Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232372e302f32342d3234203d3e20323637323039.roa
File:                     34352e3233302e3232372e302f32342d3234203d3e20323637323039.roa (raw, json)
Hash identifier:          j7BYa6VQfjfZDpaqRj17/BHfL79VNh1++AoXLiwUjSc=
Subject key identifier:   E5:57:FA:59:DE:46:17:04:A2:6B:89:67:0E:79:AB:3E:00:44:63:E5
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       41A653EF6B3399CEAB181FDFF757DCC4A601B1A9
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232372e302f32342d3234203d3e20323637323039.roa
Signing time:             Thu 04 Apr 2024 10:56:50 +0000
ROA not before:           Thu 04 Apr 2024 10:51:50 +0000
ROA not after:            Thu 03 Apr 2025 10:56:50 +0000
asID:                     267209
IP address blocks:        45.230.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a6:53:ef:6b:33:99:ce:ab:18:1f:df:f7:57:dc:c4:a6:01:b1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Apr  4 10:51:50 2024 GMT
            Not After : Apr  3 10:56:50 2025 GMT
        Subject: CN=E557FA59DE461704A26B89670E79AB3E004463E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f6:71:d0:c5:1a:90:71:bb:f4:d7:d4:32:06:
                    58:8e:2b:9f:ff:c7:6a:5f:0a:ff:61:21:bc:4d:d6:
                    b8:95:78:ee:52:8d:ff:a8:33:64:53:88:5b:28:16:
                    02:fc:4c:2a:c4:44:dd:b5:5c:08:8e:81:f6:50:d4:
                    1a:0d:f0:fc:27:0d:ae:29:39:61:96:55:65:c5:29:
                    bd:ee:25:b3:0d:80:3d:be:37:cc:aa:34:b2:ce:8a:
                    11:1b:b4:a1:6f:a0:3f:63:58:4d:d3:07:f7:94:b7:
                    3e:06:a6:03:7d:94:78:0c:29:2b:00:ac:fe:e0:99:
                    55:d2:23:06:87:62:7f:0d:04:c2:7b:b9:35:9f:11:
                    8f:0d:9e:26:97:1e:e0:fb:ec:16:42:9f:60:2d:d4:
                    f7:39:28:21:71:d0:95:dd:20:b5:11:7b:c1:40:d7:
                    0e:7e:b7:f8:78:c9:cb:b2:1a:37:de:81:8a:d1:b6:
                    ec:6e:af:8f:90:84:e6:b6:40:ea:c6:5e:62:ca:ca:
                    61:e4:37:61:97:90:67:c0:e2:f0:03:80:52:11:9a:
                    5e:80:54:0c:19:07:7c:08:69:a1:c4:2c:47:7b:58:
                    0c:28:39:57:15:89:e9:d2:b2:7f:5e:b6:83:10:a8:
                    ce:f5:21:9d:c1:ec:2d:07:87:cd:8c:b7:8d:24:b0:
                    f2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:57:FA:59:DE:46:17:04:A2:6B:89:67:0E:79:AB:3E:00:44:63:E5
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/34352e3233302e3232372e302f32342d3234203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:52:c7:82:38:a0:90:29:ea:39:0f:1a:40:43:09:91:df:aa:
         96:6c:95:90:6e:bd:8e:96:e6:3b:65:e3:5f:a5:fd:fa:68:94:
         74:b3:a8:e0:4b:b8:a8:9b:83:49:5b:bf:96:f0:48:8f:0e:23:
         7c:7a:6e:f2:50:da:77:02:41:7a:36:50:bc:36:06:70:14:28:
         16:16:b5:bf:2d:f1:ba:85:18:c3:bb:a6:e5:95:d9:e8:02:87:
         d5:eb:bf:a1:a9:1f:57:86:6d:40:e5:3f:1b:7b:a7:6e:96:fe:
         5d:6b:06:0a:94:14:9d:d8:e2:62:41:a8:a0:ab:f0:e7:f0:85:
         16:62:bd:93:77:a6:5d:f2:37:70:c2:e5:bb:7a:a9:a6:ec:da:
         0c:58:99:77:33:8e:86:7c:a4:8a:39:42:00:cb:57:98:5b:db:
         97:37:68:29:89:70:37:02:e3:67:6c:34:d3:9b:12:b0:fe:bb:
         ca:7a:c7:87:b6:ca:1d:12:fd:17:56:84:b3:49:82:e9:75:76:
         c8:7b:99:7d:76:b1:33:e7:30:f6:2c:3e:c0:40:29:06:9b:e0:
         e5:c1:ac:7d:f4:c4:84:d8:0e:a2:5a:0b:52:9a:d6:74:1c:0d:
         80:13:ab:ef:af:94:38:27:da:9a:ab:24:98:d7:b5:ea:ec:94:
         49:85:92:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:37 2024 by rpki-client on console-fra.rpki-client.org