Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/34352e342e35362e302f32322d3234203d3e20323636303338.roa
File:                     34352e342e35362e302f32322d3234203d3e20323636303338.roa (raw, json)
Hash identifier:          9/uc1MoUYSgPl5kNzK5nNaFjvv7HHO3ps6C8SN0vut0=
Subject key identifier:   23:21:F3:4F:16:6F:84:5B:05:0E:FA:B9:2D:FA:EF:4B:57:85:AA:CF
Certificate issuer:       /CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
Certificate serial:       090C5802EDED5DC1E16536D4D1673DE772026385
Authority key identifier: 96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/34352e342e35362e302f32322d3234203d3e20323636303338.roa
Signing time:             Thu 04 Apr 2024 18:12:53 +0000
ROA not before:           Thu 04 Apr 2024 18:07:53 +0000
ROA not after:            Thu 03 Apr 2025 18:12:53 +0000
asID:                     266038
IP address blocks:        45.4.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl
                          rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0c:58:02:ed:ed:5d:c1:e1:65:36:d4:d1:67:3d:e7:72:02:63:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
        Validity
            Not Before: Apr  4 18:07:53 2024 GMT
            Not After : Apr  3 18:12:53 2025 GMT
        Subject: CN=2321F34F166F845B050EFAB92DFAEF4B5785AACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:ac:80:ba:5a:52:1d:03:cb:28:ac:60:ec:
                    08:ae:9f:de:97:92:7e:37:37:5d:7d:26:50:f8:99:
                    d4:e8:36:ba:f3:9f:b5:45:75:24:d2:f7:42:c7:49:
                    6d:07:05:5e:d0:d4:f0:8c:2c:af:0d:83:09:c3:f6:
                    54:4e:8e:17:10:a3:87:59:ab:13:fc:9d:3b:fd:cf:
                    4d:73:2d:d2:c2:f3:f1:b1:97:fb:c6:fe:05:fd:62:
                    3c:6e:45:af:f8:c5:90:aa:1e:ab:99:df:d9:94:eb:
                    b7:a3:8b:6e:72:a2:80:6e:79:31:a8:7b:4a:62:13:
                    7b:b8:8a:77:ad:bb:38:99:dd:8e:fd:54:4b:c4:32:
                    8d:0f:3a:ed:16:9c:b4:6e:30:03:27:cb:a5:12:94:
                    18:a5:47:30:65:fe:47:8f:f0:12:bc:b7:28:37:ea:
                    7e:d0:90:69:99:b4:ce:96:d3:eb:76:9b:c0:58:e5:
                    a7:ba:9b:94:35:87:75:c6:42:af:45:b3:93:b5:76:
                    ac:a9:a1:23:84:f3:a2:b1:f3:c9:b5:c4:99:ee:ce:
                    d0:87:65:f3:98:fd:fc:8b:9e:51:17:4c:82:37:19:
                    aa:9c:0a:95:12:26:f8:6d:4f:4d:61:2e:67:aa:93:
                    3b:e8:9c:cd:85:21:d3:a7:3e:7a:07:40:3b:3c:b5:
                    d5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:21:F3:4F:16:6F:84:5B:05:0E:FA:B9:2D:FA:EF:4B:57:85:AA:CF
            X509v3 Authority Key Identifier:
                keyid:96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/34352e342e35362e302f32322d3234203d3e20323636303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:86:73:9b:9d:90:8c:63:db:74:86:4b:63:05:e4:f7:d8:13:
         48:45:49:14:00:2b:b0:47:fe:bd:68:35:c2:d3:be:d4:9c:a5:
         d1:94:18:d4:74:9c:2d:76:29:b9:4a:26:cb:a6:66:87:24:13:
         81:5c:8b:07:ce:d3:05:0d:a3:7c:5f:47:23:57:27:57:3c:93:
         c3:c6:45:4a:a1:0f:2a:fe:41:3b:97:28:ba:b3:e8:35:f3:48:
         b7:46:12:a3:f9:f5:74:46:6e:39:d9:b0:5f:af:ef:a1:7a:38:
         60:bf:5c:79:46:f8:30:71:10:f6:53:02:e1:b8:cb:e5:35:a8:
         2e:09:11:96:e9:6b:fd:5e:b6:e1:38:1f:59:3b:2b:b7:11:f7:
         49:9c:26:03:6d:ee:fc:03:71:d6:38:67:32:13:df:90:23:a9:
         4e:30:f8:f8:fe:09:39:cd:e0:fa:8b:98:97:0c:9f:b4:56:9b:
         1d:4a:2a:08:3b:b8:18:9e:90:74:fd:bf:37:32:52:02:ad:3a:
         97:8a:6a:26:b5:e0:4f:b8:84:38:f5:eb:cf:0f:63:15:d5:a1:
         97:6a:07:83:d8:54:90:ed:20:23:9a:21:c9:9e:78:5d:a4:6e:
         03:00:46:0a:99:df:5c:ca:e7:b5:01:c5:35:43:65:c7:c5:be:
         33:a2:e0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:59:34 2024 by rpki-client on console-ams.rpki-client.org