6e:d0:19:59:36:2c:0d:3d:d9:
         9f:15:20:52:9a:40:09:f8:8c:78:d0:fd:80:3c:06:23:5a:ad:
         51:7c:1e:37:54:da:d8:c6:af:e7:5e:06:e0:a5:e5:f8:56:91:
         73:a2:5d:65:fc:4c:bb:c0:be:ba:2c:42:37:ca:5c:90:8b:9d:
         b9:c4:c1:ea:4d:3f:81:5e:c2:b9:07:1f:cb:7c:b7:73:8d:5f:
         27:cd:02:6d:84:3e:66:5e:e4:4f:89:b9:62:c3:57:83:e0:04:
         80:c4:ee:17:8a:e7:9b:6a:b4:d5:5c:54:4f:3f:5a:17:ab:6e:
         d0:19:45:8e:29:62:3b:67:62:ee:6f:5e:41:04:70:a3:ca:76:
         54:51:38:f9:af:fe:e1:8a:b9:70:81:6a:7e:79:09:57:0f:b3:
         44:62:78:da:59:9a:92:49:31:49:74:af:b0:c2:83:8c:b4:e7:
         fa:29:99:0a:24:16:4b:7b:fe:e9:3a:7f:c7:7e:da:af:a5:fb:
         7e:e2:31:5d:cc:e9:26:b9:26:2d:53:ad:b7:cd:35:a4:10:49:
         9e:8f:75:5d:db:a6:c4:ee:59:2e:9f:86:81:55:3b:f3:5a:f9:
         14:85:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:37 2024 by rpki-client on console-ams.rpki-client.org