Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/34352e3232352e3130382e302f32322d3332203d3e20323636393333.roa
File:                     34352e3232352e3130382e302f32322d3332203d3e20323636393333.roa (raw, json)
Hash identifier:          48Fs9JOpRjyJVLljosKJ7F/WDS33QlLu8E3LgdOsLj8=
Subject key identifier:   7D:5A:95:44:70:2A:7F:63:F8:CC:17:10:A5:6A:B7:A4:B8:B6:0F:CF
Certificate issuer:       /CN=9C2E73CC95F1D482A4D9A31AD876FAF4B2753016
Certificate serial:       3F2C282BF4D9CC7392AC874E4512272D14E16E5A
Authority key identifier: 9C:2E:73:CC:95:F1:D4:82:A4:D9:A3:1A:D8:76:FA:F4:B2:75:30:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/34352e3232352e3130382e302f32322d3332203d3e20323636393333.roa
Signing time:             Thu 11 Apr 2024 12:19:53 +0000
ROA not before:           Thu 11 Apr 2024 12:14:53 +0000
ROA not after:            Thu 10 Apr 2025 12:19:53 +0000
asID:                     266933
IP address blocks:        45.225.108.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.crl
                          rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2c:28:2b:f4:d9:cc:73:92:ac:87:4e:45:12:27:2d:14:e1:6e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C2E73CC95F1D482A4D9A31AD876FAF4B2753016
        Validity
            Not Before: Apr 11 12:14:53 2024 GMT
            Not After : Apr 10 12:19:53 2025 GMT
        Subject: CN=7D5A9544702A7F63F8CC1710A56AB7A4B8B60FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:34:8e:aa:8b:5c:52:f3:45:65:ae:26:f6:cf:
                    86:9e:0f:f8:e9:af:36:7f:e4:c6:11:7a:04:47:af:
                    ae:f5:fc:f1:18:96:af:5c:c5:6a:9b:30:b6:67:39:
                    09:30:19:0f:76:66:54:05:a9:18:d0:4e:fb:fc:bb:
                    83:34:16:30:10:1e:16:9c:08:68:24:f6:67:c7:59:
                    7c:02:bf:44:3e:bb:e9:95:9c:a6:5f:c3:5c:c2:f0:
                    6b:d5:96:06:d3:47:1c:94:47:ed:d8:fb:fc:26:e3:
                    a9:f4:e7:f1:e3:59:3c:25:c2:4f:7b:9e:76:ef:15:
                    f5:d2:49:06:89:1b:b1:2f:f7:c4:df:87:a4:51:a3:
                    7e:5d:ae:01:95:9b:5f:84:64:d8:f9:35:6e:3a:36:
                    28:44:7d:49:29:ff:53:6d:eb:22:fc:0a:ca:00:ce:
                    ed:6a:dd:e6:b8:43:4e:d0:63:bb:a3:dd:ad:66:d1:
                    69:35:92:fd:6d:e8:ce:d4:38:6a:cd:6f:27:7c:52:
                    ad:81:fe:6a:14:2a:3d:85:91:0f:a1:e2:96:c7:27:
                    ed:0f:0b:df:a4:48:43:48:4a:e1:8a:59:4d:57:9f:
                    08:1a:e7:c8:fa:47:b0:41:f5:d2:3e:c2:4b:c3:d0:
                    38:af:fb:2c:a1:fc:61:21:4d:a4:b3:68:03:f5:e1:
                    f3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5A:95:44:70:2A:7F:63:F8:CC:17:10:A5:6A:B7:A4:B8:B6:0F:CF
            X509v3 Authority Key Identifier:
                keyid:9C:2E:73:CC:95:F1:D4:82:A4:D9:A3:1A:D8:76:FA:F4:B2:75:30:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/34352e3232352e3130382e302f32322d3332203d3e20323636393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:8b:91:75:cf:93:54:e6:9a:d0:86:b1:44:2b:a5:36:4a:41:
         f6:ad:85:49:62:5c:1c:3c:d7:47:f5:1c:16:94:22:ae:c7:5d:
         d9:ce:8c:32:04:0a:0c:93:ee:99:73:13:27:2a:ef:37:5f:30:
         7e:70:d8:bc:27:c7:a7:fe:0c:0a:30:61:e6:37:a6:8e:75:2e:
         0c:4d:38:45:72:3b:9b:81:ca:d6:9b:72:39:14:bc:c8:8c:51:
         e0:f3:07:a0:56:6f:8c:2d:e7:b5:80:c5:e5:dd:80:bd:e0:c2:
         d2:4b:83:63:6a:56:95:28:70:82:83:1c:07:91:45:4e:9f:77:
         6d:7f:10:be:c7:d8:a8:1d:e2:ca:3c:0f:1e:35:67:03:11:60:
         ef:cb:43:cd:42:ad:8b:11:2d:9d:b8:61:35:3b:2f:17:0f:ac:
         a3:0e:40:6f:05:b2:1a:9d:c8:63:06:37:a3:c8:2a:8c:49:ed:
         ea:95:52:8a:ad:20:1a:a4:b4:ec:3d:a7:fb:38:c7:f3:e6:72:
         6f:4b:d7:83:18:e7:03:fb:b4:7d:7c:0d:df:e0:0d:88:d3:3d:
         7b:7a:e4:cd:8e:60:0f:02:8e:1b:a3:c9:85:b7:bd:5f:67:87:
         34:cf:37:8c:c1:f0:be:e6:21:f8:5d:df:d2:f2:b3:38:dc:5f:
         b6:2a:29:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:36 2024 by rpki-client on console-ams.rpki-client.org