Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233342e302f32342d3234203d3e20323637313737.roa
File:                     34352e3233302e3233342e302f32342d3234203d3e20323637313737.roa (raw, json)
Hash identifier:          v3E05v3UvgWpR3cgVNU8TH8Gffus+Uv2XVdftUdz3wA=
Subject key identifier:   2B:90:78:A8:3C:82:26:16:DD:BF:28:E5:9B:85:21:69:80:5C:42:87
Certificate issuer:       /CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
Certificate serial:       1BE697F63C590223E970342FB70D75EE84A4F49E
Authority key identifier: 76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233342e302f32342d3234203d3e20323637313737.roa
Signing time:             Thu 04 Apr 2024 13:05:39 +0000
ROA not before:           Thu 04 Apr 2024 13:00:39 +0000
ROA not after:            Thu 03 Apr 2025 13:05:39 +0000
asID:                     267177
IP address blocks:        45.230.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl
                          rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e6:97:f6:3c:59:02:23:e9:70:34:2f:b7:0d:75:ee:84:a4:f4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
        Validity
            Not Before: Apr  4 13:00:39 2024 GMT
            Not After : Apr  3 13:05:39 2025 GMT
        Subject: CN=2B9078A83C822616DDBF28E59B852169805C4287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:67:11:00:04:c6:ce:e5:f0:03:05:40:6e:
                    18:c0:c9:9a:a1:57:1e:35:72:39:78:09:37:4d:0f:
                    90:96:18:53:de:13:92:d0:eb:1d:a5:2f:e2:b2:75:
                    c4:db:b3:11:77:b9:25:22:c8:21:0a:ca:68:e9:84:
                    cd:2e:73:34:d4:2d:1e:a9:05:60:53:85:53:47:6a:
                    67:88:40:bf:36:ce:24:ff:b4:83:f3:61:b6:54:24:
                    91:77:88:71:66:4e:c8:2a:dd:22:24:5f:20:21:5f:
                    36:ae:ea:67:85:49:b6:08:b4:92:0d:87:ea:84:68:
                    03:2b:2c:d9:52:08:36:a4:d9:ad:c8:47:84:4b:03:
                    e6:ef:97:71:d6:fc:a8:55:97:2c:97:31:68:96:15:
                    3e:93:23:3a:dc:5d:b0:24:9e:f7:4b:36:a0:55:37:
                    fb:eb:af:07:0d:7f:a0:e2:ee:41:b2:40:09:86:18:
                    89:4c:3d:a4:e7:64:bf:6f:3c:a5:04:bf:af:ab:f9:
                    38:56:db:2f:a3:3e:46:51:aa:e1:a8:6c:23:82:b1:
                    25:d2:52:3e:3c:74:c8:d9:f1:c1:e4:7d:b7:2e:b7:
                    99:a4:38:a5:fd:58:a5:b3:80:6b:a7:79:d1:ee:66:
                    db:d0:43:1e:3b:f3:51:76:60:a0:94:67:89:78:46:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:90:78:A8:3C:82:26:16:DD:BF:28:E5:9B:85:21:69:80:5C:42:87
            X509v3 Authority Key Identifier:
                keyid:76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233342e302f32342d3234203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:fc:36:d1:e3:55:0d:e3:6e:cc:f9:15:3e:bb:df:4b:10:c1:
         f9:9e:a1:57:24:6d:a2:f7:0a:09:0f:0c:7f:8f:38:a9:26:24:
         00:7f:94:4d:71:22:ab:c8:57:d9:40:71:d0:6a:54:5e:15:2f:
         f2:57:a5:9e:86:c9:d7:3e:42:d1:25:52:4f:4b:5a:d2:c2:46:
         25:50:a9:dd:93:a4:94:b4:88:2b:23:04:87:c0:12:83:bf:10:
         55:c0:2c:09:44:36:36:03:f8:2c:ac:28:26:fd:8d:cc:06:65:
         f6:64:b5:c7:ef:8f:fe:b9:44:55:55:cd:ca:29:70:33:c3:4f:
         c2:d1:1a:fb:11:98:92:ac:c9:9c:12:10:3d:85:6d:a5:d6:86:
         12:2d:b9:11:f7:d5:d8:4b:95:55:21:6f:0f:7d:86:38:34:3e:
         68:df:57:5f:28:3b:1a:f2:6d:09:de:a5:1b:4c:0c:02:f9:ec:
         b1:f0:ac:86:d2:ee:09:c7:7a:fd:a7:ed:52:03:94:7f:8a:87:
         63:3a:62:aa:c8:a7:15:ef:cb:7f:96:00:d5:c8:85:e6:9a:f5:
         0d:3c:4d:3c:bb:b1:9e:88:01:1f:bb:fe:54:05:63:26:3f:df:
         a5:f0:be:7c:cc:5f:4e:d6:46:ff:a2:f3:ac:76:52:15:ff:5d:
         f3:2d:e1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:49 2024 by rpki-client on console-fra.rpki-client.org