Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/1/34352e3138332e39362e302f32342d3234203d3e20323639323739.roa
File:                     34352e3138332e39362e302f32342d3234203d3e20323639323739.roa (raw, json)
Hash identifier:          lSyP2M3qYxB54rUhoOS8JXTmy2DcN2rK4kkLT102pNg=
Subject key identifier:   FE:E7:18:94:AF:B3:32:9F:9D:28:F9:66:2E:3D:B4:6E:66:66:04:49
Certificate issuer:       /CN=1992332AA4CB09C87F52C6FF669D34B3B22CA573
Certificate serial:       5DAC0672EB768A93751B2638F52E0B7FB5386919
Authority key identifier: 19:92:33:2A:A4:CB:09:C8:7F:52:C6:FF:66:9D:34:B3:B2:2C:A5:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1992332AA4CB09C87F52C6FF669D34B3B22CA573.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/1/34352e3138332e39362e302f32342d3234203d3e20323639323739.roa
Signing time:             Thu 04 Apr 2024 07:31:21 +0000
ROA not before:           Thu 04 Apr 2024 07:26:21 +0000
ROA not after:            Thu 03 Apr 2025 07:31:21 +0000
asID:                     269279
IP address blocks:        45.183.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/1/1992332AA4CB09C87F52C6FF669D34B3B22CA573.crl
                          rsync://rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/1/1992332AA4CB09C87F52C6FF669D34B3B22CA573.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1992332AA4CB09C87F52C6FF669D34B3B22CA573.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 00:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ac:06:72:eb:76:8a:93:75:1b:26:38:f5:2e:0b:7f:b5:38:69:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1992332AA4CB09C87F52C6FF669D34B3B22CA573
        Validity
            Not Before: Apr  4 07:26:21 2024 GMT
            Not After : Apr  3 07:31:21 2025 GMT
        Subject: CN=FEE71894AFB3329F9D28F9662E3DB46E66660449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bc:f0:26:7b:72:24:8a:08:97:96:1f:81:83:
                    12:c2:19:9e:00:41:99:1f:e4:a3:21:e5:e2:e5:4c:
                    48:30:76:61:8a:19:94:9a:e9:e5:9c:1b:23:1f:3e:
                    80:e5:bc:c2:81:80:7f:5c:f8:3d:7c:ef:af:03:cb:
                    fa:b4:1b:da:25:9a:4f:98:a6:b3:aa:83:65:91:37:
                    91:27:01:f8:72:5e:bc:e4:6e:85:0f:3b:b0:5f:14:
                    43:9b:57:de:da:d1:9b:eb:af:32:5f:3c:bc:45:4f:
                    b5:b7:bf:30:62:b3:9f:88:8b:ce:6d:46:94:24:62:
                    11:f3:5f:22:8f:d8:79:0f:23:80:56:fa:47:f5:19:
                    26:d3:95:7a:5a:14:68:d8:e7:46:b8:df:af:08:a5:
                    db:af:34:4b:68:2b:b7:0d:9a:96:4f:57:27:94:6f:
                    f6:bd:29:fb:35:b1:4b:21:1c:33:81:3c:f1:ed:64:
                    80:de:02:8b:b0:42:2f:6a:89:49:63:90:a3:99:4b:
                    66:ef:ce:aa:00:14:af:27:4a:87:d1:f8:11:00:82:
                    57:ac:6f:1d:ee:06:51:e6:f8:c3:0d:36:4c:55:f9:
                    26:70:a7:e5:df:b4:7a:76:3f:2b:70:57:f9:cd:d4:
                    35:70:63:9c:a4:34:9d:0d:a6:5c:ae:aa:be:fc:46:
                    b0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E7:18:94:AF:B3:32:9F:9D:28:F9:66:2E:3D:B4:6E:66:66:04:49
            X509v3 Authority Key Identifier:
                keyid:19:92:33:2A:A4:CB:09:C8:7F:52:C6:FF:66:9D:34:B3:B2:2C:A5:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/1/1992332AA4CB09C87F52C6FF669D34B3B22CA573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1992332AA4CB09C87F52C6FF669D34B3B22CA573.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/1/34352e3138332e39362e302f32342d3234203d3e20323639323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:b2:15:11:66:f0:bd:96:72:27:a2:c2:ad:55:11:87:a1:17:
         34:39:2d:f1:b6:4b:19:b6:0a:bd:68:8f:c9:8d:35:ef:5e:89:
         f1:7e:4a:b6:be:9d:ae:28:d2:b0:a2:80:98:97:b1:f4:c4:a1:
         bb:d6:ee:8a:40:e3:38:8d:c8:48:4c:b1:7a:4b:23:1c:6e:fa:
         0c:ae:20:e8:79:ac:9b:01:2f:5f:0c:db:da:7d:dc:bd:38:0d:
         50:92:25:b8:55:84:5c:4d:3b:3c:75:5e:2b:d2:91:4a:c4:ee:
         72:94:7b:cc:0f:0b:d3:e4:10:c4:95:d4:53:78:f8:02:3f:50:
         57:a9:cc:29:a4:2d:cd:22:4f:43:b2:8c:a0:4a:8e:17:13:9b:
         33:7d:55:ed:b6:e9:85:b1:0a:e0:71:e8:52:97:f4:e5:e5:de:
         e0:51:9d:0f:14:83:5c:5a:01:91:a2:5a:44:d6:70:bb:79:f9:
         97:16:22:8a:13:1a:7d:ab:74:2d:44:67:a9:52:1a:57:8e:5e:
         11:e1:a4:9d:50:68:f3:c0:27:55:5f:d4:6c:22:1c:ff:d1:18:
         a8:76:4e:47:a9:71:25:c5:1e:8d:bb:7e:5b:84:2e:77:ef:19:
         de:38:8f:b9:76:4f:07:7a:51:b1:d8:f2:71:65:91:2a:b5:49:
         a4:89:b4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 00:37:44 2024 by rpki-client on console-fra.rpki-client.org