Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/34352e3136342e3232342e302f32332d3233203d3e20323638363338.roa
File:                     34352e3136342e3232342e302f32332d3233203d3e20323638363338.roa (raw, json)
Hash identifier:          +/Mn1lGrpamgNguEuOwwUUDO7m+ZiWWYl2aYGy4xy+U=
Subject key identifier:   A0:C2:1A:8C:5C:06:A1:4D:C8:0D:A8:A8:74:93:25:7C:E4:A5:90:70
Certificate issuer:       /CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
Certificate serial:       1E2ACB11EBB950EF717C1D20278F759500E1A974
Authority key identifier: F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/34352e3136342e3232342e302f32332d3233203d3e20323638363338.roa
Signing time:             Thu 04 Apr 2024 14:01:13 +0000
ROA not before:           Thu 04 Apr 2024 13:56:13 +0000
ROA not after:            Thu 03 Apr 2025 14:01:13 +0000
asID:                     268638
IP address blocks:        45.164.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.crl
                          rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2a:cb:11:eb:b9:50:ef:71:7c:1d:20:27:8f:75:95:00:e1:a9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
        Validity
            Not Before: Apr  4 13:56:13 2024 GMT
            Not After : Apr  3 14:01:13 2025 GMT
        Subject: CN=A0C21A8C5C06A14DC80DA8A87493257CE4A59070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:e9:44:db:e9:21:39:a9:8b:ff:52:f8:b1:
                    a4:e1:07:79:3e:ee:a9:fd:66:ad:18:08:84:b3:08:
                    29:e6:1d:0d:0b:60:d2:15:54:cb:b7:c0:cf:94:ca:
                    62:9c:17:8e:47:2d:3c:3e:ed:ac:fa:ee:24:e3:8e:
                    2b:7a:05:53:1d:a9:50:72:6c:f4:4e:ad:cd:00:72:
                    93:75:0b:22:92:24:ff:80:d4:69:a3:4b:04:61:c9:
                    fe:c1:56:2d:c2:4b:64:8a:f6:ef:c0:85:ea:d8:78:
                    ba:f7:cd:f0:55:de:6f:53:f0:ed:f7:39:46:8d:3c:
                    59:d9:8e:07:38:f3:2c:dc:65:8d:61:a7:6c:4e:18:
                    ca:43:ab:b3:c9:ef:b6:14:48:c1:32:2a:1a:64:d6:
                    f5:32:6e:ef:90:68:70:47:23:fb:ff:52:5c:a5:ba:
                    16:20:79:52:e7:01:b1:80:c0:1f:b9:d2:20:c0:52:
                    e7:b1:03:f7:18:39:45:f9:40:ab:d1:22:f7:2e:65:
                    46:9c:9d:84:34:e7:94:60:54:b9:1f:f3:9e:64:65:
                    a1:51:1d:02:fe:43:53:34:8f:e2:8f:79:b0:30:6a:
                    82:d0:f0:58:56:ac:38:8d:ce:8f:8d:09:10:4d:0a:
                    4b:76:13:90:2f:1d:ee:0f:54:26:92:75:ec:c1:8a:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C2:1A:8C:5C:06:A1:4D:C8:0D:A8:A8:74:93:25:7C:E4:A5:90:70
            X509v3 Authority Key Identifier:
                keyid:F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/34352e3136342e3232342e302f32332d3233203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:06:1d:59:c6:5d:2b:66:d1:70:5d:35:e8:20:8f:7c:e1:f3:
         20:c1:b6:d5:aa:68:f1:1b:72:e5:83:be:72:02:da:00:ec:28:
         b8:d7:2d:fd:cb:21:91:91:d6:53:43:d2:e0:c2:eb:e3:ac:bd:
         b9:a7:16:fa:fb:68:c8:64:0d:fe:32:4f:d7:91:3d:03:76:8d:
         a0:d6:88:59:33:a2:33:d3:74:7c:52:44:27:4e:cf:23:5c:d5:
         e3:9f:7a:90:89:03:6b:d4:23:5a:34:27:71:98:6a:08:39:4b:
         7e:44:e6:66:7a:c8:7e:87:bb:02:3a:23:0e:c9:68:d6:d7:a1:
         75:67:f8:a8:fc:d2:77:85:2f:82:14:74:b9:2c:c2:6f:ad:a9:
         8d:4c:e7:c6:78:76:11:23:15:fe:98:71:d7:cb:02:0c:6d:e0:
         d6:a0:86:83:5d:ad:8e:53:d8:fe:7c:2c:bd:05:30:fa:15:3d:
         7b:99:93:24:51:40:52:65:71:60:a6:8a:43:df:da:7d:19:df:
         67:75:e4:56:a8:a0:62:cc:25:97:86:6c:48:9c:e7:85:c8:f9:
         44:8e:39:97:c4:dd:87:86:d6:f8:75:39:8a:ae:f9:60:a5:c8:
         d1:d9:2e:6c:26:64:e8:7f:12:bf:03:e4:bb:b9:1f:47:fb:3a:
         a8:74:8f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:12 2024 by rpki-client on console-ams.rpki-client.org