Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa
File:                     34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa (raw, json)
Hash identifier:          kK9LvCwZQI+rTb8yIWNGrwxyADBCEh3A3LQb7DbRe9c=
Subject key identifier:   F6:3C:28:20:89:1C:D2:EF:9A:FE:A5:B1:89:3F:06:20:C5:B9:94:6D
Certificate issuer:       /CN=34A7CCFC7C772724C4E2BB07944ECA8C90A68777
Certificate serial:       0AA710BB073964B4B525B8D1E4F23FE52F8E91FF
Authority key identifier: 34:A7:CC:FC:7C:77:27:24:C4:E2:BB:07:94:4E:CA:8C:90:A6:87:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34A7CCFC7C772724C4E2BB07944ECA8C90A68777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa
Signing time:             Thu 07 Nov 2024 13:12:01 +0000
ROA not before:           Thu 07 Nov 2024 13:07:01 +0000
ROA not after:            Thu 06 Nov 2025 13:12:01 +0000
asID:                     267669
IP address blocks:        45.224.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/34A7CCFC7C772724C4E2BB07944ECA8C90A68777.crl
                          rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/34A7CCFC7C772724C4E2BB07944ECA8C90A68777.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34A7CCFC7C772724C4E2BB07944ECA8C90A68777.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a7:10:bb:07:39:64:b4:b5:25:b8:d1:e4:f2:3f:e5:2f:8e:91:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34A7CCFC7C772724C4E2BB07944ECA8C90A68777
        Validity
            Not Before: Nov  7 13:07:01 2024 GMT
            Not After : Nov  6 13:12:01 2025 GMT
        Subject: CN=F63C2820891CD2EF9AFEA5B1893F0620C5B9946D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:64:7a:4b:64:20:ab:e8:f4:31:6f:39:7b:
                    8e:b5:8f:4b:29:32:da:c4:bd:28:91:30:0f:55:3d:
                    32:1f:e2:53:f6:e3:1a:2f:f2:9c:f6:e5:95:5f:ee:
                    0c:3c:eb:5c:f1:05:da:4c:1f:10:f0:58:60:84:05:
                    9f:8f:ad:38:50:c6:72:55:31:fe:5e:0d:1f:c3:a4:
                    df:dc:c9:11:96:62:a2:66:0b:8a:b5:8e:27:f6:21:
                    ae:6c:fb:9c:43:76:5b:b7:46:bf:86:1d:49:e5:c1:
                    48:64:a1:f1:2a:07:14:70:b4:2b:0e:55:48:bb:2f:
                    4d:b5:49:9d:d6:2a:1d:c9:35:0c:7d:ae:da:11:8b:
                    69:b7:7b:fc:ae:dc:f0:1d:60:25:99:e4:ec:9c:f8:
                    4f:46:6c:88:5d:d0:d3:68:94:50:cb:0e:26:1e:15:
                    96:35:24:f1:e5:2b:8c:57:17:07:b2:6a:af:ab:77:
                    64:f0:48:44:fb:29:88:f3:44:8d:ad:5f:ba:20:9d:
                    29:58:3f:1d:ed:df:4d:2c:f9:85:93:35:16:ff:2f:
                    d0:8a:d7:90:b4:d9:ff:cc:9b:ce:a3:55:23:c0:4d:
                    7d:59:3a:65:8b:1d:43:f2:89:77:3f:b0:9a:4c:89:
                    38:96:90:f1:4d:d2:fb:03:84:40:33:9a:cd:62:be:
                    fb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3C:28:20:89:1C:D2:EF:9A:FE:A5:B1:89:3F:06:20:C5:B9:94:6D
            X509v3 Authority Key Identifier:
                keyid:34:A7:CC:FC:7C:77:27:24:C4:E2:BB:07:94:4E:CA:8C:90:A6:87:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/34A7CCFC7C772724C4E2BB07944ECA8C90A68777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34A7CCFC7C772724C4E2BB07944ECA8C90A68777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:73:eb:db:18:f3:0c:53:a0:39:ab:eb:06:52:96:e6:be:00:
         c0:b3:cb:7c:f8:05:5f:8a:e5:65:e7:ca:80:8f:ba:82:a9:ea:
         d1:c5:60:2d:f8:39:57:1a:87:6f:44:76:82:6e:b3:88:5d:93:
         3f:bd:d5:29:17:7d:9d:a7:ab:2a:54:83:8c:dd:06:4c:82:d3:
         05:e8:7d:d7:c6:05:ac:49:d5:9d:07:48:5a:17:1e:de:0e:de:
         5f:3d:2e:df:6e:13:99:54:49:7c:5a:6d:cf:0b:8c:24:c9:b6:
         07:f2:86:7d:94:17:f4:3d:6b:cf:ae:e6:34:fd:81:12:af:66:
         76:6a:75:16:ec:dd:52:3e:4b:47:06:95:d2:c3:7a:0b:9e:99:
         0a:f8:81:4b:41:32:8b:58:94:58:0e:f6:ee:6e:b4:99:ba:65:
         a0:60:64:7c:8f:3e:aa:38:b9:94:19:fd:3f:80:66:dc:41:c9:
         44:2c:5e:4a:d8:5b:b4:6f:b4:c1:f0:8c:5c:5a:3d:8b:f9:73:
         04:1d:ee:c7:95:78:2b:f9:61:44:39:b7:c9:2a:48:30:89:ad:
         78:8f:f1:db:6f:d3:de:4d:a2:ca:55:66:89:cd:23:c7:e1:9c:
         3a:4c:3a:54:9f:fa:11:a8:e1:c0:1c:6e:ee:d5:dc:30:37:67:
         ed:ac:af:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:06 2024 by rpki-client on console-fra.rpki-client.org