Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/34352e3232392e382e302f32322d3332203d3e20323637313233.roa
File:                     34352e3232392e382e302f32322d3332203d3e20323637313233.roa (raw, json)
Hash identifier:          2X3o4w+vuUDHsaTANeAwvxBHg7YBpBG6yi6/HNgQe7Y=
Subject key identifier:   29:D9:0D:F9:A9:65:C3:CD:1A:B1:64:3E:63:93:F1:3A:AC:B6:32:A1
Certificate issuer:       /CN=2C08147EB7EFC2FB4081B4773408FC67E99529BC
Certificate serial:       6B00334BFBD9CA1FBE85402D7CA5C783DA4CC8A3
Authority key identifier: 2C:08:14:7E:B7:EF:C2:FB:40:81:B4:77:34:08:FC:67:E9:95:29:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C08147EB7EFC2FB4081B4773408FC67E99529BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/34352e3232392e382e302f32322d3332203d3e20323637313233.roa
Signing time:             Wed 29 May 2024 23:48:52 +0000
ROA not before:           Wed 29 May 2024 23:43:52 +0000
ROA not after:            Wed 28 May 2025 23:48:52 +0000
asID:                     267123
IP address blocks:        45.229.8.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/2C08147EB7EFC2FB4081B4773408FC67E99529BC.crl
                          rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/2C08147EB7EFC2FB4081B4773408FC67E99529BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C08147EB7EFC2FB4081B4773408FC67E99529BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:00:33:4b:fb:d9:ca:1f:be:85:40:2d:7c:a5:c7:83:da:4c:c8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C08147EB7EFC2FB4081B4773408FC67E99529BC
        Validity
            Not Before: May 29 23:43:52 2024 GMT
            Not After : May 28 23:48:52 2025 GMT
        Subject: CN=29D90DF9A965C3CD1AB1643E6393F13AACB632A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b9:92:90:bc:26:c4:0e:3c:5b:5b:5e:48:9e:
                    1d:01:58:30:1b:e3:d5:c3:e3:d0:69:e1:69:d6:1e:
                    98:60:37:ba:7f:bb:6d:f8:f4:90:7a:46:9f:a2:68:
                    ec:e7:fd:97:d4:7a:77:31:d1:ef:9b:9d:19:95:f7:
                    fe:4f:7b:9a:b3:03:bc:2e:64:e5:21:02:6c:4b:ec:
                    15:99:10:5e:66:07:67:52:17:2f:83:be:c4:21:e4:
                    f3:73:28:df:c0:da:ce:02:a3:f6:b5:bb:0d:50:fa:
                    b1:c9:73:6e:c5:f4:95:2c:09:27:b3:b7:ff:3e:70:
                    2a:e5:ac:32:f5:5b:b6:98:ce:fa:4e:1e:2d:40:e5:
                    c4:1a:10:7c:28:32:09:b9:58:1a:87:dd:b7:d4:fc:
                    fb:fb:37:fc:f4:22:8e:2f:b5:e5:8c:f5:8b:45:e1:
                    ff:64:0b:87:3d:98:6d:14:77:3f:5e:08:35:da:5c:
                    69:b1:0f:54:ba:6a:47:f8:33:72:42:64:99:69:4b:
                    47:53:b6:04:d7:c6:d1:07:1e:9a:c7:97:1a:c4:b0:
                    8d:d2:95:a4:45:71:3f:a6:3f:ed:51:64:bd:0b:4a:
                    0f:ca:36:00:33:e1:aa:fd:44:e0:73:5d:65:d3:d2:
                    cf:f4:59:13:45:5b:95:e7:37:9a:37:7a:0b:62:55:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D9:0D:F9:A9:65:C3:CD:1A:B1:64:3E:63:93:F1:3A:AC:B6:32:A1
            X509v3 Authority Key Identifier:
                keyid:2C:08:14:7E:B7:EF:C2:FB:40:81:B4:77:34:08:FC:67:E9:95:29:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/2C08147EB7EFC2FB4081B4773408FC67E99529BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C08147EB7EFC2FB4081B4773408FC67E99529BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/34352e3232392e382e302f32322d3332203d3e20323637313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:a3:13:01:74:65:b5:32:3f:31:16:86:b0:73:7f:02:91:ea:
         2e:1c:fd:af:b1:27:81:8f:4e:2c:98:18:6b:58:e0:ef:a3:d9:
         2e:e6:09:23:bf:0e:59:ae:3e:ec:18:1e:d5:71:c3:f7:98:a0:
         a1:be:fe:49:2a:6b:0c:8b:ac:09:e9:b5:6f:87:d5:fe:83:2e:
         7e:93:f2:43:9f:e9:9b:fa:60:ef:25:ce:20:b4:7a:a4:41:34:
         93:de:c5:ff:73:5a:98:92:d6:9c:fc:38:81:d5:05:6e:a7:f7:
         f8:a2:b3:b9:0e:4a:aa:45:3e:5d:ca:38:cc:a9:f2:86:cc:75:
         c6:76:bd:ee:54:46:4f:1b:ca:0b:d2:7c:ee:a2:f6:d2:4d:f8:
         85:9c:d4:21:cb:12:45:48:2a:24:9c:38:78:6a:85:ee:09:36:
         76:0a:f5:7a:a4:77:cd:c1:f5:78:67:41:50:ff:db:c8:0e:44:
         4f:ec:17:a6:b8:91:53:54:96:b1:43:6d:8c:20:f2:f6:fd:05:
         2d:d0:86:c1:48:48:47:dc:d6:1a:17:62:5c:dd:1a:76:34:e9:
         db:1f:72:7d:08:bb:f9:eb:27:55:2f:15:fd:13:d1:e5:87:27:
         97:75:29:fd:77:7e:c9:24:cf:f3:87:d1:ec:eb:b4:f7:7b:8a:
         bc:4f:af:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:57 2024 by rpki-client on console-fra.rpki-client.org