Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/1/34352e3233372e3134342e302f32322d3332203d3e203631353933.roa
File:                     34352e3233372e3134342e302f32322d3332203d3e203631353933.roa (raw, json)
Hash identifier:          ynvsm5bXoqtvrBH0AF0ZSs/57swpBotVkmZiDmJG23Q=
Subject key identifier:   42:F3:43:01:41:E9:66:1E:AF:D9:A1:98:CE:C1:BF:29:4D:39:3F:3C
Certificate issuer:       /CN=F79C2520AC77E73FBAC789D36D8E3E640BE39E65
Certificate serial:       49FDE1A4B0349967163E307315935D825F34FFDF
Authority key identifier: F7:9C:25:20:AC:77:E7:3F:BA:C7:89:D3:6D:8E:3E:64:0B:E3:9E:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79C2520AC77E73FBAC789D36D8E3E640BE39E65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/1/34352e3233372e3134342e302f32322d3332203d3e203631353933.roa
Signing time:             Thu 04 Apr 2024 08:58:17 +0000
ROA not before:           Thu 04 Apr 2024 08:53:17 +0000
ROA not after:            Thu 03 Apr 2025 08:58:17 +0000
asID:                     61593
IP address blocks:        45.237.144.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/1/F79C2520AC77E73FBAC789D36D8E3E640BE39E65.crl
                          rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/1/F79C2520AC77E73FBAC789D36D8E3E640BE39E65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79C2520AC77E73FBAC789D36D8E3E640BE39E65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fd:e1:a4:b0:34:99:67:16:3e:30:73:15:93:5d:82:5f:34:ff:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F79C2520AC77E73FBAC789D36D8E3E640BE39E65
        Validity
            Not Before: Apr  4 08:53:17 2024 GMT
            Not After : Apr  3 08:58:17 2025 GMT
        Subject: CN=42F3430141E9661EAFD9A198CEC1BF294D393F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:d2:e3:f2:3f:f5:53:16:50:85:94:bf:12:
                    d4:9c:df:45:46:c4:14:93:0c:01:0d:0e:3f:37:df:
                    6c:ef:ea:c6:a0:0c:66:11:23:b6:7b:16:05:22:59:
                    4b:13:be:3a:90:56:9e:14:8f:c6:0a:52:78:ce:e7:
                    af:51:35:74:24:0f:2d:77:fc:3d:85:97:4d:9a:75:
                    1a:3c:b6:c6:e6:91:7b:bf:76:07:f6:d8:4a:5c:53:
                    4b:26:88:7c:8c:f6:97:69:b5:c8:33:5f:19:32:75:
                    b0:ac:40:73:33:ed:1a:45:28:63:81:4b:e7:24:d1:
                    c7:08:ee:68:1a:dd:57:a0:8c:63:5e:b3:2a:53:39:
                    6f:2a:f6:36:9b:35:ed:e1:a5:0f:cd:f5:85:c8:85:
                    f9:5e:79:45:72:53:37:2d:50:99:7e:9b:5c:d0:76:
                    be:d6:60:62:18:4e:cf:49:2a:e8:bf:1a:91:d5:91:
                    a6:b3:58:d3:8e:5e:ba:b0:95:0d:c6:c0:ba:63:02:
                    cd:6e:07:b3:e1:0b:f6:60:5f:79:c1:41:79:84:32:
                    a4:77:c1:67:e6:34:d5:0a:46:ee:d0:07:cc:3f:7b:
                    be:bc:17:e1:df:84:6f:bc:3f:07:71:77:1e:ec:bb:
                    2e:74:04:93:ba:79:1e:81:1a:b2:b3:14:c6:18:60:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F3:43:01:41:E9:66:1E:AF:D9:A1:98:CE:C1:BF:29:4D:39:3F:3C
            X509v3 Authority Key Identifier:
                keyid:F7:9C:25:20:AC:77:E7:3F:BA:C7:89:D3:6D:8E:3E:64:0B:E3:9E:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/1/F79C2520AC77E73FBAC789D36D8E3E640BE39E65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79C2520AC77E73FBAC789D36D8E3E640BE39E65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/1/34352e3233372e3134342e302f32322d3332203d3e203631353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:55:e2:d1:ed:7e:b9:7e:8a:36:ae:16:d6:d7:1b:d0:0f:42:
         75:ee:2d:ba:75:0a:8b:9e:fb:7a:97:fb:c1:13:b1:dd:e6:4f:
         98:a3:34:b0:a2:38:2f:be:4f:26:5d:f9:71:23:1f:9e:c9:06:
         84:37:f8:64:0f:8a:60:1a:ea:bf:33:18:93:ce:21:40:0d:8b:
         18:45:36:8c:a2:a0:49:b0:b8:78:e3:3d:21:a9:3c:e3:66:f7:
         1e:61:6e:61:51:51:ae:a8:29:d9:41:0e:c3:84:5a:a2:0a:8b:
         8c:aa:19:d7:94:47:f5:a1:25:f4:64:b6:f9:94:ee:25:e6:b7:
         8e:86:b7:97:4f:2f:bf:ae:a4:93:3d:3a:a5:7f:05:80:41:b3:
         bc:c5:05:bb:c3:a9:39:10:5a:ef:1f:91:52:85:8c:94:e2:0c:
         78:3a:c2:e6:e2:83:5e:45:da:04:89:65:0d:a5:83:ac:7a:b1:
         bd:f9:31:99:1b:b3:6e:87:cc:a9:ad:c2:03:b9:51:6b:97:61:
         b9:37:4e:bc:bb:87:8b:6f:3a:b2:ec:3d:bd:47:95:be:b3:4f:
         6f:3f:f3:a5:f3:40:21:bb:43:d0:51:0f:2e:8f:10:12:e5:5c:
         5e:6e:98:7f:69:9b:d5:2b:28:36:4f:70:d5:94:ec:b6:2d:fe:
         bf:76:cf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 05:42:34 2024 by rpki-client on console-fra.rpki-client.org