Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32322d3232203d3e20323638373236.roa
File:                     34352e3137312e3138342e302f32322d3232203d3e20323638373236.roa (raw, json)
Hash identifier:          77WIzRDEZ/xiOMawTZO1K/5z5wGBqWvTNtkq4G8A0Uo=
Subject key identifier:   0C:A4:06:23:E9:81:B6:9F:15:52:AF:8D:95:B7:DF:8C:6F:25:32:3C
Certificate issuer:       /CN=35B50C0BFD35280E87CA5148761CD72862DBC7DF
Certificate serial:       67B6AEDE699A5B35EE173D398C76D03AAD11870F
Authority key identifier: 35:B5:0C:0B:FD:35:28:0E:87:CA:51:48:76:1C:D7:28:62:DB:C7:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32322d3232203d3e20323638373236.roa
Signing time:             Thu 17 Oct 2024 21:12:21 +0000
ROA not before:           Thu 17 Oct 2024 21:07:21 +0000
ROA not after:            Thu 16 Oct 2025 21:12:21 +0000
asID:                     268726
IP address blocks:        45.171.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b6:ae:de:69:9a:5b:35:ee:17:3d:39:8c:76:d0:3a:ad:11:87:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B50C0BFD35280E87CA5148761CD72862DBC7DF
        Validity
            Not Before: Oct 17 21:07:21 2024 GMT
            Not After : Oct 16 21:12:21 2025 GMT
        Subject: CN=0CA40623E981B69F1552AF8D95B7DF8C6F25323C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:99:cb:eb:82:af:ac:33:2d:48:51:9b:58:
                    2d:ba:44:1d:ef:1e:bc:e0:73:0f:2e:6f:a4:6d:07:
                    01:8d:38:17:7d:1a:c6:c3:86:43:53:7c:7e:c3:25:
                    82:d1:83:17:f2:6c:a3:9a:74:b8:f9:3f:16:92:92:
                    d7:f7:87:d0:0e:7b:d6:ac:92:ab:64:16:6e:14:3f:
                    f2:c2:ee:60:c2:ce:ef:bd:b1:55:e3:d3:d4:5e:3c:
                    ea:73:97:e3:a3:7d:6c:61:45:ea:34:a6:cc:cb:85:
                    bd:2a:37:34:fc:6a:55:91:10:1b:a5:35:95:1d:52:
                    e3:39:9b:de:26:1c:33:0a:32:9d:72:5a:56:46:8f:
                    92:42:e6:00:58:02:ce:3d:0e:92:bc:d5:6e:d1:92:
                    c0:84:6d:33:f0:1f:cb:38:4d:ff:1a:4f:30:af:c5:
                    85:d7:fc:cc:ce:62:4b:05:c6:89:da:f5:64:f1:a5:
                    9a:3e:65:5e:03:2f:cb:9c:7b:7f:e1:fe:1c:49:19:
                    30:af:0b:29:4a:db:8c:08:72:8b:f0:7e:9b:50:ec:
                    29:06:6d:fa:db:3f:e5:11:36:8b:ff:c7:69:b8:d0:
                    f7:0d:54:05:0c:47:37:c8:33:9d:b2:c1:31:ec:e0:
                    55:46:98:08:bc:d0:a9:38:fa:9b:5d:d1:26:4c:51:
                    d7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A4:06:23:E9:81:B6:9F:15:52:AF:8D:95:B7:DF:8C:6F:25:32:3C
            X509v3 Authority Key Identifier:
                keyid:35:B5:0C:0B:FD:35:28:0E:87:CA:51:48:76:1C:D7:28:62:DB:C7:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32322d3232203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:c7:f5:47:ac:a3:3c:37:9b:01:fa:76:72:ff:9d:bf:0c:fd:
         86:16:89:fe:1c:e5:d6:9e:d8:9f:57:72:0d:4f:fa:a0:2d:22:
         1d:30:ba:30:06:b0:be:61:b1:57:dd:9e:3e:8a:2c:f5:ae:12:
         01:fe:d6:5c:40:34:b2:23:74:2b:9e:d8:5b:7b:e3:26:85:04:
         89:ec:b8:0e:e0:81:38:d1:58:b9:aa:01:c6:68:9e:4b:30:d7:
         19:f9:b1:ea:c9:f7:b3:f3:12:de:53:73:87:8e:b2:e9:d2:48:
         cd:6a:0f:f4:5c:08:23:17:e5:b7:ef:44:ed:2c:88:67:fe:88:
         91:1c:1a:f8:c7:7a:23:20:51:66:7f:2b:5c:09:7d:68:eb:32:
         89:ec:de:4d:30:06:0c:c0:c0:bc:72:fa:a3:19:7b:c1:c7:88:
         9b:71:52:51:3a:68:d7:88:c7:a1:7c:75:05:6b:48:63:b2:6a:
         6a:5a:28:9b:42:ab:fe:3b:66:68:d8:46:d0:90:62:b0:67:43:
         93:05:e0:2a:5c:f9:33:b7:c2:cc:6c:c5:7c:5a:b8:20:f5:33:
         3b:a1:4a:2c:17:39:08:b8:07:2a:33:7e:1e:c1:02:aa:5c:9e:
         59:a2:06:de:b5:29:db:31:5a:0c:ba:2a:7f:f2:72:48:2a:e2:
         ad:d1:68:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:13 2024 by rpki-client on console-ams.rpki-client.org