Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/34352e3137352e38382e302f32322d3234203d3e20323638383932.roa
File:                     34352e3137352e38382e302f32322d3234203d3e20323638383932.roa (raw, json)
Hash identifier:          L3h0sv89qg046LFc8CapII8LMXni3RbNTLDhyiC0Eeg=
Subject key identifier:   0D:94:70:26:C6:8F:B7:A3:05:D1:66:E0:0E:A5:FA:E3:AD:AA:D0:58
Certificate issuer:       /CN=D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1
Certificate serial:       35F877CEC8DEF5C90DD1D37FD4CB614D2266AD89
Authority key identifier: D1:FA:38:76:CB:0F:34:3A:C9:BB:97:57:EE:B0:4B:25:5D:4E:54:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/34352e3137352e38382e302f32322d3234203d3e20323638383932.roa
Signing time:             Thu 04 Apr 2024 21:47:01 +0000
ROA not before:           Thu 04 Apr 2024 21:42:01 +0000
ROA not after:            Thu 03 Apr 2025 21:47:01 +0000
asID:                     268892
IP address blocks:        45.175.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl
                          rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f8:77:ce:c8:de:f5:c9:0d:d1:d3:7f:d4:cb:61:4d:22:66:ad:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1
        Validity
            Not Before: Apr  4 21:42:01 2024 GMT
            Not After : Apr  3 21:47:01 2025 GMT
        Subject: CN=0D947026C68FB7A305D166E00EA5FAE3ADAAD058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e9:48:77:d2:6b:1a:68:1c:36:ec:c4:52:19:
                    b4:a3:74:07:b7:ba:9d:2d:d8:ee:39:ac:53:7e:fd:
                    22:31:29:37:47:ed:ea:9f:0d:35:30:ed:e3:db:0e:
                    14:5e:7c:0b:38:7b:ea:ed:a0:fa:e0:e5:1e:dd:76:
                    e9:1e:64:77:08:dc:1c:0c:57:47:f0:8a:86:78:7d:
                    d1:5e:26:f0:06:43:4b:1d:d6:20:9e:08:8c:cb:42:
                    08:88:da:16:0f:9d:48:60:49:27:ec:2c:23:a9:dd:
                    83:2c:58:84:c1:f7:0a:29:16:0c:70:11:0d:1e:48:
                    95:7b:71:99:5d:ca:1a:fb:69:dd:b5:90:ce:a4:fa:
                    bd:28:e8:49:00:66:77:94:ee:82:5f:41:ff:a1:0e:
                    ec:e2:73:0a:a1:b2:67:bf:eb:13:81:e5:4f:4c:5d:
                    7b:2d:cb:66:4d:27:5e:07:e1:e6:32:08:60:4a:5d:
                    f5:53:7a:d2:16:25:af:16:8d:cb:ad:8c:54:fe:78:
                    41:87:a3:69:16:dc:d1:67:6c:c1:62:fe:da:cd:f8:
                    ba:68:b5:0f:d3:e6:b1:3c:d7:06:dd:8d:c4:b2:e7:
                    a7:24:a2:66:e4:93:96:ae:b3:fb:13:dd:f6:8c:53:
                    bc:2e:10:4e:a3:2e:65:00:69:b8:1a:77:66:7c:a4:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:94:70:26:C6:8F:B7:A3:05:D1:66:E0:0E:A5:FA:E3:AD:AA:D0:58
            X509v3 Authority Key Identifier:
                keyid:D1:FA:38:76:CB:0F:34:3A:C9:BB:97:57:EE:B0:4B:25:5D:4E:54:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/34352e3137352e38382e302f32322d3234203d3e20323638383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:9d:9d:46:00:a1:7a:d3:70:ee:f0:14:c3:fd:cd:15:71:49:
         a0:e8:b4:73:dd:ee:50:25:d8:02:09:f8:32:0b:9d:75:fe:80:
         4b:90:15:e5:ef:d4:1c:0e:33:8c:67:88:39:ea:44:58:f7:d4:
         db:1b:27:e8:f5:3c:16:3c:3f:10:b4:ac:dc:c7:dd:b1:1e:d4:
         56:fb:d2:ca:30:81:69:3f:f3:b4:0e:9f:74:e6:8b:1f:c0:27:
         93:a4:12:22:28:f8:f9:0e:4e:3d:fb:8e:6a:40:1e:5b:19:30:
         e7:78:ff:f7:c1:35:77:b6:1c:d3:25:27:19:b7:f8:8e:40:9e:
         46:02:cd:44:8f:4c:12:d8:5b:0b:1b:ba:90:a3:9a:94:0b:9a:
         aa:b6:60:5a:7f:83:96:3e:5c:2e:43:2d:dd:db:4d:5c:cf:35:
         ae:60:6d:29:d7:d1:5c:e7:7b:61:98:dd:8a:15:0e:e3:4a:78:
         b9:af:91:26:54:da:c2:8f:77:68:f5:76:50:80:32:79:0b:4a:
         c2:2f:59:18:c9:ab:30:51:20:2a:85:65:19:00:c7:9f:77:c9:
         d3:4e:c1:4d:fb:1b:b0:63:5f:a7:8b:39:a7:5d:dc:76:ce:b9:
         72:ce:a5:99:89:a8:16:6b:e7:01:9b:dd:52:f9:45:08:dc:35:
         6b:f8:85:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:52:06 2024 by rpki-client on console-fra.rpki-client.org