Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232362e302f32342d3234203d3e20323637323039.roa
File:                     34352e3233302e3232362e302f32342d3234203d3e20323637323039.roa (raw, json)
Hash identifier:          mmwArDSHlWNAujuVVM+mpWP83AUoB9mRNEwe1sw7Drs=
Subject key identifier:   F6:B4:8C:11:D8:4E:BE:58:0D:97:B5:DF:46:54:A7:F1:CF:CA:D2:F3
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       3698EA27D58C8B03AC439B5BEEA95CA156C307D1
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232362e302f32342d3234203d3e20323637323039.roa
Signing time:             Thu 04 Apr 2024 10:56:49 +0000
ROA not before:           Thu 04 Apr 2024 10:51:49 +0000
ROA not after:            Thu 03 Apr 2025 10:56:49 +0000
asID:                     267209
IP address blocks:        45.230.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:98:ea:27:d5:8c:8b:03:ac:43:9b:5b:ee:a9:5c:a1:56:c3:07:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Apr  4 10:51:49 2024 GMT
            Not After : Apr  3 10:56:49 2025 GMT
        Subject: CN=F6B48C11D84EBE580D97B5DF4654A7F1CFCAD2F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c4:e5:09:c4:e4:b3:07:85:15:b2:0f:bc:ef:
                    e2:7a:7b:0e:59:cf:74:80:3b:8d:42:94:ef:b1:59:
                    78:73:67:f8:69:e2:ec:eb:0f:2e:64:5b:dc:0d:96:
                    ba:d2:cc:d4:a0:72:8d:25:61:9a:3f:e4:17:f6:27:
                    97:cd:bd:0d:70:91:e6:5e:19:e3:0c:7c:ce:02:ae:
                    bd:d9:b4:53:fc:7f:e1:0d:04:62:bf:34:d9:bb:88:
                    07:da:61:30:cc:16:f7:e6:7e:c5:91:e5:fe:d2:a7:
                    fa:22:2f:ae:70:d4:64:a7:07:33:e4:d8:e1:e8:61:
                    ed:f9:61:4b:ad:5d:56:f2:c4:49:b2:07:f9:7e:e9:
                    01:26:ca:5f:55:4d:54:ba:35:ce:26:19:67:e6:0b:
                    de:5d:e6:e9:21:db:76:b1:5d:af:e4:9b:1f:54:76:
                    26:75:1a:02:3a:5c:48:92:c0:00:77:71:c7:61:4d:
                    99:30:11:33:fa:61:21:22:de:7c:37:94:f4:6b:90:
                    cd:4a:a4:17:5f:f2:86:8b:37:6d:e4:e3:62:43:9d:
                    5a:c0:8f:8a:c1:7c:2a:98:2e:88:c6:12:4a:d1:3a:
                    f2:34:9a:81:1f:32:11:4b:a6:a4:c7:02:64:27:de:
                    13:7d:a4:41:69:0c:1e:62:2d:d0:2c:e6:31:ab:65:
                    7a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B4:8C:11:D8:4E:BE:58:0D:97:B5:DF:46:54:A7:F1:CF:CA:D2:F3
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232362e302f32342d3234203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:7d:a5:88:3f:46:7b:e0:6e:c3:6a:8e:00:e1:8d:27:d2:d0:
         57:40:e5:4c:27:a6:89:92:29:5e:06:6c:4d:5a:b2:29:fc:52:
         36:86:22:a8:0d:b7:45:d3:e3:8c:c2:1c:44:be:2b:0e:68:77:
         18:b4:58:6c:36:33:d9:21:2d:30:2b:65:a5:26:1f:22:88:f4:
         63:2e:29:0f:ad:02:fa:59:2d:0f:4d:a7:b0:f6:f3:ff:4b:8b:
         2c:bf:7f:6e:34:49:5a:34:8b:fd:08:9a:a3:63:ad:f0:e5:d2:
         60:c9:28:69:34:17:55:96:6f:b0:2f:a7:5c:9a:5d:47:ca:a6:
         b5:37:39:3d:07:47:3f:4b:0a:c2:bb:4b:ff:14:23:4e:5b:0d:
         ab:b8:ff:c3:97:9e:22:e2:bb:6d:2b:7b:4e:ec:f9:fc:a7:f7:
         1f:2d:66:7e:dc:41:a6:7f:34:5d:38:22:bb:df:86:78:45:f9:
         28:6d:d9:09:2f:d9:92:1f:11:7c:5e:92:5d:e3:61:c5:41:76:
         fa:47:eb:04:13:ed:3b:43:06:c2:7c:35:97:44:17:85:9e:5b:
         8c:90:28:98:a2:03:57:db:31:d6:15:65:fe:19:26:85:ba:ef:
         b6:38:03:db:af:85:23:4c:8f:a2:e7:8e:c4:a5:70:26:0e:1d:
         27:78:e2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:12 2024 by rpki-client on console-ams.rpki-client.org