Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37362e302f32322d3232203d3e20323638383930.roa
File:                     34352e3137352e37362e302f32322d3232203d3e20323638383930.roa (raw, json)
Hash identifier:          RERtUr7gKXgjkgMb2cDAOvmQsIi3Qa41DcZBgMD6qxM=
Subject key identifier:   46:58:80:14:9F:3B:98:48:7E:2E:9A:0A:44:F1:62:3D:E3:40:1E:DB
Certificate issuer:       /CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
Certificate serial:       2560C60A8D378969959BF83D1072438D4B009880
Authority key identifier: A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37362e302f32322d3232203d3e20323638383930.roa
Signing time:             Tue 09 Apr 2024 19:49:52 +0000
ROA not before:           Tue 09 Apr 2024 19:44:52 +0000
ROA not after:            Tue 08 Apr 2025 19:49:52 +0000
asID:                     268890
IP address blocks:        45.175.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.crl
                          rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:60:c6:0a:8d:37:89:69:95:9b:f8:3d:10:72:43:8d:4b:00:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
        Validity
            Not Before: Apr  9 19:44:52 2024 GMT
            Not After : Apr  8 19:49:52 2025 GMT
        Subject: CN=465880149F3B98487E2E9A0A44F1623DE3401EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:63:2c:16:bd:b6:76:36:f6:f6:1d:2d:e2:
                    ca:26:d0:76:35:be:bf:fd:6d:5a:a1:d2:10:97:e5:
                    c8:84:66:6c:2f:d3:34:ae:7e:23:67:9f:30:46:cb:
                    11:1d:fd:db:1e:82:9f:73:79:02:16:30:9d:7a:84:
                    89:37:0b:20:d0:cb:ea:6c:68:b2:58:e0:f8:33:be:
                    b4:fd:03:72:5d:e8:d6:3b:ae:91:8d:df:3d:79:eb:
                    be:c0:e1:d5:49:9c:fb:98:dc:56:b5:84:15:e4:30:
                    ed:97:d9:cd:f2:16:14:e9:ee:06:f3:0b:45:a8:95:
                    6e:df:85:3f:1f:66:fd:fb:46:43:ad:fa:9d:a0:06:
                    6f:7c:d0:43:26:39:2e:69:8d:42:1b:7f:04:96:7b:
                    47:4c:40:be:b5:9a:64:ed:e4:98:dc:6b:32:b9:0a:
                    f1:58:df:e4:b3:cf:15:86:f2:26:48:3d:72:84:bd:
                    2d:74:7b:83:65:8f:15:e4:a3:6a:c7:b3:ee:9f:58:
                    39:63:d1:fd:e9:74:9a:8b:64:ee:22:e0:68:80:3f:
                    8f:12:d1:44:b1:b7:b9:1e:38:e7:50:90:07:f6:e4:
                    26:19:2d:4a:15:6d:79:f3:57:e7:4f:4f:a4:a4:6c:
                    d0:c3:90:67:b5:8c:f0:2c:7d:36:66:9c:c0:b9:3f:
                    c9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:58:80:14:9F:3B:98:48:7E:2E:9A:0A:44:F1:62:3D:E3:40:1E:DB
            X509v3 Authority Key Identifier:
                keyid:A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37362e302f32322d3232203d3e20323638383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:6d:5a:c4:26:7f:f1:67:b8:86:5f:f6:99:73:61:dd:12:ce:
         89:6a:d3:22:c3:0a:ec:c5:00:d5:24:be:d8:fb:fe:44:77:63:
         b5:ee:93:22:08:1a:14:76:39:d7:a8:44:d1:d4:34:6f:26:b9:
         7e:54:44:be:85:43:6c:37:1c:5c:96:94:41:df:24:e2:b2:59:
         3c:08:a3:9c:4c:67:f6:21:14:48:5c:aa:c8:26:90:75:0d:03:
         cd:74:46:ea:29:d5:33:33:73:8b:df:27:87:5a:9b:fa:fd:66:
         8f:79:c4:25:4b:7c:eb:9d:27:1e:2d:6b:16:f2:2c:f5:4c:07:
         f1:7d:bc:00:e5:6a:c0:9f:b0:cf:a7:83:5a:06:3d:ff:fb:2d:
         c9:e7:f1:d6:2e:3b:4b:d6:b0:18:99:cc:6c:67:87:30:9c:64:
         cd:39:fc:4b:dd:af:e5:0d:10:aa:3c:3f:62:06:6e:6b:c1:e1:
         6a:ac:5b:e7:b3:a2:6a:80:01:02:f7:f8:f9:97:1d:c2:7a:98:
         65:be:3f:3e:f4:b5:46:4f:7e:4c:aa:93:3b:fb:7f:8c:32:1d:
         89:ab:4e:fe:39:53:33:b5:da:e4:e3:84:a1:6b:be:cc:7f:5f:
         3a:3e:b0:44:3a:fb:21:67:ec:9b:db:c5:26:ee:9d:10:2e:47:
         1f:d5:e8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:42 2024 by rpki-client on console-ams.rpki-client.org