Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234312e302f32342d3234203d3e20323638333037.roa
File:                     34352e3233372e3234312e302f32342d3234203d3e20323638333037.roa (raw, json)
Hash identifier:          CWOe40rsjph01C/Ii7yIjALC5CbW0DAAGGC/gBZIO9Y=
Subject key identifier:   14:BE:22:1F:0E:55:8B:B7:A4:28:47:0D:32:0F:6F:AD:A2:C9:2B:A6
Certificate issuer:       /CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
Certificate serial:       0942E7096360E32C6AFCF4019DFDD9E23D05DB82
Authority key identifier: 43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234312e302f32342d3234203d3e20323638333037.roa
Signing time:             Sun 21 Jul 2024 18:48:59 +0000
ROA not before:           Sun 21 Jul 2024 18:43:59 +0000
ROA not after:            Sun 20 Jul 2025 18:48:59 +0000
asID:                     268307
IP address blocks:        45.237.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:42:e7:09:63:60:e3:2c:6a:fc:f4:01:9d:fd:d9:e2:3d:05:db:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
        Validity
            Not Before: Jul 21 18:43:59 2024 GMT
            Not After : Jul 20 18:48:59 2025 GMT
        Subject: CN=14BE221F0E558BB7A428470D320F6FADA2C92BA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:39:dc:33:8f:ab:69:ca:db:fa:f8:21:3a:60:
                    f5:fa:67:f6:b1:88:e8:49:7d:5d:f4:36:fb:63:9a:
                    c0:2b:91:50:1f:19:05:95:cd:e6:35:00:42:12:d9:
                    1a:ae:3f:89:bb:58:bc:a4:58:5a:48:84:a7:f4:9f:
                    5f:5f:cb:03:37:99:36:2d:8f:d7:35:d5:4e:4c:15:
                    29:6c:f1:a0:25:d7:b7:94:d6:f3:20:cd:d7:97:48:
                    a7:29:79:13:4f:a9:bf:c9:30:50:fd:2a:8a:45:20:
                    0d:c0:72:ff:44:90:e1:75:85:45:83:3a:93:8a:4c:
                    d3:1a:6a:c9:f5:d1:14:95:75:b8:dd:26:90:06:64:
                    54:db:1a:64:b9:b1:ff:14:54:dc:c2:3e:97:9c:5d:
                    a1:e8:d0:03:95:c6:f6:02:66:78:a2:82:bf:31:e8:
                    89:56:ee:f5:cf:a6:f4:4d:4b:b0:06:e3:b4:a9:5f:
                    27:ab:f2:68:05:ae:9c:e9:a2:45:aa:99:41:66:81:
                    dd:e2:f9:1f:ba:59:d2:05:4d:62:c6:ad:fa:46:f6:
                    78:76:0f:c7:41:ce:6c:20:ae:83:2d:e6:e3:c2:38:
                    fd:e8:6f:73:58:82:bd:56:57:60:ed:4d:2f:e7:39:
                    ab:14:4d:0f:12:4e:76:27:c0:d3:7d:bd:56:24:d5:
                    1f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BE:22:1F:0E:55:8B:B7:A4:28:47:0D:32:0F:6F:AD:A2:C9:2B:A6
            X509v3 Authority Key Identifier:
                keyid:43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234312e302f32342d3234203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ae:f7:a6:c1:e7:e5:e0:dd:8c:1d:02:79:dd:58:7b:b1:c6:
         bb:96:ba:cd:18:1b:53:e0:24:80:e3:c4:2f:6f:0c:4e:2d:38:
         d9:6b:7a:75:58:ed:23:28:81:d5:ec:ce:9c:a6:e3:8c:6c:0d:
         5b:8c:e8:07:05:5f:48:ab:61:52:9a:87:ff:95:9e:29:81:d8:
         67:ff:cb:2b:0d:d3:de:4e:8f:7f:bd:be:78:63:35:59:66:a1:
         a7:9d:2a:1d:34:3a:77:c3:a9:7d:96:17:ad:00:b4:6f:c1:3b:
         70:68:23:87:1f:b2:5f:e4:f6:9d:c0:1b:98:f0:fe:70:42:59:
         e9:bf:ba:24:e3:86:44:7b:99:1f:22:ea:88:e0:34:e5:96:3b:
         f7:2f:50:4c:4a:93:54:53:23:a8:18:df:e6:48:b1:ad:4d:74:
         48:20:6a:d8:34:51:aa:20:a1:c0:47:eb:69:a6:b1:fb:0f:f5:
         4d:6c:6a:57:03:a0:b6:13:c7:6c:f5:72:3a:61:ed:6a:e9:29:
         8a:39:ec:85:ec:77:0a:db:9d:bf:39:4d:8e:a5:8f:ba:b8:dc:
         dd:e6:ac:ec:1a:e1:73:1e:8d:b3:21:49:05:4b:1e:2c:88:d8:
         00:1f:d2:90:f1:85:3a:1f:90:4a:a2:51:71:e8:3b:8b:87:6c:
         14:d0:62:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 18:27:35 2024 by rpki-client on console-ams.rpki-client.org