Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/34352e352e38382e302f32322d3232203d3e20323636303834.roa
File:                     34352e352e38382e302f32322d3232203d3e20323636303834.roa (raw, json)
Hash identifier:          mgf9wu2dnmul2GdbRFysicPHSmoc77ycPcN7HCWICv4=
Subject key identifier:   F3:2C:83:B5:3A:E2:22:75:54:91:06:92:D5:3B:9E:F3:FC:B2:18:4D
Certificate issuer:       /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
Certificate serial:       6E943F37187F05D3E21F8441E4C1E930AE3C839E
Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/34352e352e38382e302f32322d3232203d3e20323636303834.roa
Signing time:             Thu 04 Apr 2024 10:05:09 +0000
ROA not before:           Thu 04 Apr 2024 10:00:09 +0000
ROA not after:            Thu 03 Apr 2025 10:05:09 +0000
asID:                     266084
IP address blocks:        45.5.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl
                          rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:94:3f:37:18:7f:05:d3:e2:1f:84:41:e4:c1:e9:30:ae:3c:83:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
        Validity
            Not Before: Apr  4 10:00:09 2024 GMT
            Not After : Apr  3 10:05:09 2025 GMT
        Subject: CN=F32C83B53AE2227554910692D53B9EF3FCB2184D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:9e:24:85:02:0f:97:c0:fc:cc:12:16:8f:
                    d2:c1:7c:a8:d3:4d:31:73:62:d0:aa:e4:76:1b:fb:
                    3e:86:c9:99:77:2e:bd:b4:3d:0d:66:39:3e:42:d9:
                    ef:4b:33:c8:03:ac:f0:3d:e0:d4:d7:dd:d5:80:2c:
                    bf:89:f5:15:fb:5e:c8:d2:0d:be:ac:95:c1:70:a4:
                    b9:45:30:35:1f:27:91:1d:64:bb:8d:86:40:d3:a8:
                    21:44:16:e9:4e:07:f7:7c:bd:f9:f9:fb:53:69:28:
                    f5:db:11:48:f1:6a:cb:5c:c0:3c:f3:44:c5:9b:87:
                    e9:41:d9:74:ef:5d:b4:03:6d:c1:1e:e4:cb:39:c7:
                    6a:61:1c:16:04:bc:f3:bb:24:2e:75:82:17:26:ad:
                    5a:91:0f:c9:1d:a1:06:ae:82:b3:72:4b:3a:f5:91:
                    fd:32:5b:52:54:42:ec:bb:c0:b4:5e:65:a9:54:5d:
                    23:05:ce:8f:41:31:7b:2b:65:61:a9:04:6d:03:e0:
                    30:ec:61:33:7f:ec:c5:70:f1:35:88:3b:88:6a:84:
                    f7:9b:52:26:88:63:30:48:1c:24:5c:1d:b1:33:ae:
                    f6:5b:b1:1e:e9:45:fd:29:37:42:de:d8:61:9b:68:
                    9d:2a:46:75:29:79:94:4a:67:bb:a1:07:b6:00:a1:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2C:83:B5:3A:E2:22:75:54:91:06:92:D5:3B:9E:F3:FC:B2:18:4D
            X509v3 Authority Key Identifier:
                keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/34352e352e38382e302f32322d3232203d3e20323636303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:1f:94:46:50:a6:ec:92:78:87:f1:10:2d:93:aa:7a:f7:ee:
         15:0a:7e:77:31:29:c4:e5:ba:d1:85:1c:c5:99:a8:4a:01:18:
         d6:3e:21:8b:ff:ef:bf:32:c6:fb:b5:7e:18:51:ad:5e:5f:c3:
         84:2d:0e:e0:f3:ca:bf:74:4a:f9:12:a0:69:ed:e8:15:c7:63:
         46:d0:96:d2:da:20:32:c9:99:e0:88:c3:35:5a:55:83:7d:fc:
         14:16:49:41:48:33:06:19:9c:66:f6:72:de:cd:2a:1d:93:a9:
         ce:c0:bc:75:4d:c7:21:18:74:8b:43:86:33:cd:e9:ca:13:da:
         c4:18:3d:99:5a:3b:61:af:d5:08:c3:42:09:79:5a:ca:fd:7c:
         6c:bb:40:d0:c4:9f:be:0b:27:22:81:e7:11:db:c2:a2:4c:55:
         b6:8c:bf:d4:b4:40:41:19:0e:72:7d:a7:b5:31:c8:aa:ab:c8:
         a2:92:49:b3:76:db:cb:60:83:61:df:d8:1b:a6:5d:38:52:c9:
         0e:cb:88:49:09:62:0d:6c:c2:99:5e:e0:a7:98:1d:69:1d:3e:
         ed:b3:86:86:2d:8c:da:07:46:2c:14:c3:a7:34:4e:f4:8c:61:
         ea:cd:94:b6:a0:dd:b4:f4:c4:90:10:0f:28:c7:9e:48:d4:57:
         59:a6:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:48 2024 by rpki-client on console-ams.rpki-client.org