Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/34352e3137322e36302e302f32322d3234203d3e20323638373531.roa
File:                     34352e3137322e36302e302f32322d3234203d3e20323638373531.roa (raw, json)
Hash identifier:          YiPCXC3tbEW0cPys3ReRcqh5tcxJM5lBkZBUpmBcGHo=
Subject key identifier:   6D:E0:6B:77:18:E3:2A:41:44:44:E9:44:7F:2B:36:A6:B4:13:3A:32
Certificate issuer:       /CN=CD38A7C7D796C57003E777BDB835D0DB8AC490C6
Certificate serial:       18231D5F570A88E040AF923114F88E63A3CAAE75
Authority key identifier: CD:38:A7:C7:D7:96:C5:70:03:E7:77:BD:B8:35:D0:DB:8A:C4:90:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/34352e3137322e36302e302f32322d3234203d3e20323638373531.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     268751
IP address blocks:        45.172.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.crl
                          rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:23:1d:5f:57:0a:88:e0:40:af:92:31:14:f8:8e:63:a3:ca:ae:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD38A7C7D796C57003E777BDB835D0DB8AC490C6
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:09:4a:9a:bc:2c:0d:a4:32:51:1e:0a:39:95:
                    d4:2f:dd:a3:b9:0e:01:29:5b:14:ce:26:29:a5:94:
                    a7:73:c2:8c:98:34:12:52:6c:35:74:11:3a:56:a8:
                    80:7b:6a:77:61:7d:2e:cc:fd:0a:65:0e:a0:1d:a3:
                    96:45:3e:bf:ec:ed:8e:3c:c6:24:25:df:72:dc:a4:
                    8a:8a:93:7b:bd:09:46:6a:87:80:2b:6a:19:4f:83:
                    4b:c3:50:a6:8a:ca:15:20:76:cb:d4:35:df:f8:33:
                    e3:11:42:53:d0:9b:19:1d:13:ea:bc:ca:9c:d8:bc:
                    b1:48:bd:50:30:c8:21:1d:6c:2c:0b:5a:d4:c2:c7:
                    b6:47:b3:ad:ff:82:b8:17:d7:d3:c3:7c:78:d9:b9:
                    cc:a0:07:3a:8a:ea:e8:62:82:57:fa:1e:0a:18:89:
                    03:7b:46:a1:a1:74:2e:93:87:f5:9b:2d:75:4b:0c:
                    c3:63:45:e5:f2:fd:93:37:64:ad:8c:b5:56:cf:50:
                    6f:96:32:be:8f:77:75:12:f5:9b:06:22:11:a4:54:
                    7b:79:e9:e3:d8:5a:30:d1:77:94:23:8b:24:61:c7:
                    66:bf:5b:30:eb:4b:43:99:cb:54:a1:e4:74:a8:be:
                    8c:37:91:33:93:fe:ae:9b:09:6d:f5:d8:59:b8:25:
                    7b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E0:6B:77:18:E3:2A:41:44:44:E9:44:7F:2B:36:A6:B4:13:3A:32
            X509v3 Authority Key Identifier:
                keyid:CD:38:A7:C7:D7:96:C5:70:03:E7:77:BD:B8:35:D0:DB:8A:C4:90:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD38A7C7D796C57003E777BDB835D0DB8AC490C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/U4jZrTWCgBzxMP6VbnnpSA8nhh1iuW6H6i7vyUtEKxv/1/34352e3137322e36302e302f32322d3234203d3e20323638373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:cf:ff:0d:94:4c:48:6f:3f:14:0c:41:cf:91:81:82:91:47:
         5d:b1:fb:66:e5:4f:63:25:fc:72:0b:a1:ee:e1:f4:a9:81:14:
         ad:41:44:ac:a8:bf:8f:a3:c3:b8:16:df:03:38:e1:6a:12:30:
         55:d4:45:25:fd:8f:bb:90:49:6c:17:ca:07:d9:84:da:df:17:
         5e:57:96:71:06:cc:04:bd:3b:35:37:32:a5:7d:ac:14:8e:7b:
         4e:67:00:14:fa:7e:bd:51:86:08:f5:3c:ff:b6:a0:85:c5:bd:
         96:4a:18:18:ff:9d:64:51:e7:64:3f:84:3e:b9:7d:e3:a8:ea:
         94:ee:af:e4:71:45:a7:12:1d:0b:75:f3:0e:d0:db:0a:86:bf:
         6a:b2:d2:3f:26:96:ed:49:9f:d6:b5:cf:3a:79:f4:fb:5d:da:
         bf:86:6f:ad:4e:0f:d3:25:86:d9:fe:e0:78:92:67:da:49:20:
         40:1b:62:3f:2c:1c:28:a7:49:f4:24:2b:3b:72:df:ed:94:be:
         e6:1d:64:1e:ea:e6:0c:00:34:65:fa:c3:0c:46:ac:70:dc:9d:
         6e:eb:5b:0c:a2:8c:ed:a8:a3:56:83:e1:af:db:34:21:41:c5:
         84:f0:a6:e3:7a:f2:5a:b4:33:35:06:4c:78:39:24:5b:44:ac:
         e2:2a:e4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:26 2024 by rpki-client on console-ams.rpki-client.org