Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/1/34352e3139302e3230302e302f32322d3234203d3e20323639363530.roa
File:                     34352e3139302e3230302e302f32322d3234203d3e20323639363530.roa (raw, json)
Hash identifier:          RMVXz3LzJejg5gmHByLFAXjHzAGcUjLiSBdmkBDxQqc=
Subject key identifier:   EB:63:2B:2D:64:FB:BB:B5:27:0A:81:D0:1A:B9:AD:24:2E:3E:D9:88
Certificate issuer:       /CN=97424470C7D54F881BCE937CD5129F6A6F1340E1
Certificate serial:       57C61396625401C4CC472EE242032544A7E804A3
Authority key identifier: 97:42:44:70:C7:D5:4F:88:1B:CE:93:7C:D5:12:9F:6A:6F:13:40:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/1/34352e3139302e3230302e302f32322d3234203d3e20323639363530.roa
Signing time:             Fri 05 Apr 2024 00:15:41 +0000
ROA not before:           Fri 05 Apr 2024 00:10:41 +0000
ROA not after:            Fri 04 Apr 2025 00:15:41 +0000
asID:                     269650
IP address blocks:        45.190.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.crl
                          rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c6:13:96:62:54:01:c4:cc:47:2e:e2:42:03:25:44:a7:e8:04:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97424470C7D54F881BCE937CD5129F6A6F1340E1
        Validity
            Not Before: Apr  5 00:10:41 2024 GMT
            Not After : Apr  4 00:15:41 2025 GMT
        Subject: CN=EB632B2D64FBBBB5270A81D01AB9AD242E3ED988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:ca:9f:38:c9:cc:dd:a9:a0:ce:63:7b:f9:
                    b8:18:8f:e4:b7:ca:77:ec:9c:52:ee:83:bf:69:7d:
                    59:00:c4:d9:f9:ae:b5:6b:24:8c:04:f5:28:c9:48:
                    cc:ef:15:35:17:4e:a6:fd:f0:be:aa:1d:09:96:fb:
                    27:c2:e2:b9:87:72:3d:8f:e9:74:04:f1:03:c1:19:
                    87:79:02:4b:de:2f:1b:23:b1:34:f2:80:4e:47:49:
                    bc:87:8a:d7:0f:88:46:10:18:4b:87:b1:e3:7f:61:
                    63:74:7f:2b:60:13:85:d5:b2:4d:1c:4a:20:91:cf:
                    04:f8:55:21:6c:bc:2c:9b:f4:7f:cc:5f:ba:0b:e2:
                    c2:62:89:62:db:29:93:8e:f6:d5:f8:0c:97:37:0a:
                    0d:09:22:89:38:ed:9d:9a:89:38:fb:f8:b3:f0:49:
                    f7:80:f7:a0:c7:07:c3:18:3b:68:4c:a7:59:26:d6:
                    0e:9a:09:db:e3:c1:22:ef:81:ca:18:27:ea:7f:7e:
                    13:e5:01:fa:b0:76:64:3d:da:69:71:f1:52:59:62:
                    12:70:c1:25:c3:6f:7d:61:4d:bd:53:2c:8b:ef:df:
                    5b:09:3a:5d:98:f2:24:ae:28:e6:da:24:ed:30:74:
                    8e:d8:e4:ce:87:62:e3:92:f4:f3:94:c9:1a:54:e5:
                    dc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:63:2B:2D:64:FB:BB:B5:27:0A:81:D0:1A:B9:AD:24:2E:3E:D9:88
            X509v3 Authority Key Identifier:
                keyid:97:42:44:70:C7:D5:4F:88:1B:CE:93:7C:D5:12:9F:6A:6F:13:40:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/1/34352e3139302e3230302e302f32322d3234203d3e20323639363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:cd:17:93:e7:2e:13:1c:d2:67:81:92:7b:78:ab:5c:0e:23:
         30:e3:2b:67:c6:c8:27:7f:ce:b4:88:e4:ea:be:55:a9:0d:fc:
         4b:de:9d:f8:a4:76:18:7f:f4:ee:59:45:db:6d:5d:f6:e3:e6:
         e0:44:f7:37:bf:d7:ac:30:d3:88:41:15:51:df:b9:13:ec:1b:
         e4:15:2d:b4:86:85:c4:2e:ae:49:3c:10:ef:fd:33:4e:21:fc:
         93:62:ae:f5:66:cd:c7:eb:fc:61:aa:b6:74:81:97:b3:34:6b:
         58:99:10:21:3d:79:14:90:89:74:e1:80:76:32:5d:03:b4:48:
         f6:4e:b0:03:b4:61:c4:66:2f:15:af:ab:02:cc:c0:a2:d6:36:
         ce:b4:34:b1:63:c6:22:f0:22:8a:df:b5:a8:2b:41:72:73:9a:
         d3:8a:c1:9c:41:ab:3b:93:01:11:d2:b8:3f:94:c5:26:25:96:
         b2:43:07:2f:d3:4d:06:d6:18:17:50:90:90:8b:f7:54:de:4c:
         fd:ba:36:b0:c8:dc:0e:3e:3e:ff:59:b0:e6:ce:cf:7e:84:e6:
         45:4d:ca:04:cc:13:1f:27:1e:a7:33:11:b8:f9:04:17:f3:ed:
         5c:8f:ab:b6:d1:10:36:9a:77:c6:4e:84:2a:5d:9a:c9:f4:14:
         6d:0a:3e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:14 2024 by rpki-client on console-ams.rpki-client.org