Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/34352e3233322e33362e302f32322d3234203d3e20323637323432.roa
File:                     34352e3233322e33362e302f32322d3234203d3e20323637323432.roa (raw, json)
Hash identifier:          patFU8igodC9zfUIEV9xqFwt2DWia3k2HoXW1HBosk4=
Subject key identifier:   AC:6E:47:86:46:8A:16:A9:1E:DB:F8:34:B6:76:51:E6:B9:0F:0F:9D
Certificate issuer:       /CN=7894119F99DAD39051E9516FAF4C2DAA5CD1BE70
Certificate serial:       0E44094737A79DF25DC9C6B4123DF635BA198D32
Authority key identifier: 78:94:11:9F:99:DA:D3:90:51:E9:51:6F:AF:4C:2D:AA:5C:D1:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/34352e3233322e33362e302f32322d3234203d3e20323637323432.roa
Signing time:             Thu 04 Apr 2024 19:23:06 +0000
ROA not before:           Thu 04 Apr 2024 19:18:06 +0000
ROA not after:            Thu 03 Apr 2025 19:23:06 +0000
asID:                     267242
IP address blocks:        45.232.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl
                          rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:44:09:47:37:a7:9d:f2:5d:c9:c6:b4:12:3d:f6:35:ba:19:8d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7894119F99DAD39051E9516FAF4C2DAA5CD1BE70
        Validity
            Not Before: Apr  4 19:18:06 2024 GMT
            Not After : Apr  3 19:23:06 2025 GMT
        Subject: CN=AC6E4786468A16A91EDBF834B67651E6B90F0F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e2:9b:cb:4d:c1:fe:f8:da:68:96:19:9a:45:
                    a5:49:59:27:79:f7:8e:75:5e:ce:6a:70:fd:7d:6a:
                    91:75:70:8d:c0:76:26:24:5f:81:dd:44:05:1a:97:
                    58:7f:6f:31:0f:28:7a:0d:29:79:6c:2f:4c:78:1d:
                    10:2e:7f:ad:0d:8e:98:55:90:0f:53:b2:14:2a:ce:
                    0a:91:47:17:5f:88:b6:95:3d:b6:a4:ed:fd:40:81:
                    1f:61:9d:14:2d:26:17:42:c1:38:ed:ab:82:9d:44:
                    68:12:7c:45:f3:95:36:58:c5:1a:d0:83:24:49:ba:
                    54:5a:67:c9:eb:35:6d:0c:69:5e:d8:61:0a:5f:55:
                    2e:95:ee:a8:5e:5f:7e:ce:10:f3:26:8e:e4:1c:75:
                    4e:fc:b1:1f:99:9f:74:01:ed:9c:a3:60:6d:e1:5a:
                    ed:92:e4:d5:95:67:c4:a8:8d:fa:2d:d3:95:db:98:
                    d6:19:37:75:3a:22:62:82:58:58:11:3b:5a:3c:9b:
                    2d:ed:09:3e:f2:46:56:15:9c:4e:b3:c3:48:89:14:
                    97:61:a8:8e:b2:ae:2c:67:58:b1:c3:ae:4d:cf:13:
                    61:ed:88:2c:99:b7:91:52:75:05:b3:06:10:22:38:
                    88:87:84:3d:0d:a3:1c:07:06:57:1b:32:d4:23:a0:
                    b9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6E:47:86:46:8A:16:A9:1E:DB:F8:34:B6:76:51:E6:B9:0F:0F:9D
            X509v3 Authority Key Identifier:
                keyid:78:94:11:9F:99:DA:D3:90:51:E9:51:6F:AF:4C:2D:AA:5C:D1:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/34352e3233322e33362e302f32322d3234203d3e20323637323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:3e:f5:ff:03:77:73:eb:9d:b9:d0:0d:9f:46:cd:96:fd:10:
         2d:4f:f4:8f:88:97:95:8c:40:c1:55:b5:1d:60:13:6f:8a:05:
         ad:d1:31:7e:19:c4:c5:65:c4:53:55:7f:5f:5a:a7:bf:dc:40:
         fa:95:4c:cb:9d:57:3b:bc:96:e9:0c:e4:88:c6:69:92:7d:31:
         fc:6e:93:32:49:65:83:45:80:20:13:8d:c7:70:23:f7:d9:4b:
         c0:3d:89:7b:29:a0:12:1f:28:1a:c0:9f:d4:3c:b1:9f:f5:67:
         c8:29:45:16:d4:40:dd:ec:44:7f:1d:64:18:58:b4:93:ed:10:
         3a:3f:78:c9:52:bb:fb:78:be:8e:b0:db:d0:40:00:1b:c4:e6:
         f8:1e:ba:06:9c:64:e5:51:93:69:39:9a:b4:9a:ac:34:e2:d5:
         f3:63:b2:04:99:3b:d7:d0:02:c8:8a:90:93:c9:59:10:ef:b1:
         c4:77:c6:4e:ad:a3:31:18:af:66:6c:14:03:40:2a:f6:af:1e:
         8d:b7:20:7d:1d:d9:51:cb:f2:ec:89:78:30:01:5b:54:0d:0f:
         5d:2e:9f:27:a9:8b:c9:79:2c:a2:8f:4a:c8:d3:cc:2e:05:9c:
         7a:75:61:cf:9d:26:01:f0:e9:46:dd:35:91:eb:6b:47:a2:ab:
         11:25:84:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:13 2024 by rpki-client on console-fra.rpki-client.org