Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/34352e3232372e3230382e302f32322d3332203d3e20323637303239.roa
File:                     34352e3232372e3230382e302f32322d3332203d3e20323637303239.roa (raw, json)
Hash identifier:          xOe9LgJr24aUGqYEaDN8W1GYqqO6nifCtTYtRcKF+VI=
Subject key identifier:   CC:A9:DB:96:67:6B:AC:B5:83:E7:F3:83:36:76:DC:0E:C5:30:B9:E9
Certificate issuer:       /CN=D83F5B28EED481E4CC7896586669CBA72D35CF20
Certificate serial:       1F22926ED72E60F469BAEBC51420A3A812C4180A
Authority key identifier: D8:3F:5B:28:EE:D4:81:E4:CC:78:96:58:66:69:CB:A7:2D:35:CF:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83F5B28EED481E4CC7896586669CBA72D35CF20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/34352e3232372e3230382e302f32322d3332203d3e20323637303239.roa
Signing time:             Wed 31 Jul 2024 17:17:33 +0000
ROA not before:           Wed 31 Jul 2024 17:12:33 +0000
ROA not after:            Wed 30 Jul 2025 17:17:33 +0000
asID:                     267029
IP address blocks:        45.227.208.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/D83F5B28EED481E4CC7896586669CBA72D35CF20.crl
                          rsync://rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/D83F5B28EED481E4CC7896586669CBA72D35CF20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83F5B28EED481E4CC7896586669CBA72D35CF20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:22:92:6e:d7:2e:60:f4:69:ba:eb:c5:14:20:a3:a8:12:c4:18:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83F5B28EED481E4CC7896586669CBA72D35CF20
        Validity
            Not Before: Jul 31 17:12:33 2024 GMT
            Not After : Jul 30 17:17:33 2025 GMT
        Subject: CN=CCA9DB96676BACB583E7F3833676DC0EC530B9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:95:24:2c:12:74:f5:06:b4:e7:26:d5:e2:
                    bf:c0:d7:a9:65:5f:83:2c:07:5a:ff:14:75:90:a3:
                    2c:aa:02:a9:c9:6f:ae:96:57:51:e4:59:f1:13:a8:
                    da:cf:f2:d5:22:38:e0:a2:05:5d:d0:88:01:73:c7:
                    16:b4:b7:bd:5d:da:21:a8:e5:d2:fc:c3:44:0c:2a:
                    32:41:4f:74:c9:8f:21:16:93:60:ae:c0:b3:76:53:
                    ca:a9:33:57:4c:f6:8b:89:39:af:9f:85:4d:11:63:
                    3e:cc:b3:64:ee:63:5e:35:e6:1e:55:a4:b7:6f:3e:
                    10:d6:88:ac:a8:1d:56:77:f6:da:1d:d6:62:36:36:
                    d7:e7:a9:93:12:32:1e:57:9d:ab:58:6f:65:b1:5e:
                    c7:d5:4b:de:ee:1c:47:5b:37:24:75:79:4b:3d:64:
                    0e:ea:68:75:aa:ae:67:53:74:c1:3a:b3:ff:da:42:
                    6d:4d:7f:c8:99:9c:65:0f:bf:4a:66:57:b4:25:8b:
                    31:c6:a8:8d:05:48:6a:6d:ee:72:ff:8d:48:55:f0:
                    6d:b3:28:38:72:84:0a:06:19:82:6e:a2:ee:a7:e8:
                    f7:7a:8e:11:34:c7:5e:7a:ae:2f:32:1a:2d:34:5c:
                    57:e2:07:89:81:78:6e:29:f4:af:61:20:e7:34:36:
                    76:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A9:DB:96:67:6B:AC:B5:83:E7:F3:83:36:76:DC:0E:C5:30:B9:E9
            X509v3 Authority Key Identifier:
                keyid:D8:3F:5B:28:EE:D4:81:E4:CC:78:96:58:66:69:CB:A7:2D:35:CF:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/D83F5B28EED481E4CC7896586669CBA72D35CF20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83F5B28EED481E4CC7896586669CBA72D35CF20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/34352e3232372e3230382e302f32322d3332203d3e20323637303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:b8:7e:14:10:11:47:46:15:bc:42:5d:81:36:d0:63:95:c7:
         80:6d:32:4c:20:94:8c:24:b5:13:16:ab:73:51:e5:02:92:5e:
         9e:76:b4:13:78:07:0f:c8:4b:bf:c9:bd:1e:7f:5f:5c:86:f2:
         7d:1f:07:e1:50:eb:f2:4b:72:af:ed:fe:9b:ec:55:d8:41:2d:
         59:c0:f1:e4:cf:41:cb:4d:8e:90:6f:28:5d:23:5f:31:e0:ba:
         22:a7:26:13:15:db:66:07:58:45:46:cd:61:f6:e0:69:f1:21:
         de:87:de:b0:dc:46:9d:c7:80:b1:19:ba:7b:12:66:50:04:7b:
         cb:78:ef:32:0a:46:6b:de:aa:98:41:c2:ea:a6:d5:cc:26:60:
         9a:7d:84:e2:fa:e1:04:42:69:f3:ef:4d:3f:79:28:e1:3b:bd:
         14:a4:b4:59:e0:c5:53:ef:af:d1:b6:1c:51:91:d2:96:fe:74:
         68:3b:44:1c:3e:05:dc:73:c8:ca:10:36:09:eb:05:3b:8b:25:
         f5:8d:27:ae:bb:a8:64:7c:21:35:98:59:30:06:7e:8f:a8:53:
         f1:05:03:e5:3a:7d:a7:83:e5:18:dc:cc:55:b4:0e:58:3e:4d:
         cf:9f:86:1c:d2:1e:90:d1:95:92:87:c2:8a:76:63:a2:60:c1:
         ea:4d:8b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:39 2024 by rpki-client on console-ams.rpki-client.org