Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/34352e3233332e3138392e302f32342d3234203d3e20323637333438.roa
File:                     34352e3233332e3138392e302f32342d3234203d3e20323637333438.roa (raw, json)
Hash identifier:          wIawzldoQ33yU2gIyqIoljUvBReJxXDAnd6ZVMVa+aI=
Subject key identifier:   31:C1:FD:7D:72:96:F2:07:1F:B1:F5:19:17:CD:77:40:88:C3:0F:4A
Certificate issuer:       /CN=BB8D12F61F027D2250EA527497904D61BD80DD58
Certificate serial:       0959BC9E5149BAC874F8A3EDD5DFC940F4C2440E
Authority key identifier: BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/34352e3233332e3138392e302f32342d3234203d3e20323637333438.roa
Signing time:             Wed 31 Jul 2024 17:47:10 +0000
ROA not before:           Wed 31 Jul 2024 17:42:10 +0000
ROA not after:            Wed 30 Jul 2025 17:47:10 +0000
asID:                     267348
IP address blocks:        45.233.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl
                          rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:59:bc:9e:51:49:ba:c8:74:f8:a3:ed:d5:df:c9:40:f4:c2:44:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8D12F61F027D2250EA527497904D61BD80DD58
        Validity
            Not Before: Jul 31 17:42:10 2024 GMT
            Not After : Jul 30 17:47:10 2025 GMT
        Subject: CN=31C1FD7D7296F2071FB1F51917CD774088C30F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ee:d3:74:32:eb:38:c5:84:ed:fe:35:97:4b:
                    b4:67:a5:6c:98:5c:30:a5:e5:ea:9d:a6:74:f0:92:
                    80:7c:12:c9:29:a5:b1:69:4e:d7:ac:66:1a:eb:a5:
                    56:36:e1:2f:5d:db:01:8b:ca:4f:e5:fe:e4:92:14:
                    e5:29:ec:f3:76:8b:45:5e:b4:4f:62:18:63:c5:31:
                    0c:16:e2:c6:45:38:ea:2b:36:85:dc:77:1e:57:98:
                    1d:3b:03:53:44:1a:44:93:63:be:0c:67:11:d4:31:
                    14:fe:b3:4b:62:f4:77:9e:7d:b2:fd:4d:67:b8:6c:
                    4f:d2:24:28:85:aa:8f:53:45:f1:76:2a:8e:55:56:
                    b4:dc:75:0e:f5:89:2d:1e:75:26:ee:39:4b:4f:02:
                    35:7d:7a:37:89:78:47:b4:8c:9b:b8:0a:0f:e2:42:
                    29:a6:c4:aa:5e:59:8e:65:e4:9e:fa:df:38:36:3b:
                    0c:18:94:a6:27:5c:15:30:66:b4:68:92:4e:ee:ab:
                    3f:d9:ab:04:44:65:f8:1a:19:d8:86:82:15:87:c3:
                    09:f9:8c:89:f4:0e:c4:bf:35:0c:c6:ae:f6:f0:7d:
                    31:ae:2a:e9:54:c5:db:7a:99:0f:96:eb:aa:4c:5e:
                    0d:46:6b:d7:a1:77:bd:10:d6:cf:cb:3f:92:a8:05:
                    52:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C1:FD:7D:72:96:F2:07:1F:B1:F5:19:17:CD:77:40:88:C3:0F:4A
            X509v3 Authority Key Identifier:
                keyid:BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/34352e3233332e3138392e302f32342d3234203d3e20323637333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:2e:af:fd:15:18:ac:32:8e:d3:5d:b1:ee:80:be:4a:05:d3:
         29:b5:b2:bb:9d:70:8b:7a:02:52:c6:ca:a2:10:89:93:ad:4d:
         c1:eb:32:eb:0d:93:a6:6b:97:e1:00:05:18:0d:92:a9:72:34:
         ed:43:df:b1:3e:d6:21:4d:2d:db:bb:fb:da:ed:bf:ee:fb:9b:
         f1:5c:1a:e9:f4:28:e3:1a:d1:07:74:eb:af:a4:e4:75:20:7f:
         92:67:55:cd:f6:00:be:90:24:db:6a:42:6f:a9:02:77:28:06:
         a4:d1:5b:5b:a9:c5:c5:89:73:51:5a:56:fd:b8:d2:29:23:b8:
         93:72:b0:22:3c:b4:ef:b4:66:c7:44:6c:a6:03:b8:2f:0b:cb:
         ff:86:c2:a5:cb:42:8c:ba:ef:11:34:11:15:ee:77:25:4b:80:
         e5:4d:04:c0:33:cd:30:56:ca:b5:75:00:33:60:16:db:77:2f:
         c3:e0:3a:9d:ac:ae:0d:fe:ff:cb:18:d8:8f:48:a8:20:6f:21:
         c3:b7:73:60:3d:c6:09:44:d8:6d:ee:ab:31:44:96:5a:cf:50:
         26:95:67:91:95:46:43:69:1c:47:97:6a:6c:49:07:09:25:a5:
         02:f8:e6:76:39:22:ca:e5:65:1b:fc:e1:ab:6e:75:fa:d7:0a:
         e4:24:02:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:06 2024 by rpki-client on console-fra.rpki-client.org