Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3332203d3e20323639333539.roa
File:                     34352e3138342e36382e302f32322d3332203d3e20323639333539.roa (raw, json)
Hash identifier:          XuFLLJtHAg/TNkhdch/tAyZ9qkEw0Bfr4XYKaA6PVPw=
Subject key identifier:   52:42:4D:1E:3A:B0:60:B1:87:15:FE:34:AD:50:AB:B4:4B:7F:FB:04
Certificate issuer:       /CN=6EFCA001487167C1DEB4618A143333F6D08C3710
Certificate serial:       5F30E021C203255AA08FDB8ECD97EA148ACB9406
Authority key identifier: 6E:FC:A0:01:48:71:67:C1:DE:B4:61:8A:14:33:33:F6:D0:8C:37:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EFCA001487167C1DEB4618A143333F6D08C3710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3332203d3e20323639333539.roa
Signing time:             Thu 14 Nov 2024 15:47:17 +0000
ROA not before:           Thu 14 Nov 2024 15:42:17 +0000
ROA not after:            Thu 13 Nov 2025 15:47:17 +0000
asID:                     269359
IP address blocks:        45.184.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/6EFCA001487167C1DEB4618A143333F6D08C3710.crl
                          rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/6EFCA001487167C1DEB4618A143333F6D08C3710.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EFCA001487167C1DEB4618A143333F6D08C3710.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:30:e0:21:c2:03:25:5a:a0:8f:db:8e:cd:97:ea:14:8a:cb:94:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EFCA001487167C1DEB4618A143333F6D08C3710
        Validity
            Not Before: Nov 14 15:42:17 2024 GMT
            Not After : Nov 13 15:47:17 2025 GMT
        Subject: CN=52424D1E3AB060B18715FE34AD50ABB44B7FFB04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:ce:ef:2d:17:10:70:ef:f3:24:b0:92:4b:
                    c2:2c:fb:57:12:b2:9e:8b:18:92:02:5c:2a:4b:11:
                    10:02:39:0b:0b:43:d9:b5:6f:c2:35:b5:5c:49:f5:
                    b3:c0:27:a4:d6:27:0a:83:15:bb:a4:fc:6a:51:d6:
                    b2:c6:fd:8e:7d:1a:04:c8:65:2c:2f:70:64:85:ff:
                    c7:be:fc:94:b1:e5:2a:a4:b3:bb:c2:f1:0e:a1:47:
                    a2:19:0e:15:c5:29:24:7c:9e:5c:68:42:ed:3b:f1:
                    70:3e:51:dc:4c:ff:86:64:d7:3c:66:1c:3d:78:42:
                    26:a1:09:ad:d1:43:4a:0d:cc:f5:5a:2c:34:4c:c7:
                    f7:20:89:f7:b5:46:2c:96:44:da:86:58:24:c5:fa:
                    ac:9a:51:36:8c:02:16:4c:bb:22:c2:d2:b6:55:82:
                    ab:fb:83:48:35:3e:03:5e:00:67:b7:fc:0b:08:c1:
                    c5:90:fa:7b:40:20:aa:66:25:53:d3:9f:e7:85:da:
                    2b:b7:ca:53:fa:d1:e1:2d:0b:f0:eb:4c:30:42:f5:
                    42:c2:50:a3:f4:67:72:d6:70:97:f5:f5:82:04:45:
                    37:d7:5f:5d:33:87:68:8a:29:47:98:24:e8:26:42:
                    dd:ce:19:80:24:3c:35:6e:01:09:d9:2a:60:13:c1:
                    11:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:42:4D:1E:3A:B0:60:B1:87:15:FE:34:AD:50:AB:B4:4B:7F:FB:04
            X509v3 Authority Key Identifier:
                keyid:6E:FC:A0:01:48:71:67:C1:DE:B4:61:8A:14:33:33:F6:D0:8C:37:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/6EFCA001487167C1DEB4618A143333F6D08C3710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EFCA001487167C1DEB4618A143333F6D08C3710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3332203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:f2:e6:82:98:86:16:f4:ab:3c:43:34:15:ed:87:c1:a3:17:
         1d:14:ff:d6:5f:e8:dc:cc:69:61:87:4f:8e:4e:92:ee:5f:6e:
         28:f3:6e:8c:5f:fe:17:f4:4c:72:e1:ab:b6:ef:61:4a:12:27:
         db:e4:0e:33:22:5a:ea:34:f1:47:f0:84:f3:14:a6:cc:22:1c:
         60:08:a5:94:5a:40:ad:fe:91:69:44:14:28:ca:70:35:81:71:
         87:dd:54:a2:d7:1f:e3:29:4f:82:47:00:8e:b7:32:4b:46:29:
         a7:36:02:ca:53:fa:57:2a:10:06:75:84:01:20:1a:9c:ce:da:
         4d:83:59:37:95:cd:21:d7:3f:a1:b1:42:d1:31:6e:97:34:af:
         7c:b8:b7:9f:73:46:fd:ef:2d:6d:7d:9a:9e:1b:91:66:f0:dd:
         07:a1:30:12:0f:4b:1e:ca:dc:c1:65:46:fc:5b:db:0c:f0:49:
         f8:7d:c4:8a:5a:c5:10:8e:6b:21:c8:9b:ee:71:57:07:d3:05:
         36:3c:96:d5:d9:ae:43:8c:b5:30:aa:30:32:d7:b7:64:e9:bb:
         b4:ed:cb:60:11:a4:6d:73:11:7f:57:ce:09:49:ae:e8:ec:cc:
         c5:c2:e4:76:b8:ca:7d:bb:e1:91:fa:fd:6b:29:3f:a3:82:3a:
         fc:51:3a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:50 2025 by rpki-client