Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/1/34352e362e3132382e302f32322d3234203d3e20323636313335.roa
File:                     34352e362e3132382e302f32322d3234203d3e20323636313335.roa (raw, json)
Hash identifier:          4k/oxPxgAIZKUYAufhN7+IXYPt/pKOyj/CsN/o/VgdU=
Subject key identifier:   69:C9:61:A9:51:72:63:CC:A0:D5:30:C1:DE:97:BF:F6:17:63:76:28
Certificate issuer:       /CN=2F6553DA4EC5A8697B4CD995957F729F58F51C9A
Certificate serial:       1745F70B01D877EB076222B69DEDBC1AB231EEF8
Authority key identifier: 2F:65:53:DA:4E:C5:A8:69:7B:4C:D9:95:95:7F:72:9F:58:F5:1C:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6553DA4EC5A8697B4CD995957F729F58F51C9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/1/34352e362e3132382e302f32322d3234203d3e20323636313335.roa
Signing time:             Thu 04 Apr 2024 13:59:59 +0000
ROA not before:           Thu 04 Apr 2024 13:54:59 +0000
ROA not after:            Thu 03 Apr 2025 13:59:59 +0000
asID:                     266135
IP address blocks:        45.6.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/1/2F6553DA4EC5A8697B4CD995957F729F58F51C9A.crl
                          rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/1/2F6553DA4EC5A8697B4CD995957F729F58F51C9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6553DA4EC5A8697B4CD995957F729F58F51C9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:45:f7:0b:01:d8:77:eb:07:62:22:b6:9d:ed:bc:1a:b2:31:ee:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F6553DA4EC5A8697B4CD995957F729F58F51C9A
        Validity
            Not Before: Apr  4 13:54:59 2024 GMT
            Not After : Apr  3 13:59:59 2025 GMT
        Subject: CN=69C961A9517263CCA0D530C1DE97BFF617637628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8b:c8:42:6a:0e:c1:8b:fc:bd:b3:6b:4a:7d:
                    10:8d:22:ac:3a:bc:91:0b:39:e0:4d:9d:1c:26:aa:
                    89:5a:ab:71:0d:66:1e:f8:c8:00:7c:78:48:76:b5:
                    4d:0b:dd:e1:ea:0b:bb:97:cd:a5:0c:d7:3d:e7:6c:
                    13:5e:d4:67:8f:b1:dd:59:9b:a3:d8:a6:d0:1a:c6:
                    84:e7:00:35:8e:d4:db:6b:c8:57:56:ab:d6:43:1d:
                    8e:7b:04:41:67:23:a7:46:7e:5e:6d:28:a8:43:ac:
                    84:97:93:9c:fb:6f:56:a5:c3:1e:d1:5b:7f:53:a8:
                    82:09:86:c8:5e:f0:61:69:2a:7f:7b:22:f3:c8:b5:
                    8d:e3:46:99:ec:d4:e9:37:c2:69:b7:e1:f0:3e:43:
                    ad:2b:ce:a3:73:67:11:ee:e2:2f:43:a8:9d:6f:cd:
                    47:03:9c:db:22:1e:58:6c:47:88:50:f8:26:5d:f7:
                    8e:6c:fc:31:58:14:c3:e0:d6:56:76:cd:5e:23:8a:
                    a4:3a:2f:f3:1d:a1:7a:ea:18:98:61:4b:75:f1:d2:
                    cf:ed:f6:be:34:88:16:31:63:97:00:09:11:7f:78:
                    68:08:30:c3:a5:16:e6:b2:46:83:24:38:75:d2:f3:
                    f4:3b:5e:21:08:5c:83:41:63:23:10:0a:4d:97:8d:
                    b6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C9:61:A9:51:72:63:CC:A0:D5:30:C1:DE:97:BF:F6:17:63:76:28
            X509v3 Authority Key Identifier:
                keyid:2F:65:53:DA:4E:C5:A8:69:7B:4C:D9:95:95:7F:72:9F:58:F5:1C:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/1/2F6553DA4EC5A8697B4CD995957F729F58F51C9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6553DA4EC5A8697B4CD995957F729F58F51C9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/1/34352e362e3132382e302f32322d3234203d3e20323636313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:f3:bf:10:7d:5c:85:ec:df:17:9c:f3:77:bb:d3:6c:13:0b:
         c3:eb:15:00:94:c9:01:ae:c2:18:0b:45:72:37:21:40:13:b8:
         95:3b:8e:0c:2e:7e:2c:28:05:3d:76:7c:2d:b6:74:2c:f8:0e:
         4e:50:9f:a6:70:bc:6e:d2:e4:ce:5a:19:60:eb:ef:92:89:6f:
         8f:99:ab:b3:73:c3:80:fd:4c:44:51:10:b3:61:fd:91:12:e4:
         9a:50:db:29:df:f9:7a:94:98:48:53:e9:c7:ef:0c:c8:e7:59:
         b7:ef:d2:78:57:68:c5:31:6b:05:53:05:36:8c:40:61:e8:cc:
         18:c1:5c:26:3a:1f:e3:92:e4:2e:87:b6:a8:ed:86:54:cb:dc:
         fc:a2:e9:81:7c:13:70:22:e5:ac:3d:95:9c:55:0f:74:70:3f:
         a3:ad:b6:bc:5a:de:e5:cf:87:a5:c3:d8:1a:33:35:5d:80:c0:
         cc:01:5f:52:cb:64:3c:08:0c:67:6d:6a:fb:c1:ed:9a:0f:70:
         aa:17:c6:ca:17:c3:62:9c:c8:1b:e9:dc:eb:b2:a6:72:88:a2:
         9e:90:34:5d:88:c2:16:dd:61:4d:d5:b6:28:8e:ca:aa:2b:ac:
         a7:73:22:19:f3:56:84:06:0f:bd:8e:a8:f3:0b:73:53:0e:b4:
         d4:f2:cd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:10 2024 by rpki-client on console-fra.rpki-client.org