Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa
File:                     34352e3136382e31342e302f32332d3233203d3e20323638303335.roa (raw, json)
Hash identifier:          +E6sxqlWsFDm1lH2sLu+AFUgO3caoF2yIWjvv4Jyts0=
Subject key identifier:   E3:BD:83:0E:31:D3:D7:ED:CD:9B:69:44:BB:A3:42:8C:35:A2:5B:93
Certificate issuer:       /CN=50489A084AA380458A19AC12E8D87EDE0CC41542
Certificate serial:       148F6322AA5AFCF4867BC595D1F48730AD68B80A
Authority key identifier: 50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa
Signing time:             Thu 04 Apr 2024 09:24:28 +0000
ROA not before:           Thu 04 Apr 2024 09:19:28 +0000
ROA not after:            Thu 03 Apr 2025 09:24:28 +0000
asID:                     268035
IP address blocks:        45.168.14.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl
                          rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8f:63:22:aa:5a:fc:f4:86:7b:c5:95:d1:f4:87:30:ad:68:b8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50489A084AA380458A19AC12E8D87EDE0CC41542
        Validity
            Not Before: Apr  4 09:19:28 2024 GMT
            Not After : Apr  3 09:24:28 2025 GMT
        Subject: CN=E3BD830E31D3D7EDCD9B6944BBA3428C35A25B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0b:9f:87:b8:d3:01:1f:87:86:0e:9e:99:1f:
                    cc:c9:9d:15:d3:27:e9:1d:ed:17:80:b5:ab:0d:f3:
                    d5:ff:b9:2e:77:55:d4:42:11:c5:fb:40:57:63:0b:
                    32:97:fc:d4:69:44:66:ed:8e:43:0e:28:1f:ed:e0:
                    a3:66:80:01:93:3b:00:c9:a7:c9:f4:a5:ab:fc:ed:
                    07:52:d9:1f:d7:92:12:5c:3b:97:00:d1:a6:3d:4e:
                    0b:14:86:cd:f1:af:47:ef:6e:70:26:da:6c:3a:72:
                    a2:6d:de:28:85:96:f0:5c:32:d3:50:f6:3c:aa:66:
                    ef:77:3c:a1:ed:63:c4:5f:e5:3d:1f:a3:29:5f:13:
                    1b:0f:ef:a2:aa:c8:b8:1c:1d:66:98:43:a6:04:a5:
                    07:d4:00:fc:f1:aa:56:b7:f7:67:56:ff:4c:06:08:
                    ca:5d:b4:c8:62:bb:f9:c3:90:0e:af:0c:e4:95:1b:
                    32:8f:a2:85:cd:d2:1f:23:c9:b8:24:6f:4d:62:bd:
                    44:43:6e:40:6d:da:88:20:5c:1b:f4:9d:bf:49:72:
                    a7:94:3d:20:40:bc:b2:b3:a0:a7:26:9b:e3:21:f8:
                    37:05:05:70:34:2a:5e:ab:46:33:86:79:f7:09:90:
                    f7:06:d7:0f:19:c9:3e:c7:61:5d:f3:f2:7e:80:8d:
                    23:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BD:83:0E:31:D3:D7:ED:CD:9B:69:44:BB:A3:42:8C:35:A2:5B:93
            X509v3 Authority Key Identifier:
                keyid:50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:be:d5:b1:48:e7:91:95:d0:73:aa:2a:2a:a0:ba:de:d2:39:
         ba:1b:49:2b:27:75:66:45:7e:8d:32:11:51:2f:dd:fc:f7:a2:
         28:92:54:6e:bf:69:15:e3:f4:76:ad:a4:ed:b5:98:43:fe:85:
         30:75:01:92:b7:4b:3d:81:1e:3f:8c:de:8d:18:ec:ba:9b:74:
         c7:04:fb:9c:76:75:1f:08:30:ea:46:1c:8d:b6:8e:46:3a:a8:
         67:f5:55:66:20:dc:cc:14:c8:92:d7:35:7a:72:fd:b9:81:31:
         37:39:3e:e9:5c:66:ee:d0:1b:99:ea:77:db:c8:d5:d8:f5:9b:
         f6:75:47:8e:6c:41:bb:90:1d:71:73:07:83:82:ee:9d:09:b5:
         6d:1a:76:8e:6c:d4:d8:0d:23:7f:4d:c1:be:ba:a5:93:94:53:
         73:d4:a2:cb:02:dc:e3:5b:8c:f6:40:92:44:8f:d8:43:8d:7c:
         4c:50:f5:a9:09:18:b6:53:8c:33:7c:13:07:ec:11:ac:da:0f:
         70:dc:0a:56:e6:23:9e:cb:ac:95:b5:e1:b3:ae:c3:d3:e5:51:
         8e:9e:c8:6e:47:4d:24:9d:07:2d:96:8b:b9:de:19:18:0c:9f:
         25:c9:5f:c2:fc:9f:f3:2c:ee:96:57:24:58:6e:db:70:cb:e1:
         f9:d5:10:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:59 2024 by rpki-client on console-fra.rpki-client.org