Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/34352e3137302e3231382e302f32332d3233203d3e20323638313733.roa
File:                     34352e3137302e3231382e302f32332d3233203d3e20323638313733.roa (raw, json)
Hash identifier:          vS763wRM/+wKN6Jha04/xbEUNdyZKGmc1lrq7GXFXlA=
Subject key identifier:   02:6B:F8:8C:75:DD:F3:85:4E:7D:33:6C:4E:F4:18:27:3A:D0:18:D9
Certificate issuer:       /CN=99A78712ED297A370E4987A326F3177259C4BC40
Certificate serial:       5CA4485725F2EA047007C33A1D9018A63FD73D7E
Authority key identifier: 99:A7:87:12:ED:29:7A:37:0E:49:87:A3:26:F3:17:72:59:C4:BC:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/34352e3137302e3231382e302f32332d3233203d3e20323638313733.roa
Signing time:             Wed 03 Apr 2024 18:33:06 +0000
ROA not before:           Wed 03 Apr 2024 18:28:06 +0000
ROA not after:            Wed 02 Apr 2025 18:33:06 +0000
asID:                     268173
IP address blocks:        45.170.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.crl
                          rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a4:48:57:25:f2:ea:04:70:07:c3:3a:1d:90:18:a6:3f:d7:3d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A78712ED297A370E4987A326F3177259C4BC40
        Validity
            Not Before: Apr  3 18:28:06 2024 GMT
            Not After : Apr  2 18:33:06 2025 GMT
        Subject: CN=026BF88C75DDF3854E7D336C4EF418273AD018D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:09:7a:42:2a:75:6c:e9:3d:d6:cc:dc:30:
                    72:8d:3c:09:4a:05:22:c4:2d:35:13:ea:a7:ba:0c:
                    bc:1a:3c:e0:06:0b:2b:71:da:85:d0:fe:f6:6b:a8:
                    b1:77:12:7c:23:eb:88:85:a7:65:5a:d2:64:fc:e2:
                    73:dd:07:63:b1:ce:9b:3d:e2:ce:c6:bb:b6:93:ab:
                    e3:3e:d3:78:af:a0:84:09:22:d5:92:e5:d6:10:86:
                    9e:00:87:11:30:ad:a8:cb:ef:ef:fa:6e:a5:54:9e:
                    cf:21:34:f3:d1:03:bc:54:83:e0:33:b4:bd:e9:3e:
                    bb:2e:84:e3:0c:ce:98:ba:72:08:60:7c:c5:80:a3:
                    6b:02:c0:33:f2:b1:cf:00:ba:0d:ad:bf:35:1b:b1:
                    08:4e:53:5b:ee:c2:dd:57:48:e8:7e:14:f0:a8:f3:
                    82:9d:64:1c:4a:da:4f:7e:fc:ea:5e:a0:d1:f2:c6:
                    be:d6:8e:d7:d4:df:f4:08:a4:5a:03:c0:f6:98:f2:
                    fc:fa:39:13:c2:c3:5b:aa:47:62:9a:0d:ca:37:5a:
                    f9:91:d1:0b:6d:9d:85:43:c4:90:74:84:c4:ea:32:
                    aa:48:b6:84:aa:d2:43:5a:9c:27:5e:ed:dd:63:30:
                    83:c5:ee:f4:75:1a:c3:b3:8f:82:3d:26:26:c6:92:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6B:F8:8C:75:DD:F3:85:4E:7D:33:6C:4E:F4:18:27:3A:D0:18:D9
            X509v3 Authority Key Identifier:
                keyid:99:A7:87:12:ED:29:7A:37:0E:49:87:A3:26:F3:17:72:59:C4:BC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/34352e3137302e3231382e302f32332d3233203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:96:a9:83:f0:ee:c3:f6:5d:4c:bd:55:11:4a:fc:a6:9e:7b:
         ce:91:e4:ea:72:83:f7:79:28:e6:fe:ae:42:f7:42:75:5b:64:
         c8:62:43:84:24:2b:de:a0:d4:0d:32:58:94:34:39:c3:c0:20:
         0e:e3:aa:d7:1c:e3:43:0b:02:b2:49:38:f1:3a:65:55:09:e3:
         a5:81:1a:bf:9c:e0:27:e7:d0:b1:b6:a7:30:90:e7:5e:00:f3:
         66:51:78:cb:21:e0:ee:c9:86:74:7f:ee:44:23:a0:f1:6f:0f:
         5e:0c:f3:94:81:7b:f1:13:5d:f9:46:0c:b2:8e:8f:3b:1b:f5:
         b0:37:2d:bc:33:88:bb:93:86:c5:ad:07:51:3f:19:f1:2c:cb:
         eb:1c:eb:6e:3b:8b:c2:73:a7:93:b2:81:6f:04:35:e1:41:5c:
         82:1d:f7:9c:6f:91:73:4f:d4:1d:98:56:6c:fa:98:20:3f:fa:
         72:8c:1e:94:df:cf:83:de:1c:fa:c4:7e:14:34:e9:85:06:53:
         30:0b:21:25:5d:bd:8e:c1:09:7e:ea:2d:99:32:47:42:81:56:
         b4:8e:fd:78:59:8d:1c:92:6a:94:c1:5d:d1:d9:ed:74:de:9d:
         a2:97:1c:6e:a3:b2:62:9b:4d:83:a8:ef:67:5d:3b:5a:68:5d:
         b4:dc:bb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org