Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e382e302f32332d3233203d3e20323639363938.roa
File:                     34352e3139312e382e302f32332d3233203d3e20323639363938.roa (raw, json)
Hash identifier:          7GAOwWFZDyQ4V16E2d8DCnDdhusZYpu5ViD+bde0ELk=
Subject key identifier:   86:CA:B4:47:84:33:6F:A3:1F:19:30:6F:8D:47:DD:6C:62:57:D9:17
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       5A92B3FDB2C9BE5DB68B87E4D071996DA6F1AAED
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e382e302f32332d3233203d3e20323639363938.roa
Signing time:             Thu 04 Apr 2024 04:50:41 +0000
ROA not before:           Thu 04 Apr 2024 04:45:41 +0000
ROA not after:            Thu 03 Apr 2025 04:50:41 +0000
asID:                     269698
IP address blocks:        45.191.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:92:b3:fd:b2:c9:be:5d:b6:8b:87:e4:d0:71:99:6d:a6:f1:aa:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Apr  4 04:45:41 2024 GMT
            Not After : Apr  3 04:50:41 2025 GMT
        Subject: CN=86CAB44784336FA31F19306F8D47DD6C6257D917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4a:9c:e5:bc:22:3d:9a:45:9e:e7:98:d8:d9:
                    0d:ed:f7:56:9e:4a:a5:cd:41:ac:de:84:85:be:b6:
                    8f:cd:fd:c4:1d:d2:8e:2a:21:e9:1c:65:96:0a:c0:
                    ab:5c:d2:c5:01:2c:84:52:7a:2e:a6:6c:f0:75:b4:
                    f8:82:a8:0d:77:a0:d1:9b:77:1a:8e:08:74:0b:63:
                    67:15:bb:22:67:fa:b3:c5:1c:ee:1c:11:ba:bd:00:
                    30:03:09:0e:ad:b1:ec:7b:09:82:5b:dd:fb:77:b5:
                    09:f7:06:ff:9d:c9:23:6e:c0:02:c0:52:de:80:53:
                    53:0e:f3:0a:32:b8:93:c3:cf:43:86:f7:ed:8d:5a:
                    a0:ff:73:df:b8:de:0b:eb:03:ee:13:d5:29:ca:21:
                    c9:80:d3:50:70:a0:a0:5d:11:46:f2:aa:c3:41:be:
                    89:ef:bc:83:4d:b7:a2:d1:0c:f4:86:40:64:b8:44:
                    a9:ca:92:c1:5a:a7:3d:cd:98:a6:4f:07:d2:cf:8d:
                    76:04:5d:16:ea:38:3e:c7:6c:bd:29:52:f1:00:db:
                    76:d6:30:6a:71:d0:e4:a1:2c:39:ed:91:17:c1:ac:
                    35:4a:58:8e:01:09:48:4e:28:54:a5:47:60:78:08:
                    d5:2e:ac:98:5d:fa:52:90:13:ab:99:25:96:aa:a9:
                    c3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CA:B4:47:84:33:6F:A3:1F:19:30:6F:8D:47:DD:6C:62:57:D9:17
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e382e302f32332d3233203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:45:38:d6:a6:c5:be:b4:ae:3b:df:ca:cc:c9:35:23:6a:ed:
         5c:dd:ae:5e:8d:14:f4:1d:a2:77:c3:53:6f:c1:95:de:64:60:
         5f:b9:c7:48:94:b4:b0:e2:80:1f:b8:b9:1a:92:d1:6a:bc:db:
         e4:2d:4c:e8:90:80:cc:05:28:fe:da:01:54:19:34:4b:2c:28:
         bf:70:24:18:81:87:91:c9:6f:99:49:a3:7b:a0:03:bb:ba:89:
         38:87:81:7f:1d:69:22:f1:c0:5f:be:fd:5d:3e:ee:7c:4f:28:
         1f:e3:e9:e1:28:de:83:fc:fb:3f:74:00:46:2e:03:33:a7:b4:
         e8:6b:fe:cb:c6:0d:1a:a4:80:e1:b5:23:ef:38:eb:65:95:81:
         90:59:ff:fa:69:ad:ec:ce:19:29:32:19:58:04:ad:9f:31:fe:
         5a:6b:c0:87:aa:84:73:79:e2:09:a8:6d:7b:32:40:80:ce:22:
         f4:cf:36:eb:0b:76:cb:ad:1c:a8:09:16:6b:bd:1d:0c:3e:ee:
         be:5f:e3:96:b6:f2:8e:ea:ed:7e:17:33:f0:8f:2f:78:50:51:
         05:88:22:ee:ca:cd:cd:62:40:68:ed:af:92:63:ec:bd:d2:65:
         7b:c5:08:2e:b8:92:b4:09:ab:ce:25:82:77:19:19:26:5e:31:
         53:85:80:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:32 2024 by rpki-client on console-ams.rpki-client.org