Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/34352e3232352e3233342e302f32332d3233203d3e20323636393634.roa
File:                     34352e3232352e3233342e302f32332d3233203d3e20323636393634.roa (raw, json)
Hash identifier:          3uH9RltiaEPG0mVSfXWLCmayRDujGHEmvdhyurs0RC4=
Subject key identifier:   E4:1D:53:FA:99:56:AA:A7:6C:0E:8E:3E:C4:7A:9C:91:D2:F7:CB:3E
Certificate issuer:       /CN=1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5
Certificate serial:       2FA534D0B803C45A4BFC61FEEC94700417CF702E
Authority key identifier: 1C:73:23:8E:F4:8C:6C:F6:BC:E0:C9:D7:5B:33:87:FE:DA:A0:75:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/34352e3232352e3233342e302f32332d3233203d3e20323636393634.roa
Signing time:             Thu 04 Apr 2024 12:33:05 +0000
ROA not before:           Thu 04 Apr 2024 12:28:05 +0000
ROA not after:            Thu 03 Apr 2025 12:33:05 +0000
asID:                     266964
IP address blocks:        45.225.234.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.crl
                          rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a5:34:d0:b8:03:c4:5a:4b:fc:61:fe:ec:94:70:04:17:cf:70:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5
        Validity
            Not Before: Apr  4 12:28:05 2024 GMT
            Not After : Apr  3 12:33:05 2025 GMT
        Subject: CN=E41D53FA9956AAA76C0E8E3EC47A9C91D2F7CB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:f4:86:f5:73:91:ef:0c:f5:14:6e:80:aa:
                    6b:b1:59:22:d1:4a:d2:5f:64:e3:22:60:b0:b0:47:
                    70:19:ea:0b:92:ee:1c:01:8b:fc:21:54:1e:1b:ae:
                    c2:f3:94:99:35:a1:db:92:2d:4e:a2:d6:ed:74:4b:
                    0f:4c:76:49:24:b2:3f:a9:dc:12:00:12:3d:e0:b5:
                    57:60:e9:75:ec:56:09:52:c8:9f:c0:97:41:42:74:
                    1b:7e:59:18:aa:d9:ee:c2:68:f3:4a:53:28:fa:cf:
                    8a:42:54:ab:5d:ca:af:29:95:95:f5:cf:b5:c8:a3:
                    45:00:55:20:b9:c4:66:e5:0a:b3:9d:16:7e:5c:1f:
                    d7:fe:cd:0e:c6:d1:01:b8:2a:f1:64:33:aa:43:f0:
                    0a:b3:eb:58:7a:f9:b9:dc:8a:6c:39:b4:95:cb:0c:
                    70:b1:f2:33:af:ff:b7:e8:89:aa:2a:6d:8e:96:e5:
                    94:d3:75:81:3e:3b:9a:b3:03:76:a5:de:9b:59:5c:
                    63:f2:b9:59:c9:a0:03:25:4d:67:b8:6e:4a:4b:78:
                    8e:27:57:78:32:b9:31:71:65:cc:21:51:4a:00:ca:
                    fc:4a:09:20:3e:c7:98:b5:82:55:66:02:99:46:0e:
                    09:b8:f7:f4:01:ec:a3:10:3d:fa:bc:14:b3:c4:3a:
                    c6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1D:53:FA:99:56:AA:A7:6C:0E:8E:3E:C4:7A:9C:91:D2:F7:CB:3E
            X509v3 Authority Key Identifier:
                keyid:1C:73:23:8E:F4:8C:6C:F6:BC:E0:C9:D7:5B:33:87:FE:DA:A0:75:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/34352e3232352e3233342e302f32332d3233203d3e20323636393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:ff:81:58:52:87:2d:db:3c:fa:fe:81:63:4d:cc:8f:49:40:
         c7:dc:42:2e:ab:d1:c9:4d:b1:e7:07:b5:89:de:0b:46:59:1e:
         de:5a:6d:f7:d8:63:2c:0f:52:ca:0b:3b:d4:4d:b4:a9:bb:94:
         45:47:e3:1d:c3:19:d1:d0:b4:ae:af:91:bd:c6:0c:98:63:6c:
         07:a4:62:3f:80:73:b7:11:e2:65:ed:1f:60:b1:de:d5:25:fa:
         c9:51:b5:ed:45:a7:f9:42:1a:b2:9b:9d:85:77:06:3f:bb:7c:
         94:47:92:25:3b:56:79:1e:e7:51:c0:0c:6e:ae:b6:35:23:8a:
         fe:d0:1f:87:0b:c9:ea:bb:ab:e4:3a:03:da:bf:18:94:e4:85:
         7d:a5:00:f2:6f:82:e7:37:3e:1f:ef:f9:33:d1:56:fd:b8:7a:
         bb:ea:56:ef:9f:2c:f6:48:8e:42:77:d2:11:38:2f:79:9f:bb:
         74:32:24:7f:23:0f:2e:22:0c:ee:86:da:b3:af:ab:8f:ce:51:
         7e:48:99:66:ff:bb:0a:94:fd:20:43:45:ad:bf:b4:c2:75:37:
         eb:63:7a:08:81:da:92:37:00:ba:47:d3:5f:81:f8:15:db:ea:
         6d:5d:f2:4e:db:57:75:8d:50:3c:3e:e0:cf:af:62:63:d3:ae:
         5d:50:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:59 2024 by rpki-client on console-fra.rpki-client.org