Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/34352e3232352e3232382e302f32322d3234203d3e20323636393733.roa
File:                     34352e3232352e3232382e302f32322d3234203d3e20323636393733.roa (raw, json)
Hash identifier:          Ld1a64vej2Vee8UKxN7orAAUhkOdlT9QFtWUvf6T1hg=
Subject key identifier:   66:E6:DA:EF:F8:BD:CA:62:1F:DB:34:B8:87:B8:DA:0B:AB:E6:44:2D
Certificate issuer:       /CN=961C10291E95158CF12D8EAA6CC5D0B05DE85838
Certificate serial:       013FCD5C13696281B0C6D31BCBF85D7F8D8E1102
Authority key identifier: 96:1C:10:29:1E:95:15:8C:F1:2D:8E:AA:6C:C5:D0:B0:5D:E8:58:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/34352e3232352e3232382e302f32322d3234203d3e20323636393733.roa
Signing time:             Thu 04 Apr 2024 02:28:42 +0000
ROA not before:           Thu 04 Apr 2024 02:23:42 +0000
ROA not after:            Thu 03 Apr 2025 02:28:42 +0000
asID:                     266973
IP address blocks:        45.225.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.crl
                          rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3f:cd:5c:13:69:62:81:b0:c6:d3:1b:cb:f8:5d:7f:8d:8e:11:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961C10291E95158CF12D8EAA6CC5D0B05DE85838
        Validity
            Not Before: Apr  4 02:23:42 2024 GMT
            Not After : Apr  3 02:28:42 2025 GMT
        Subject: CN=66E6DAEFF8BDCA621FDB34B887B8DA0BABE6442D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a6:d9:45:4d:7a:81:ac:27:fc:0d:50:18:56:
                    f0:4f:e6:99:32:a6:a6:30:59:c8:0a:ea:ec:f8:94:
                    f6:31:ee:4f:fd:a0:24:35:e9:20:a1:09:e1:c9:b8:
                    17:6a:33:88:8f:78:05:9d:64:de:d8:07:6d:af:00:
                    73:89:61:e2:e2:7d:b5:68:56:62:0a:14:39:a1:86:
                    fc:87:9b:7b:5e:bc:cc:9c:28:83:d8:9e:2c:95:9e:
                    f3:69:90:28:d0:95:7e:ef:0e:41:59:ab:b9:ed:28:
                    95:74:2c:e2:4c:46:f6:4f:a1:af:90:0a:2c:b5:da:
                    d7:c1:a0:5b:58:66:77:19:2c:98:8d:f0:bb:27:f7:
                    16:1f:3d:af:be:cc:bc:1b:74:98:cc:df:35:98:f3:
                    8d:69:73:6d:6f:8d:cb:88:be:23:1c:da:02:67:55:
                    79:67:f0:5d:ec:bf:34:8d:20:71:88:8c:af:54:ec:
                    88:5b:13:99:9c:a2:ec:48:af:10:2b:d3:1c:2f:90:
                    c3:d6:e3:0f:59:3c:2d:d9:50:e4:8e:fa:62:5d:dd:
                    b8:bf:03:12:60:e5:8d:43:7c:af:a7:42:17:62:2d:
                    23:b8:b3:ae:0d:9c:86:cc:58:e8:e4:ea:0a:97:b3:
                    12:da:ad:29:4c:45:62:9d:2f:90:50:d7:af:d3:ea:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E6:DA:EF:F8:BD:CA:62:1F:DB:34:B8:87:B8:DA:0B:AB:E6:44:2D
            X509v3 Authority Key Identifier:
                keyid:96:1C:10:29:1E:95:15:8C:F1:2D:8E:AA:6C:C5:D0:B0:5D:E8:58:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/34352e3232352e3232382e302f32322d3234203d3e20323636393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:d1:58:d9:f6:d8:cf:b3:dd:a2:8f:e5:90:e3:d1:7a:bc:ac:
         40:50:1a:5f:b1:8e:28:c6:cb:05:5f:ed:b4:01:e8:66:28:d7:
         b8:2c:bc:fe:a2:f3:33:bd:50:79:b8:79:0b:7b:f8:92:65:6f:
         9f:d3:ce:59:81:50:10:99:3b:62:29:25:35:7d:29:4b:e7:f0:
         2f:74:ec:e9:9a:d3:78:cf:5d:b6:be:17:89:69:51:c5:9a:44:
         9d:53:91:78:42:25:1e:7e:d7:85:33:04:c4:8c:72:9e:d8:45:
         ae:8f:84:40:db:d0:ae:95:97:ed:e0:bd:e3:b1:80:04:13:bd:
         56:e8:0e:3a:62:e4:58:1f:e3:25:f3:ab:8c:98:f5:45:14:d8:
         70:e6:33:32:17:ac:be:06:a1:48:f6:ea:c6:45:fd:29:54:f1:
         0a:e2:5e:cf:e7:3c:77:d9:f3:c5:a5:f9:52:ac:03:34:44:6d:
         02:02:f3:bc:ff:8a:4a:46:6a:e6:21:86:a7:48:44:81:1f:d1:
         83:2d:0f:88:bb:cb:26:97:28:6d:f9:0c:ca:21:94:c8:5f:58:
         89:b3:b6:1e:49:d5:64:09:5b:e6:92:c3:5a:40:89:e7:8d:67:
         1a:e1:77:b5:8c:d3:4b:a2:0e:a9:26:05:28:4d:a3:35:4b:a8:
         69:66:20:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:15:26 2024 by rpki-client on console-fra.rpki-client.org