Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/0/34352e3137372e3133322e302f32322d3332203d3e20323638393832.roa
File:                     34352e3137372e3133322e302f32322d3332203d3e20323638393832.roa (raw, json)
Hash identifier:          Zm0QOlsEgrskNeopi/iAvJAJb3TSaMMgB1RUY2albdE=
Subject key identifier:   D3:1A:88:8A:D0:DC:DB:AE:CE:C5:73:6E:85:67:E5:49:F7:BA:57:C8
Certificate issuer:       /CN=C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40
Certificate serial:       7E0DC98214BAA3853223366CC8C1159F7B57D006
Authority key identifier: C9:6F:7A:2B:61:8F:0D:88:FD:B9:AF:E0:AE:C0:41:21:37:4A:0C:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/0/34352e3137372e3133322e302f32322d3332203d3e20323638393832.roa
Signing time:             Thu 04 Apr 2024 12:35:36 +0000
ROA not before:           Thu 04 Apr 2024 12:30:36 +0000
ROA not after:            Thu 03 Apr 2025 12:35:36 +0000
asID:                     268982
IP address blocks:        45.177.132.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/0/C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40.crl
                          rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/0/C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0d:c9:82:14:ba:a3:85:32:23:36:6c:c8:c1:15:9f:7b:57:d0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40
        Validity
            Not Before: Apr  4 12:30:36 2024 GMT
            Not After : Apr  3 12:35:36 2025 GMT
        Subject: CN=D31A888AD0DCDBAECEC5736E8567E549F7BA57C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8a:2c:01:e8:70:b8:fe:df:ff:fe:fc:7e:12:
                    0b:fa:e9:39:5f:69:cc:b1:e3:ce:e2:fb:d6:45:06:
                    e7:eb:7e:d2:34:76:f7:9d:8e:8c:6d:24:ae:e2:c7:
                    c9:a2:06:55:0c:35:aa:83:b2:bf:bf:49:3f:da:c3:
                    31:d1:d4:99:5c:7a:aa:f6:e7:03:5d:6e:96:69:2a:
                    ea:4c:36:91:d6:39:3f:3f:40:92:a5:0f:d7:0c:1e:
                    bd:54:41:17:d8:82:b6:32:79:12:63:7f:2a:8f:22:
                    85:56:00:aa:c4:30:8d:84:05:71:11:4c:99:07:e4:
                    67:04:46:1c:db:0e:b6:e9:e1:56:5e:4a:43:fc:84:
                    22:3f:f5:81:0f:3d:54:ad:7c:0c:e5:78:d8:6b:a3:
                    97:3e:08:81:f2:ee:69:54:4e:7d:eb:99:4a:2f:c1:
                    16:37:b9:00:5e:8f:f5:9f:58:33:ff:6d:41:a3:60:
                    bc:63:03:bb:db:e9:10:fb:7c:d9:fa:5b:27:0f:ac:
                    78:b2:44:9f:58:9a:26:f4:ef:1b:b3:aa:9d:d1:fc:
                    b7:f4:88:c6:c0:77:0f:4d:05:da:49:f5:f1:ec:62:
                    02:1e:76:43:50:3a:f3:90:c2:f1:66:cf:4d:2f:de:
                    b7:05:e3:fa:00:9e:9f:f8:e4:6f:34:82:4c:ee:f1:
                    6f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1A:88:8A:D0:DC:DB:AE:CE:C5:73:6E:85:67:E5:49:F7:BA:57:C8
            X509v3 Authority Key Identifier:
                keyid:C9:6F:7A:2B:61:8F:0D:88:FD:B9:AF:E0:AE:C0:41:21:37:4A:0C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/0/C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C96F7A2B618F0D88FDB9AFE0AEC04121374A0C40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/0/34352e3137372e3133322e302f32322d3332203d3e20323638393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:60:c2:91:bb:c1:f1:eb:1a:98:f9:13:9b:13:c0:a0:91:88:
         4c:16:c6:d6:61:20:0c:32:b4:78:68:32:92:99:25:eb:6e:80:
         a4:0a:0a:5b:6c:21:dc:b4:47:c1:da:ba:29:36:38:2c:35:d8:
         e8:07:ba:16:ce:78:ae:05:f0:9e:6c:ca:d3:1a:f1:cf:5d:58:
         47:5f:b9:43:c0:8f:6d:fa:0c:3a:d3:89:8a:4c:d1:1a:88:81:
         ae:1b:04:9b:a2:10:a7:a2:d1:a6:b2:0f:d2:47:89:a0:50:27:
         ca:69:f0:c5:3d:fc:fb:65:bd:82:08:1c:ce:e8:f8:65:87:24:
         0c:8e:76:d4:36:39:a8:6a:e2:2b:55:16:38:11:2f:04:92:21:
         ba:0c:27:b7:07:6d:ac:f1:88:71:6e:b3:3d:1c:11:1b:47:80:
         97:52:d7:c7:1b:d2:bd:81:a4:55:b9:2f:dc:95:eb:a3:2d:8f:
         23:b7:cf:44:41:83:a4:c0:e3:82:38:38:d6:e2:64:e4:46:5e:
         61:fd:19:4a:d5:2e:5b:b8:65:80:b7:ed:1f:17:f7:60:d2:1e:
         e0:4f:19:cf:67:53:52:1f:47:29:ff:32:a1:65:74:9f:a1:65:
         be:6f:c1:4a:66:07:3c:fb:2f:90:68:d8:ef:d6:15:20:bd:bc:
         d3:50:0c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:33 2024 by rpki-client on console-fra.rpki-client.org