Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130322e302f32332d3233203d3e20323638323639.roa
File:                     34352e3233372e3130322e302f32332d3233203d3e20323638323639.roa (raw, json)
Hash identifier:          v2Fadi3ylje6IXsGRqcJnJ2k9utfj+m6qmGp5oJufaQ=
Subject key identifier:   67:B5:5F:49:0C:68:D0:68:15:22:74:7B:01:7B:1B:92:4C:68:A3:4F
Certificate issuer:       /CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
Certificate serial:       5D33EABBE2C29536F5E09A27A062D371FC6CA576
Authority key identifier: B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130322e302f32332d3233203d3e20323638323639.roa
Signing time:             Thu 04 Apr 2024 19:08:48 +0000
ROA not before:           Thu 04 Apr 2024 19:03:48 +0000
ROA not after:            Thu 03 Apr 2025 19:08:48 +0000
asID:                     268269
IP address blocks:        45.237.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.crl
                          rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:33:ea:bb:e2:c2:95:36:f5:e0:9a:27:a0:62:d3:71:fc:6c:a5:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
        Validity
            Not Before: Apr  4 19:03:48 2024 GMT
            Not After : Apr  3 19:08:48 2025 GMT
        Subject: CN=67B55F490C68D0681522747B017B1B924C68A34F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:db:01:f5:59:0f:99:9f:b3:29:88:fa:79:5e:
                    29:49:da:ec:de:c7:24:39:9d:78:94:4d:0d:7a:b9:
                    bd:ae:29:e6:80:7d:79:18:33:63:0f:89:94:a4:f8:
                    5e:77:2c:c3:be:a2:90:e0:b8:15:09:f0:bb:1c:dd:
                    7d:17:b0:30:ab:31:6a:9c:d1:fe:73:02:c4:02:ca:
                    71:9b:1b:2b:10:f0:e8:08:22:f0:7d:4c:3c:b8:8c:
                    28:7e:5e:f5:69:fb:a4:15:ca:92:c3:3a:15:38:69:
                    cc:b1:be:54:5b:79:8b:51:6d:82:5c:c7:b3:84:7b:
                    1b:6a:8b:08:cb:fe:87:2c:88:c1:04:5d:ef:ac:91:
                    1d:89:21:80:13:bd:54:5e:28:83:82:5a:28:75:99:
                    e3:df:0b:cc:79:18:18:f8:ea:b0:f1:bd:0c:89:cf:
                    78:26:d0:24:8c:23:20:6c:58:bc:3c:ca:68:50:35:
                    cf:9c:ba:b8:83:83:9b:1e:bd:17:1e:44:2b:35:2b:
                    ee:b2:8f:d5:df:16:72:5b:4e:0d:38:35:90:2d:85:
                    1a:55:23:d4:97:87:31:e9:88:d7:c3:44:d3:52:38:
                    92:45:d0:91:42:f7:d1:bc:da:32:d0:20:b1:7b:7f:
                    ae:4b:9e:93:69:96:bd:5b:81:f9:1e:14:87:2e:a7:
                    91:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B5:5F:49:0C:68:D0:68:15:22:74:7B:01:7B:1B:92:4C:68:A3:4F
            X509v3 Authority Key Identifier:
                keyid:B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130322e302f32332d3233203d3e20323638323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:05:a9:d2:85:67:56:52:18:4c:a4:d5:0a:c7:cf:cb:e4:cf:
         d9:7e:4e:17:94:be:23:d0:68:4e:38:ba:9d:95:0d:87:80:cb:
         1d:ba:70:20:a3:8c:06:cf:99:05:99:02:fa:41:ba:0e:ff:3a:
         67:5b:cd:6b:42:4b:4b:5d:bc:f3:4c:03:c2:09:a1:a3:c7:21:
         3f:14:7c:4a:08:c3:6a:3d:d4:c3:2c:c7:15:0a:86:ba:a5:17:
         44:61:0a:20:f9:0b:27:35:f7:72:89:2c:19:0b:63:d6:47:bd:
         b8:ec:d6:66:a4:d6:b2:22:26:47:c9:0a:1f:cc:0c:0c:48:cb:
         2f:93:25:83:0a:c1:69:22:f3:b7:a1:09:7d:1b:57:51:30:7d:
         64:51:84:cf:fc:94:38:80:3e:30:48:3f:ab:2d:69:6f:3e:0e:
         82:f1:9b:86:69:bc:d7:4b:d5:5d:3e:f8:41:5e:53:40:90:b0:
         b7:1c:66:f9:a8:4e:b6:b1:85:40:30:71:1d:16:9f:d5:9b:71:
         15:a7:18:78:4b:22:e4:2a:e6:54:7c:23:a8:bc:6b:db:41:dd:
         57:0d:0a:fa:26:63:26:43:c3:90:0f:4d:6f:c6:98:8e:fd:bc:
         ba:02:16:8f:91:af:cd:5c:a5:b4:78:e6:50:84:37:c2:82:2e:
         0c:b3:45:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:55 2024 by rpki-client on console-fra.rpki-client.org