Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/34352e3136372e36342e302f32322d3234203d3e20323638303036.roa
File:                     34352e3136372e36342e302f32322d3234203d3e20323638303036.roa (raw, json)
Hash identifier:          TFG+HQE+S4vTQ5SzHNLT3LSc2cv/9ZeOkVaPwigDc6k=
Subject key identifier:   E9:56:99:F1:E5:23:B3:45:19:3A:F0:FD:C2:D1:1C:60:8E:55:75:5C
Certificate issuer:       /CN=B6CE529BBED623B9985268A3A37BCA33708CD99A
Certificate serial:       7F408CA9A9AABCC2276709F7162BFDFFFDBE91F9
Authority key identifier: B6:CE:52:9B:BE:D6:23:B9:98:52:68:A3:A3:7B:CA:33:70:8C:D9:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CE529BBED623B9985268A3A37BCA33708CD99A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/34352e3136372e36342e302f32322d3234203d3e20323638303036.roa
Signing time:             Thu 22 Aug 2024 13:50:23 +0000
ROA not before:           Thu 22 Aug 2024 13:45:23 +0000
ROA not after:            Thu 21 Aug 2025 13:50:23 +0000
asID:                     268006
IP address blocks:        45.167.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/B6CE529BBED623B9985268A3A37BCA33708CD99A.crl
                          rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/B6CE529BBED623B9985268A3A37BCA33708CD99A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CE529BBED623B9985268A3A37BCA33708CD99A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:40:8c:a9:a9:aa:bc:c2:27:67:09:f7:16:2b:fd:ff:fd:be:91:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6CE529BBED623B9985268A3A37BCA33708CD99A
        Validity
            Not Before: Aug 22 13:45:23 2024 GMT
            Not After : Aug 21 13:50:23 2025 GMT
        Subject: CN=E95699F1E523B345193AF0FDC2D11C608E55755C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:a6:1c:00:f2:f5:33:ec:d6:04:1b:bc:c1:
                    d6:db:8d:ca:5b:3b:a2:a6:c9:df:61:93:ab:d9:2a:
                    c3:39:45:a9:17:34:1f:31:9e:85:7c:02:76:9f:7d:
                    ae:73:79:81:24:f4:c4:81:0f:4a:df:1d:cc:d8:08:
                    07:8c:e0:03:bd:db:c3:35:cc:b7:8c:79:9b:fc:61:
                    cf:cb:f1:49:d2:2b:e8:7f:7d:c7:37:b3:65:9a:a6:
                    4c:3f:60:b4:5a:e3:62:55:ca:2e:f7:15:1c:87:24:
                    3c:54:73:ed:d6:20:b6:16:ac:1a:72:49:12:f7:de:
                    9b:b6:f5:d4:d5:12:c7:14:b0:cf:9c:b5:d4:5c:22:
                    b8:0d:12:35:cd:b5:74:e0:1c:6f:71:a2:68:37:1d:
                    4b:4e:85:29:c5:27:dc:ed:63:b2:21:78:85:06:6c:
                    0d:3b:b8:a8:2a:03:71:74:50:3e:d6:e6:4d:66:62:
                    96:20:b6:a7:17:62:98:dd:03:5b:80:4a:9a:f6:10:
                    60:b3:54:7f:84:60:23:37:ac:ca:17:2d:e2:82:27:
                    c0:da:29:38:84:a9:ce:78:a0:6d:f2:c2:38:ba:63:
                    e6:d3:76:8e:44:e9:0c:fa:c0:f0:80:0d:ef:02:cc:
                    5f:c5:78:15:eb:d3:e5:42:b6:a9:6a:17:16:cf:90:
                    de:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:56:99:F1:E5:23:B3:45:19:3A:F0:FD:C2:D1:1C:60:8E:55:75:5C
            X509v3 Authority Key Identifier:
                keyid:B6:CE:52:9B:BE:D6:23:B9:98:52:68:A3:A3:7B:CA:33:70:8C:D9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/B6CE529BBED623B9985268A3A37BCA33708CD99A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CE529BBED623B9985268A3A37BCA33708CD99A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/34352e3136372e36342e302f32322d3234203d3e20323638303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:04:71:a6:02:63:cc:40:ea:db:26:d9:9e:08:e5:1e:9e:7c:
         11:12:c8:6f:ba:37:9d:31:75:12:93:a3:06:1b:88:3d:12:f2:
         64:a6:16:51:ae:c4:8b:41:10:c7:4f:44:8e:7f:76:0a:f2:c0:
         d5:98:da:27:8f:e1:67:8c:c5:ec:8f:a2:d7:0c:7c:56:ad:80:
         40:a6:b6:00:98:0b:b0:8a:a3:46:18:8b:68:3e:cd:99:a0:7d:
         56:d4:49:76:fe:37:61:c7:ad:b5:c6:84:e7:27:62:2a:84:e6:
         4b:07:ae:c9:0f:51:55:1a:f5:72:15:5e:f9:9a:bf:03:c3:d4:
         b0:7c:66:ed:5b:c9:86:66:51:a4:a4:8d:7a:c8:a9:ea:8b:69:
         08:a2:7d:fe:1d:71:88:5c:25:f7:69:dc:83:ac:ac:84:0f:57:
         1e:2e:8d:ea:91:41:0c:4b:60:e0:8d:ab:21:a1:76:32:9d:8f:
         68:c5:56:16:35:ac:a7:48:bf:82:af:74:d2:49:7f:a5:89:7e:
         79:50:ed:f4:33:65:8e:ab:eb:f1:9e:ff:03:db:34:27:e7:a6:
         76:7c:7f:4b:48:4b:51:a3:9c:3e:6e:3b:00:43:e8:26:38:12:
         13:e6:ed:a9:9d:ab:23:be:6e:7e:45:e5:ab:e1:2b:2c:19:4e:
         04:91:f5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:43 2024 by rpki-client on console-fra.rpki-client.org