Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/34352e3137362e3230342e302f32322d3234203d3e20323638393532.roa
File:                     34352e3137362e3230342e302f32322d3234203d3e20323638393532.roa (raw, json)
Hash identifier:          Ff/IeCuSJppUobbTpGbwK22Ju71WTlq44Sn9ra+n3u8=
Subject key identifier:   2A:D8:1D:94:01:AA:F6:CA:C4:66:AA:15:1D:1C:F6:5A:D6:2D:82:97
Certificate issuer:       /CN=CDBBBC8A21B569B8C13657EE73CC93CA9577A026
Certificate serial:       7673B7E9D1DB1D73560C9F9F398C33B816B8C18B
Authority key identifier: CD:BB:BC:8A:21:B5:69:B8:C1:36:57:EE:73:CC:93:CA:95:77:A0:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/34352e3137362e3230342e302f32322d3234203d3e20323638393532.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     268952
IP address blocks:        45.176.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.crl
                          rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:73:b7:e9:d1:db:1d:73:56:0c:9f:9f:39:8c:33:b8:16:b8:c1:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDBBBC8A21B569B8C13657EE73CC93CA9577A026
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:02:78:1b:e9:5d:97:64:23:eb:08:c1:7b:1b:
                    95:27:a7:a0:46:c4:04:6b:6d:a8:f0:96:21:b1:9a:
                    8c:4d:8a:d1:d7:fd:3e:15:81:e3:05:68:d1:f5:e6:
                    32:11:4d:0c:04:e3:7d:41:83:df:5d:27:28:e6:ad:
                    a4:fe:99:ed:6a:68:6b:8a:81:47:54:9d:55:8a:92:
                    c1:f3:eb:0e:2f:1f:74:de:9e:6c:59:a9:9b:c3:78:
                    a1:f2:fd:31:e8:ec:0b:7c:86:54:10:09:1f:14:cd:
                    c2:78:c8:66:7d:53:4e:f8:a2:4c:bb:d5:4b:41:f0:
                    d8:e3:11:28:5a:cd:48:94:82:e3:14:9a:ac:5f:11:
                    d6:e1:26:2d:f4:8e:03:85:fd:10:72:76:4f:fb:63:
                    5e:51:2b:19:f8:5f:ac:11:be:85:fb:1e:51:c3:7a:
                    72:7b:12:de:00:0a:97:c0:8d:92:dc:e7:e6:f9:a6:
                    b2:d7:64:95:60:61:b1:90:cf:47:f7:f1:ad:fc:6c:
                    04:79:bd:97:71:5d:15:ec:fe:34:03:47:f3:05:83:
                    7a:63:2d:c7:36:4c:e5:75:1d:b1:d2:18:6b:93:f8:
                    00:57:5d:ce:11:76:87:11:e9:ef:2e:d0:e2:02:cf:
                    c2:06:2e:a1:3e:6a:69:60:f6:c4:58:6a:ae:3f:35:
                    26:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D8:1D:94:01:AA:F6:CA:C4:66:AA:15:1D:1C:F6:5A:D6:2D:82:97
            X509v3 Authority Key Identifier:
                keyid:CD:BB:BC:8A:21:B5:69:B8:C1:36:57:EE:73:CC:93:CA:95:77:A0:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/34352e3137362e3230342e302f32322d3234203d3e20323638393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:d3:1e:5d:19:37:bb:25:96:bc:8f:51:ff:86:ce:ae:f7:a1:
         e4:9b:b0:61:e0:a0:8d:6d:5f:3c:8e:9c:da:1e:d3:8f:ff:82:
         c5:11:69:3d:b7:0e:7c:63:2c:40:68:dd:b3:00:17:b6:be:9f:
         48:9f:8f:e5:a7:8c:0c:c7:d5:87:0e:c4:7b:3b:49:4a:cf:f7:
         31:d8:32:da:93:6b:28:10:e7:c6:03:54:a1:09:18:54:c8:75:
         b8:9b:e3:87:b5:d7:84:dd:e3:ed:eb:f5:77:19:a8:85:01:74:
         b1:2b:ab:a7:c1:87:30:6f:66:ef:7f:fe:e9:a2:57:45:a3:37:
         da:97:0a:fc:11:e4:fb:a6:0c:2b:1a:d6:65:6f:e2:2a:19:95:
         30:19:61:db:a6:40:75:a0:95:8a:38:78:60:5f:be:e6:d5:6c:
         30:76:dc:45:9d:65:bc:f4:b4:90:34:62:2f:d3:02:89:40:b1:
         cb:f1:0d:f4:b0:5a:25:af:a4:42:7b:05:ec:81:15:c7:72:86:
         7a:ac:55:ed:6e:50:65:d3:5c:89:f2:21:1d:91:da:c3:0e:85:
         ee:78:e7:77:c9:a7:e4:cd:40:76:aa:5f:e5:83:b3:d3:1d:5d:
         81:1c:86:47:a3:c9:8e:87:52:f3:95:e0:07:26:8a:06:ec:cf:
         01:90:da:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:14 2024 by rpki-client on console-ams.rpki-client.org