Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32342d3234203d3e20323638333037.roa
File:                     34352e3233372e3234302e302f32342d3234203d3e20323638333037.roa (raw, json)
Hash identifier:          /IpdjzZq1DyNiTnJxdWlbcTP1oiU65+q6JEAaK6ihVw=
Subject key identifier:   1A:96:23:4D:72:81:BA:13:63:A0:07:15:FC:01:1C:74:9E:83:55:19
Certificate issuer:       /CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
Certificate serial:       339ECE53EF69513D62916A11EFB6A054BD2ECA96
Authority key identifier: 43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32342d3234203d3e20323638333037.roa
Signing time:             Sun 21 Jul 2024 18:43:13 +0000
ROA not before:           Sun 21 Jul 2024 18:38:13 +0000
ROA not after:            Sun 20 Jul 2025 18:43:13 +0000
asID:                     268307
IP address blocks:        45.237.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 16:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9e:ce:53:ef:69:51:3d:62:91:6a:11:ef:b6:a0:54:bd:2e:ca:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
        Validity
            Not Before: Jul 21 18:38:13 2024 GMT
            Not After : Jul 20 18:43:13 2025 GMT
        Subject: CN=1A96234D7281BA1363A00715FC011C749E835519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:19:c9:eb:74:5a:20:2c:fe:4a:27:19:28:
                    dd:9a:75:f2:8c:1c:3d:f1:b2:5b:d9:69:a0:29:c0:
                    bf:6f:6f:e5:16:a0:46:ab:a1:b9:20:89:6d:02:8c:
                    2b:12:f6:80:37:c7:2f:ef:76:10:0c:47:05:4f:a0:
                    fb:46:13:de:68:a3:2d:d0:cd:31:8e:b2:83:54:0b:
                    77:f9:5d:f4:cb:e3:a7:48:a5:37:34:37:54:cc:77:
                    eb:5d:dc:fc:09:98:c4:40:16:e4:67:3c:9c:f2:7b:
                    81:b5:e3:f5:83:48:0a:6d:82:fb:d1:c9:9b:6e:c5:
                    f4:ab:f9:38:f5:09:0c:1e:82:0e:ae:4c:29:56:f6:
                    46:d4:ad:90:a8:8a:8b:fa:a6:3e:5f:cc:d1:d0:82:
                    0c:63:9e:81:d7:e7:1d:e8:7f:5a:ff:61:a3:62:ed:
                    42:37:96:92:a3:04:ea:3b:8f:8e:3a:05:dc:92:79:
                    12:ae:72:f5:66:b0:5b:7c:a3:a2:1c:09:31:2e:df:
                    31:3c:18:e2:39:7b:4b:d9:f2:00:dc:e5:25:77:17:
                    f2:57:e6:6a:1e:4b:9b:c7:f6:3d:e0:8e:ed:73:8a:
                    79:0e:ac:3a:6f:ff:f0:c4:68:21:5a:30:ea:13:b6:
                    9b:43:e8:c9:ec:89:50:34:b2:9f:df:f2:74:52:f0:
                    01:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:96:23:4D:72:81:BA:13:63:A0:07:15:FC:01:1C:74:9E:83:55:19
            X509v3 Authority Key Identifier:
                keyid:43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32342d3234203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:16:70:70:98:37:93:39:8a:c5:32:34:78:6b:e8:c7:5b:8b:
         fb:0f:da:db:08:4c:18:a2:4b:5b:dc:fd:48:7d:f8:81:16:4c:
         36:9d:c6:1a:2c:a5:ce:c3:72:63:8e:b2:9d:57:b1:a9:a3:40:
         4d:f7:ff:6c:b6:5c:da:5e:6f:95:7f:fa:0b:31:2f:c1:18:85:
         13:e0:61:e4:c9:fc:0c:13:b8:77:50:bc:29:57:d9:61:d1:bb:
         25:c6:c7:ef:1c:87:ae:da:db:9d:e5:7d:e2:1e:d4:4a:bc:a4:
         01:4f:85:96:5d:dc:42:5a:5d:83:8e:2d:d1:ca:64:84:07:a4:
         8c:7d:59:87:b7:ef:ba:2b:5f:d7:a9:d5:e1:d0:f1:fe:41:0b:
         a1:9a:85:34:9a:bf:4c:7e:2b:46:91:4b:97:2d:b6:a1:c7:eb:
         be:11:a4:3f:90:49:ad:35:16:d5:9c:31:e6:a0:28:20:71:9d:
         a4:71:f9:4f:fc:6f:4a:31:31:47:1d:f0:d8:7c:b4:d2:3f:74:
         04:ba:0a:72:aa:60:c7:08:39:60:74:50:db:53:ab:20:c5:4e:
         45:3c:a3:21:00:60:11:fc:e0:bf:6a:16:28:e2:af:72:41:68:
         9e:2b:49:d2:9f:43:a4:2f:75:54:cf:de:39:f8:d1:4d:c9:a3:
         b6:4d:62:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 17:14:44 2024 by rpki-client on console-fra.rpki-client.org