Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131342e302f32332d3233203d3e20323639333733.roa
File:                     34352e3138352e3131342e302f32332d3233203d3e20323639333733.roa (raw, json)
Hash identifier:          8n3rNHB39Ogd00GCBX+lCSJl72211MPPdHVXdQURuaM=
Subject key identifier:   A9:76:C8:69:25:58:5A:3A:97:0E:FA:AC:C2:60:8F:9D:6C:EE:C4:7F
Certificate issuer:       /CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
Certificate serial:       7E2F4D3850558BA38D1C6A7D64FF726D2304EB68
Authority key identifier: 2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131342e302f32332d3233203d3e20323639333733.roa
Signing time:             Thu 04 Apr 2024 03:00:15 +0000
ROA not before:           Thu 04 Apr 2024 02:55:15 +0000
ROA not after:            Thu 03 Apr 2025 03:00:15 +0000
asID:                     269373
IP address blocks:        45.185.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl
                          rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 15:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2f:4d:38:50:55:8b:a3:8d:1c:6a:7d:64:ff:72:6d:23:04:eb:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
        Validity
            Not Before: Apr  4 02:55:15 2024 GMT
            Not After : Apr  3 03:00:15 2025 GMT
        Subject: CN=A976C86925585A3A970EFAACC2608F9D6CEEC47F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0b:23:95:9b:dd:af:f1:54:c3:23:1a:9e:df:
                    b2:c4:51:9e:b0:29:c7:90:95:8f:c3:df:43:09:da:
                    32:50:36:36:05:77:7b:60:08:8a:07:b2:a9:26:ed:
                    72:31:b4:c5:c8:ce:e9:81:72:e6:84:dd:2a:9c:ed:
                    3e:d7:27:a5:d4:00:78:8e:b3:c9:07:17:6b:e4:39:
                    af:6e:7d:10:e5:08:40:a2:de:e2:29:31:c8:de:ba:
                    fc:3c:e5:55:bb:39:05:79:c3:c1:4c:fa:3c:87:96:
                    8b:99:62:d0:cf:a5:13:5d:34:e9:03:32:90:94:57:
                    ab:66:7a:c4:8d:b0:0a:bd:b4:14:b3:dc:8d:64:27:
                    92:01:ee:85:2a:6d:62:bd:93:ae:c0:42:6d:c3:3d:
                    cd:91:68:8b:b4:3e:aa:18:42:3e:72:0f:91:48:eb:
                    ec:94:69:21:57:5d:2a:53:87:4d:17:98:cb:83:2b:
                    3b:df:f7:a5:69:cc:8a:d3:fc:2d:2b:a9:df:5a:a9:
                    6d:f9:7f:73:8c:5e:f9:cb:5d:3f:27:3a:d3:24:db:
                    32:c8:c5:8f:b8:9a:d6:69:2c:be:d3:3e:ea:5a:e0:
                    96:16:ca:70:1a:43:17:b0:63:98:65:43:8b:9f:e8:
                    71:59:66:46:da:4a:2c:64:5c:2e:4f:04:8c:c7:17:
                    2e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:76:C8:69:25:58:5A:3A:97:0E:FA:AC:C2:60:8F:9D:6C:EE:C4:7F
            X509v3 Authority Key Identifier:
                keyid:2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/34352e3138352e3131342e302f32332d3233203d3e20323639333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:4c:18:c0:98:dd:70:8b:70:84:cf:59:a6:b5:dc:c7:6c:e7:
         18:bc:00:72:5c:12:2e:fe:c8:a4:d9:15:7b:94:c4:be:87:f3:
         96:c3:90:f8:e4:97:7d:b0:a2:5c:94:e4:c2:0f:64:8a:2a:14:
         52:23:fd:81:18:a1:2f:c6:74:67:20:a0:a3:f8:1f:97:94:37:
         4e:98:1a:8b:70:a6:df:1f:fc:93:a6:10:19:e2:63:41:39:46:
         16:7d:cf:16:e3:88:1f:82:08:f1:88:61:84:8b:c1:ba:24:02:
         fc:43:0d:28:b0:cb:b6:35:c0:27:7a:5a:b0:dd:13:55:6a:23:
         5d:e9:21:6f:f3:c1:aa:1d:b2:26:a5:33:a7:8b:7e:45:94:5d:
         55:bc:84:bf:09:d9:06:8f:07:7e:85:f6:61:7e:7f:3f:2c:ff:
         29:82:e9:21:f7:52:81:2a:b7:b4:ac:4f:f3:03:80:9b:b6:95:
         b5:a7:9f:f4:6a:59:41:be:1c:e6:a7:41:19:ad:22:9e:f0:2b:
         ee:03:1d:46:3f:18:32:f9:34:01:c7:d7:93:0a:99:b7:80:ec:
         c6:94:f3:6f:00:16:0c:f4:ee:13:a1:09:c2:4e:85:48:d1:2e:
         7d:e0:2a:a2:92:58:4a:c5:9d:ef:eb:38:86:93:bb:09:8d:41:
         9e:f1:cf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:27 2024 by rpki-client on console-fra.rpki-client.org