Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132322e302f32342d3234203d3e20323638303730.roa
File:                     34352e3136372e3132322e302f32342d3234203d3e20323638303730.roa (raw, json)
Hash identifier:          xUDrD+HgAkL3tprB7pHazzKCIfxOUZMw8+vYUaj3jLg=
Subject key identifier:   D4:E5:CF:3E:18:78:E1:D8:29:8C:0E:73:41:97:6F:62:FB:AC:17:C5
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       01F5DBEFCE1A2DA3219FCCACD584BF1E8F67737C
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132322e302f32342d3234203d3e20323638303730.roa
Signing time:             Wed 03 Apr 2024 18:31:02 +0000
ROA not before:           Wed 03 Apr 2024 18:26:02 +0000
ROA not after:            Wed 02 Apr 2025 18:31:02 +0000
asID:                     268070
IP address blocks:        45.167.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f5:db:ef:ce:1a:2d:a3:21:9f:cc:ac:d5:84:bf:1e:8f:67:73:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Apr  3 18:26:02 2024 GMT
            Not After : Apr  2 18:31:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9c:7a:0a:a7:94:b0:8e:4e:75:f6:1e:cb:59:
                    79:fe:af:51:a3:b0:a1:81:41:ba:a7:4a:78:e7:d3:
                    58:23:ab:a8:76:2f:c4:92:01:3b:17:fe:db:30:eb:
                    5b:e8:3a:d9:b4:7b:b1:3d:8b:c5:40:d1:04:1e:3a:
                    bd:0b:9e:e2:fd:9f:f4:19:7f:41:5b:94:6a:42:1b:
                    2b:36:43:31:e2:af:5b:53:76:86:6f:27:ca:7b:a4:
                    ff:73:8a:33:0d:13:85:af:9f:e8:5f:82:70:24:ec:
                    4b:49:b1:9d:96:3c:d0:bb:b3:72:05:15:4c:af:4f:
                    90:56:06:74:ad:f1:e7:52:8d:76:45:19:df:d8:d0:
                    71:8f:a9:b8:19:b2:33:55:83:4c:c6:ae:70:6e:03:
                    5f:fc:c5:6e:90:ce:1d:92:8c:a4:eb:21:7d:b1:59:
                    d5:e7:bc:29:d9:67:06:df:09:3e:d1:86:6a:a1:86:
                    c2:11:3b:a3:91:82:d8:0c:17:c1:af:4d:fc:00:eb:
                    70:54:a4:ce:69:63:62:30:05:a3:99:fc:35:b7:58:
                    b6:7e:0e:f4:aa:4d:b6:88:2d:6e:70:f9:8d:88:ff:
                    1e:5c:07:16:d4:b6:22:ed:66:9f:cb:56:2c:c7:04:
                    6d:8b:d0:1c:26:ca:8d:d1:f8:2f:f5:5d:0c:80:9e:
                    2e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E5:CF:3E:18:78:E1:D8:29:8C:0E:73:41:97:6F:62:FB:AC:17:C5
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132322e302f32342d3234203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:fc:38:ee:b7:1c:71:5c:ec:fe:5c:e2:5c:9d:7f:a1:64:7b:
         81:08:0b:6a:bb:f9:f2:dc:85:e6:fe:c6:4f:90:f2:ee:75:50:
         a9:79:be:a6:45:2f:a0:a0:4b:7a:04:c4:d5:dc:70:ea:0c:4a:
         18:80:36:4f:6a:e9:03:bd:5a:61:9d:04:d2:c1:16:0b:06:3b:
         72:0b:55:34:89:f6:1f:a0:8b:d1:b2:47:88:6a:80:58:c6:cb:
         30:6d:92:a7:75:64:4e:9d:ca:1d:f0:02:ba:2a:1a:2e:a3:37:
         4c:13:72:24:19:14:56:0d:64:5d:1f:f2:3b:16:ea:e8:70:2f:
         4f:c0:c2:e7:9e:95:68:ca:ff:67:18:64:f3:01:68:5b:86:b0:
         1a:0f:4d:df:82:3b:56:8b:40:88:e1:82:74:b9:db:c9:bf:72:
         5b:b8:84:08:b0:ce:68:3b:49:23:ab:4c:f1:2b:34:24:d1:67:
         fb:58:27:cc:d6:40:e3:70:06:ca:63:bf:57:21:5c:77:69:bd:
         c3:32:8e:75:30:78:53:3d:0c:7c:48:52:be:48:2e:a4:89:f4:
         0b:fd:57:08:56:9f:36:a2:ff:aa:e0:92:00:79:a3:49:4a:70:
         10:7b:0d:1a:55:a5:26:c9:84:5c:11:39:e6:76:03:cb:30:d1:
         6c:76:4e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:21 2024 by rpki-client on console-ams.rpki-client.org