Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/1/34352e3233362e33362e302f32322d3234203d3e20323638323339.roa
File:                     34352e3233362e33362e302f32322d3234203d3e20323638323339.roa (raw, json)
Hash identifier:          cc8hYy3Q1OpGGRIQlXjXsmZh4tM9oRAFqDbf3PBfKjk=
Subject key identifier:   E1:7D:50:AE:79:A2:33:74:24:7E:1A:A6:2F:89:3B:B3:F2:65:20:33
Certificate issuer:       /CN=7268A826DCC418A8104E2A2FA9EA6489DDD1909F
Certificate serial:       1F0FC6A52FA266B898C1ECD1726099092D2607B8
Authority key identifier: 72:68:A8:26:DC:C4:18:A8:10:4E:2A:2F:A9:EA:64:89:DD:D1:90:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7268A826DCC418A8104E2A2FA9EA6489DDD1909F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/1/34352e3233362e33362e302f32322d3234203d3e20323638323339.roa
Signing time:             Thu 04 Apr 2024 10:42:57 +0000
ROA not before:           Thu 04 Apr 2024 10:37:57 +0000
ROA not after:            Thu 03 Apr 2025 10:42:57 +0000
asID:                     268239
IP address blocks:        45.236.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/1/7268A826DCC418A8104E2A2FA9EA6489DDD1909F.crl
                          rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/1/7268A826DCC418A8104E2A2FA9EA6489DDD1909F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7268A826DCC418A8104E2A2FA9EA6489DDD1909F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0f:c6:a5:2f:a2:66:b8:98:c1:ec:d1:72:60:99:09:2d:26:07:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7268A826DCC418A8104E2A2FA9EA6489DDD1909F
        Validity
            Not Before: Apr  4 10:37:57 2024 GMT
            Not After : Apr  3 10:42:57 2025 GMT
        Subject: CN=E17D50AE79A23374247E1AA62F893BB3F2652033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:81:0d:ee:21:7d:4e:a7:0b:1f:40:fc:b0:
                    9a:ec:ab:33:40:03:ca:c2:59:a4:c7:ed:59:e6:e7:
                    e8:0e:d9:f3:1f:88:72:cc:52:82:fd:49:1c:9b:30:
                    61:23:a4:0a:eb:a4:63:c5:89:34:f3:e1:74:f7:9e:
                    82:61:b4:dd:d8:fb:f1:7d:cc:43:1c:e8:2d:ba:1f:
                    da:31:bf:a1:3e:fc:e2:2a:60:3f:24:d0:09:fc:53:
                    a5:00:67:69:71:0b:57:4d:c0:5d:21:f4:a1:3b:59:
                    75:04:a0:d4:f3:1b:3b:18:4c:94:5c:34:f6:64:1b:
                    b0:64:c5:3c:01:9c:26:4d:26:f0:fe:4c:37:a9:6a:
                    50:6e:52:ae:46:31:bd:aa:ce:66:64:42:d2:07:32:
                    d6:38:d1:ef:2c:d0:5d:5e:61:6f:87:f5:ce:30:b4:
                    d3:e2:1f:ef:ed:97:c8:f7:c4:ff:55:77:85:3f:8e:
                    63:66:0d:59:94:8e:8d:3d:fb:4f:4a:b7:a5:80:7d:
                    73:a6:e3:ee:fb:a1:a3:21:78:e4:36:78:40:bc:a3:
                    d8:bc:f9:68:f0:6d:be:2a:da:17:79:08:a1:29:02:
                    ab:21:4a:89:1b:be:4d:4f:4f:bd:a7:2c:93:9d:1d:
                    9d:34:c8:6c:9e:00:04:0f:bd:b5:0f:3c:04:a0:d8:
                    c2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7D:50:AE:79:A2:33:74:24:7E:1A:A6:2F:89:3B:B3:F2:65:20:33
            X509v3 Authority Key Identifier:
                keyid:72:68:A8:26:DC:C4:18:A8:10:4E:2A:2F:A9:EA:64:89:DD:D1:90:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/1/7268A826DCC418A8104E2A2FA9EA6489DDD1909F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7268A826DCC418A8104E2A2FA9EA6489DDD1909F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/1/34352e3233362e33362e302f32322d3234203d3e20323638323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:58:b8:80:a4:4c:41:9c:a1:98:5c:c1:a5:b7:60:71:6e:82:
         03:fc:6f:2a:53:da:9a:70:d4:1e:48:03:2d:d3:7c:fe:d0:e4:
         6f:44:7b:0a:a6:82:8f:40:39:dd:20:7e:89:2e:3b:33:a1:d6:
         e8:be:00:94:f7:e0:fe:0a:99:c9:47:2d:2d:98:0d:50:b3:5c:
         2a:5f:a1:97:2a:eb:51:19:fb:96:32:5d:a8:9d:25:bf:42:09:
         3d:e8:1b:47:d6:a4:08:f7:8f:3b:1d:21:3e:d0:c7:d1:b0:72:
         fd:e8:5d:03:58:f5:b9:77:aa:5c:26:2e:78:b5:40:16:93:f1:
         86:33:17:43:49:7c:39:93:2f:83:3c:7d:f0:58:1d:3a:47:4c:
         50:86:28:04:c8:8b:a1:2b:97:00:b9:b4:20:81:38:ab:a3:6c:
         06:c3:0d:93:3f:a6:39:16:b9:8a:dd:17:f0:01:79:d2:de:2a:
         64:43:47:bd:b5:52:e0:6e:62:2c:26:50:80:e0:1a:eb:0a:33:
         78:da:3b:d0:de:ad:9d:70:dc:18:3a:db:dc:61:2e:cc:a8:0a:
         bb:aa:fe:8c:90:86:11:0c:c0:19:93:aa:6b:87:c4:91:a3:fa:
         09:bc:59:b6:51:8c:16:01:c0:e6:a9:b3:66:f7:c4:c4:fa:13:
         b1:6c:39:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:43 2024 by rpki-client on console-ams.rpki-client.org