Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/34352e3232352e3233322e302f32322d3234203d3e20323636393634.roa
File:                     34352e3232352e3233322e302f32322d3234203d3e20323636393634.roa (raw, json)
Hash identifier:          g3V6hYC78ydLW8Ud9KkoDj2MRg4s7vZ28mkS2h6Ijms=
Subject key identifier:   BD:A9:2F:4C:29:69:AA:1C:34:29:AE:6A:C0:79:30:D4:5F:2A:91:7A
Certificate issuer:       /CN=1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5
Certificate serial:       3C29B0114C4F8AFA49D77D6DB25C533E33CBAF0C
Authority key identifier: 1C:73:23:8E:F4:8C:6C:F6:BC:E0:C9:D7:5B:33:87:FE:DA:A0:75:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/34352e3232352e3233322e302f32322d3234203d3e20323636393634.roa
Signing time:             Thu 19 Sep 2024 18:13:22 +0000
ROA not before:           Thu 19 Sep 2024 18:08:22 +0000
ROA not after:            Thu 18 Sep 2025 18:13:22 +0000
asID:                     266964
IP address blocks:        45.225.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.crl
                          rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:29:b0:11:4c:4f:8a:fa:49:d7:7d:6d:b2:5c:53:3e:33:cb:af:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5
        Validity
            Not Before: Sep 19 18:08:22 2024 GMT
            Not After : Sep 18 18:13:22 2025 GMT
        Subject: CN=BDA92F4C2969AA1C3429AE6AC07930D45F2A917A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:38:77:e1:bb:0f:c2:5e:7a:d9:17:90:98:d9:
                    9a:b7:88:ab:df:41:95:35:26:cc:73:12:9d:59:17:
                    a6:ed:05:3a:f9:6d:40:24:5f:8e:d8:79:80:3b:e9:
                    6a:37:a4:82:9d:4d:f4:2c:9e:24:ba:fd:3a:7f:b5:
                    fc:60:1c:de:0b:8c:3d:f0:c7:30:6a:37:8c:f1:eb:
                    04:9a:2f:eb:12:74:99:77:94:bb:16:96:1f:f5:be:
                    37:cd:61:73:14:af:f1:61:1d:d3:c1:5d:a7:59:b6:
                    8c:69:be:06:85:5c:b5:d1:12:e6:eb:d5:17:03:0e:
                    e2:b3:3e:41:49:ba:07:2c:03:4d:a5:55:68:c7:a2:
                    45:b8:76:ba:25:4f:ae:95:78:a1:eb:ed:90:ab:ef:
                    01:0c:10:75:5f:3e:ec:32:ac:b2:a8:2a:93:62:aa:
                    21:fc:28:b1:c1:ff:9a:38:8e:32:ad:7b:67:fe:5b:
                    d3:c0:fb:78:37:0c:98:61:0f:1a:52:4c:d5:e7:95:
                    e7:2f:08:06:df:52:4c:fd:5b:b0:0e:8e:bf:e2:cf:
                    9d:04:82:af:ee:6f:a9:74:60:91:93:d8:ab:bc:d4:
                    6e:4b:c4:4d:09:b5:4c:f2:74:47:48:6d:17:8d:c4:
                    ce:a1:e6:75:47:80:27:2d:a8:67:e8:0b:3c:fb:79:
                    d1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A9:2F:4C:29:69:AA:1C:34:29:AE:6A:C0:79:30:D4:5F:2A:91:7A
            X509v3 Authority Key Identifier:
                keyid:1C:73:23:8E:F4:8C:6C:F6:BC:E0:C9:D7:5B:33:87:FE:DA:A0:75:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/34352e3232352e3233322e302f32322d3234203d3e20323636393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:3f:3f:63:70:d5:3b:7d:d5:fb:d8:6d:e0:b3:64:93:87:79:
         32:46:8b:28:12:c4:5a:b2:94:40:1e:10:9b:b8:38:6e:e0:99:
         34:68:13:17:42:94:0b:b7:66:0a:04:51:e3:f2:19:29:ff:9a:
         39:0e:7a:59:40:cd:78:e1:d8:7b:d8:84:6f:45:b4:ee:41:81:
         7a:c5:de:e1:df:88:17:da:3f:7d:fa:13:f4:cd:6b:28:92:63:
         65:09:e9:ce:9a:47:5d:f5:55:7f:47:b8:dd:58:e9:4a:24:bc:
         9a:82:8e:31:f3:f3:58:91:c8:ca:27:a7:a1:ae:b7:58:00:ba:
         81:7f:11:8f:33:42:6c:27:a2:78:e9:36:6c:99:f9:cc:67:f5:
         98:39:7d:3f:ea:71:fb:93:1f:0e:96:cf:26:dd:c4:d7:e1:84:
         f1:1c:51:8f:bf:29:f4:47:49:7f:51:44:25:7d:5f:de:8d:67:
         40:73:28:ad:44:d4:ab:71:46:ab:50:d4:bf:99:0a:c8:9d:04:
         7e:1b:9b:72:0c:9a:f9:77:38:2d:ca:ae:b7:b2:1e:78:e2:f3:
         05:bb:b4:11:f9:1e:b3:04:3f:ff:c4:18:6d:5c:76:a4:0d:21:
         16:74:15:d0:90:09:6a:7d:78:a8:6a:2a:aa:d8:c5:3e:d3:08:
         d3:cc:8b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:07 2024 by rpki-client on console-fra.rpki-client.org