Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/34352e3233382e38342e302f32322d3234203d3e20323638333239.roa
File:                     34352e3233382e38342e302f32322d3234203d3e20323638333239.roa (raw, json)
Hash identifier:          r1TtlvJFvz9LTJb+rhxENMV1qdqd9jAISAcpx5/xxUE=
Subject key identifier:   3D:FB:22:3D:7A:DF:90:DF:A2:95:E9:70:19:C7:07:E5:9F:3C:00:D2
Certificate issuer:       /CN=854487FA0B6DA6FA467F057B0B2636BF097A30C5
Certificate serial:       4A07E6E3CA1C969A5E601A8D9E28105653361C42
Authority key identifier: 85:44:87:FA:0B:6D:A6:FA:46:7F:05:7B:0B:26:36:BF:09:7A:30:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854487FA0B6DA6FA467F057B0B2636BF097A30C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/34352e3233382e38342e302f32322d3234203d3e20323638333239.roa
Signing time:             Thu 04 Apr 2024 20:00:55 +0000
ROA not before:           Thu 04 Apr 2024 19:55:55 +0000
ROA not after:            Thu 03 Apr 2025 20:00:55 +0000
asID:                     268329
IP address blocks:        45.238.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/854487FA0B6DA6FA467F057B0B2636BF097A30C5.crl
                          rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/854487FA0B6DA6FA467F057B0B2636BF097A30C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854487FA0B6DA6FA467F057B0B2636BF097A30C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 20:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:07:e6:e3:ca:1c:96:9a:5e:60:1a:8d:9e:28:10:56:53:36:1c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854487FA0B6DA6FA467F057B0B2636BF097A30C5
        Validity
            Not Before: Apr  4 19:55:55 2024 GMT
            Not After : Apr  3 20:00:55 2025 GMT
        Subject: CN=3DFB223D7ADF90DFA295E97019C707E59F3C00D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:60:73:9f:c1:24:51:8c:f8:95:8b:2f:29:0d:
                    31:58:b8:59:7d:78:cd:0a:09:42:83:68:05:9e:31:
                    46:7a:c4:03:00:4d:64:9f:40:3e:a8:c7:a8:e0:ab:
                    fe:6e:af:bc:42:22:5c:dd:77:27:de:5d:af:58:0a:
                    3c:f0:44:0d:a2:aa:1a:82:c7:03:e5:8c:e6:66:85:
                    e0:24:b7:81:82:e4:a3:35:59:98:96:87:95:13:92:
                    8c:69:33:80:03:3f:e9:1d:11:3f:5a:bd:1e:b7:1b:
                    95:b3:1b:aa:01:b9:54:06:4a:e8:17:e1:5f:fa:c3:
                    76:33:ed:08:9e:d2:6f:80:62:af:d6:25:12:5c:ef:
                    1f:6b:c4:00:33:82:ac:e5:23:1d:97:7d:c3:d6:b4:
                    14:d7:b3:0c:59:bc:aa:0d:65:94:1b:f7:2a:37:10:
                    16:7f:ee:95:61:f5:b7:ef:25:ab:9f:9a:95:05:1b:
                    2e:78:1f:a0:f5:f2:2e:d6:e5:7a:40:2e:21:4b:1a:
                    10:d2:08:36:80:88:bd:b9:c9:da:be:2a:b7:84:ac:
                    64:b6:79:ba:fd:b6:b6:90:1f:e7:4a:af:6f:56:26:
                    14:93:eb:7a:ea:94:07:96:f7:c1:ef:ba:fc:ed:23:
                    7e:c5:9d:59:24:8e:f4:23:b9:2c:d9:9f:f3:98:f3:
                    20:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FB:22:3D:7A:DF:90:DF:A2:95:E9:70:19:C7:07:E5:9F:3C:00:D2
            X509v3 Authority Key Identifier:
                keyid:85:44:87:FA:0B:6D:A6:FA:46:7F:05:7B:0B:26:36:BF:09:7A:30:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/854487FA0B6DA6FA467F057B0B2636BF097A30C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854487FA0B6DA6FA467F057B0B2636BF097A30C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/34352e3233382e38342e302f32322d3234203d3e20323638333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:da:15:0a:13:31:66:65:b6:83:99:48:08:cb:b8:76:1b:63:
         52:d4:4a:86:cc:de:17:ea:86:3a:59:83:20:b3:46:42:47:1a:
         1a:8e:19:7b:24:47:fe:04:25:2d:52:f9:7f:7d:6b:73:52:98:
         36:20:f5:e9:1c:58:ff:6b:2b:11:01:c1:46:d2:d7:b2:c1:3b:
         bd:a8:ce:f9:32:c6:76:38:87:9c:c6:82:f2:f1:93:a9:56:6a:
         87:3a:ab:14:d4:a3:c5:41:dc:e7:d6:68:d6:30:98:07:02:30:
         67:f0:63:50:5e:a7:17:57:b9:05:9f:d7:23:e2:a3:36:f7:57:
         f6:f5:3d:1d:6f:67:24:43:7b:f9:2d:fe:f1:08:00:15:e4:47:
         e8:36:f4:4c:b0:bf:0a:94:7a:39:0d:9c:20:17:00:e0:95:aa:
         12:58:3f:d1:32:17:25:d9:2c:a6:6b:c4:5d:72:52:c5:3b:c5:
         f3:63:5f:2a:87:c6:9f:27:09:44:d9:12:c9:01:b2:64:5a:be:
         10:ad:9c:07:3e:f5:7c:c4:f9:12:f5:7a:e1:85:ac:d0:9d:51:
         af:e2:7d:82:6b:e8:dd:e6:4c:78:ca:b7:61:b2:fb:68:35:da:
         8c:90:e0:e6:c1:bc:71:bb:a5:c2:50:d0:e6:0f:44:32:1f:39:
         f1:99:a6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 02:26:13 2024 by rpki-client on console-ams.rpki-client.org