Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa
File:                     34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa (raw, json)
Hash identifier:          Wc32wril7H2Lm18UQ/E6ZP6Hhg8AobzOYo2+ZK+BMyM=
Subject key identifier:   0D:9E:99:E0:37:3C:6B:C9:E4:A3:37:4E:CC:43:4E:02:5B:D8:3F:04
Certificate issuer:       /CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
Certificate serial:       191199DF838048D74F967A286695669DE01DA0CE
Authority key identifier: CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa
Signing time:             Thu 04 Apr 2024 03:01:16 +0000
ROA not before:           Thu 04 Apr 2024 02:56:16 +0000
ROA not after:            Thu 03 Apr 2025 03:01:16 +0000
asID:                     267324
IP address blocks:        45.233.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl
                          rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:11:99:df:83:80:48:d7:4f:96:7a:28:66:95:66:9d:e0:1d:a0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
        Validity
            Not Before: Apr  4 02:56:16 2024 GMT
            Not After : Apr  3 03:01:16 2025 GMT
        Subject: CN=0D9E99E0373C6BC9E4A3374ECC434E025BD83F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:51:ce:0e:51:d3:28:53:48:40:6e:19:c2:
                    f1:59:02:45:b3:d0:96:82:45:47:22:84:8a:70:01:
                    3e:08:68:64:d8:b1:1e:47:03:ce:6e:14:8f:4f:1a:
                    50:81:09:d3:a9:95:02:e5:92:17:2b:3f:5a:ad:69:
                    5b:06:1a:73:63:6a:d0:bd:54:e4:70:f1:66:bd:bd:
                    e4:f4:90:27:a7:4b:69:b4:ce:8e:35:8f:1a:2f:0d:
                    44:57:46:42:63:e9:4b:52:c1:d0:2a:68:bc:c8:2e:
                    90:41:18:51:af:40:30:b5:d9:9b:a1:94:45:25:6d:
                    40:58:83:f6:a2:33:53:20:fd:f8:9e:5c:56:b5:d8:
                    0b:16:39:19:b0:a3:59:a8:66:ba:4d:1e:f4:0c:be:
                    ff:f1:e5:86:36:3f:c7:fb:92:d3:7a:06:18:46:37:
                    46:96:e5:bf:bd:ed:c6:a6:35:c1:29:64:22:95:0d:
                    8b:40:63:5f:7d:f9:31:17:7a:d5:ce:b0:9f:a1:d0:
                    b1:93:1f:af:0b:10:a0:62:05:e8:83:c4:ab:31:61:
                    e9:46:8b:26:39:12:f4:ca:25:63:27:c4:2a:60:b5:
                    9e:5c:32:47:6f:b2:b5:8a:04:79:6b:f0:b2:fd:ab:
                    af:b9:b3:36:ca:6d:61:00:1b:13:58:6e:a2:4e:ab:
                    e4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9E:99:E0:37:3C:6B:C9:E4:A3:37:4E:CC:43:4E:02:5B:D8:3F:04
            X509v3 Authority Key Identifier:
                keyid:CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:68:84:cb:b3:fb:71:3d:a6:48:3d:03:2b:92:3a:c7:a5:d1:
         e1:3a:91:d1:ef:a3:c8:ac:8c:ba:7e:7d:69:62:aa:79:cf:ed:
         28:c3:a2:22:74:7d:d9:f5:14:17:b7:bb:59:f6:ba:a1:6a:79:
         e8:d2:aa:f3:1f:73:50:1c:ef:b3:fe:6a:0b:7e:cd:9f:fa:e1:
         cb:e6:80:8e:39:b8:1e:0c:75:b3:8e:b1:69:ee:89:5c:22:1a:
         0a:74:82:b3:0c:0a:83:74:a8:b0:07:9d:3f:55:82:a0:cd:df:
         94:76:db:d2:69:1f:d5:4b:45:6e:2c:33:97:93:f5:fc:4e:a7:
         ab:e4:3a:b9:84:b5:99:f4:b7:11:2b:72:71:4b:3d:83:37:8d:
         e8:55:47:13:81:3e:9c:58:fc:3f:9b:c4:d9:0d:7c:4a:ad:8c:
         54:55:9f:ce:0a:19:8e:f8:e0:fa:bb:a0:ab:98:f3:e7:58:a9:
         47:1b:43:03:b6:2c:c2:51:28:b4:05:63:63:b4:5e:2f:1c:5c:
         56:20:35:b8:86:54:98:73:84:e4:01:a3:d8:5e:21:19:ed:9c:
         70:d3:8c:5f:89:d7:45:27:8d:5a:49:6e:ba:81:c8:45:7d:a6:
         a0:5a:6e:13:43:e7:ce:96:b9:4e:97:7b:b6:02:e8:92:67:2f:
         1c:13:c0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:03 2024 by rpki-client on console-fra.rpki-client.org