Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/34352e3232352e31392e302f32342d3234203d3e20323636393230.roa
File:                     34352e3232352e31392e302f32342d3234203d3e20323636393230.roa (raw, json)
Hash identifier:          4uliAuLmbjq+5qVgOGZwjqXYzGIbGkWrxau9rkjKpQI=
Subject key identifier:   53:BE:21:B2:01:11:38:D3:E7:49:01:15:C1:0F:42:36:2F:EA:89:A6
Certificate issuer:       /CN=B7A663920AEF637DF79AA0A99AF488170644C538
Certificate serial:       2D0685B8B69FE6B63D11B0C178CDF61C019E63E5
Authority key identifier: B7:A6:63:92:0A:EF:63:7D:F7:9A:A0:A9:9A:F4:88:17:06:44:C5:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/34352e3232352e31392e302f32342d3234203d3e20323636393230.roa
Signing time:             Thu 04 Apr 2024 21:15:12 +0000
ROA not before:           Thu 04 Apr 2024 21:10:12 +0000
ROA not after:            Thu 03 Apr 2025 21:15:12 +0000
asID:                     266920
IP address blocks:        45.225.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.crl
                          rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:06:85:b8:b6:9f:e6:b6:3d:11:b0:c1:78:cd:f6:1c:01:9e:63:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A663920AEF637DF79AA0A99AF488170644C538
        Validity
            Not Before: Apr  4 21:10:12 2024 GMT
            Not After : Apr  3 21:15:12 2025 GMT
        Subject: CN=53BE21B2011138D3E7490115C10F42362FEA89A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:84:7e:6e:c1:4b:97:40:e9:b4:d7:89:7a:15:
                    8f:04:d9:ce:c8:19:ea:ae:1a:53:0f:bf:99:30:b2:
                    0c:47:8b:0e:71:fd:6d:09:1a:e1:32:ee:df:96:1f:
                    11:16:9b:01:73:11:67:f2:90:d8:67:eb:a8:42:f5:
                    6c:9c:9f:38:94:c3:5a:d6:0e:53:dc:66:75:e0:2e:
                    e9:13:9f:ef:61:c2:f7:5c:4b:34:3f:95:ae:16:da:
                    17:68:5c:27:c7:7b:e1:9c:25:69:f4:3a:66:ef:e1:
                    7e:6d:3d:05:d5:ff:b4:4c:13:5b:60:8f:f1:a2:03:
                    3c:fb:35:96:ee:17:c0:4b:f2:60:96:77:e1:34:e3:
                    32:e6:4c:3f:ce:9a:9c:c9:5e:2b:0f:10:40:98:60:
                    53:96:70:ef:83:1c:64:48:da:96:32:2c:cb:54:a0:
                    48:02:9d:d3:9d:75:b1:38:b5:94:51:4f:aa:5e:e2:
                    33:b5:3b:00:ae:f1:a8:73:b3:25:1d:73:8e:53:a5:
                    ea:fd:c9:75:49:51:3e:f9:d5:89:6c:a3:62:37:d5:
                    95:9e:1d:3a:23:66:22:1e:78:f9:81:aa:28:bd:ac:
                    55:cd:08:4b:20:68:5b:29:ec:ed:bb:d2:7a:b5:54:
                    5a:7a:3a:78:f8:de:fe:8d:c5:b6:60:ba:0c:19:7f:
                    d3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BE:21:B2:01:11:38:D3:E7:49:01:15:C1:0F:42:36:2F:EA:89:A6
            X509v3 Authority Key Identifier:
                keyid:B7:A6:63:92:0A:EF:63:7D:F7:9A:A0:A9:9A:F4:88:17:06:44:C5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/34352e3232352e31392e302f32342d3234203d3e20323636393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:25:fc:16:d4:60:15:8d:ec:4f:8d:18:ef:33:3b:c5:e9:fd:
         e7:bc:0c:5b:8e:91:1f:0b:ac:8b:62:b5:c4:9b:9e:9c:01:44:
         aa:54:87:59:90:57:b3:df:ce:d6:4a:ca:e9:d1:9b:da:cc:18:
         31:55:51:3d:3c:68:00:39:74:15:36:51:8b:3d:28:22:c4:af:
         36:1b:b6:a3:5c:84:0d:dc:90:cf:b4:fa:7c:59:39:33:1f:03:
         6a:39:44:f7:e9:24:80:49:01:17:e3:03:df:09:db:c9:3b:2e:
         1e:7e:5f:05:9e:53:ee:c3:a6:22:49:da:ef:75:57:72:4e:8f:
         6b:a5:8f:06:fb:6e:89:69:44:3a:11:8d:2b:fc:e5:86:58:db:
         57:0b:7b:6c:a2:c6:76:b0:3b:a3:a5:38:15:12:4a:d3:dc:b0:
         58:59:8a:ab:4b:5a:01:03:ca:18:40:f0:f2:30:9f:c7:49:8a:
         46:93:77:3a:cb:d0:43:70:1d:66:4a:55:a3:05:3d:a6:c7:d2:
         0e:60:17:58:d3:d6:72:aa:63:ef:f9:2d:46:89:49:7b:a8:13:
         c4:0d:40:b9:90:23:ee:a7:e0:71:b5:e8:7b:6d:61:88:a3:4a:
         72:70:00:a5:f4:f1:4f:a5:7e:83:56:c6:2f:b7:4b:75:f4:40:
         f7:72:87:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:12 2024 by rpki-client on console-ams.rpki-client.org