Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/pftEPEja9SRnSStKduoLCyptYQrf1GJDUqVR711dG4M/1/34352e3232372e35362e302f32322d3234203d3e20323637303136.roa
File:                     34352e3232372e35362e302f32322d3234203d3e20323637303136.roa (raw, json)
Hash identifier:          vpD2BJhTZmA8CL5BFQRIDuwXAZ200Kj1YRno+MXCbhE=
Subject key identifier:   F1:BB:3C:19:C2:E2:A2:67:D0:48:F8:C4:DD:13:E8:A7:D1:B6:FB:F9
Certificate issuer:       /CN=462DDD71CA49B52AB4576EB8AE36E9D695B64F92
Certificate serial:       29D26C0F4A031F86344D9FF8CBBC03828C15428F
Authority key identifier: 46:2D:DD:71:CA:49:B5:2A:B4:57:6E:B8:AE:36:E9:D6:95:B6:4F:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/462DDD71CA49B52AB4576EB8AE36E9D695B64F92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pftEPEja9SRnSStKduoLCyptYQrf1GJDUqVR711dG4M/1/34352e3232372e35362e302f32322d3234203d3e20323637303136.roa
Signing time:             Thu 04 Apr 2024 06:17:14 +0000
ROA not before:           Thu 04 Apr 2024 06:12:14 +0000
ROA not after:            Thu 03 Apr 2025 06:17:14 +0000
asID:                     267016
IP address blocks:        45.227.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/pftEPEja9SRnSStKduoLCyptYQrf1GJDUqVR711dG4M/1/462DDD71CA49B52AB4576EB8AE36E9D695B64F92.crl
                          rsync://rpki-repo.registro.br/repo/pftEPEja9SRnSStKduoLCyptYQrf1GJDUqVR711dG4M/1/462DDD71CA49B52AB4576EB8AE36E9D695B64F92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/462DDD71CA49B52AB4576EB8AE36E9D695B64F92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d2:6c:0f:4a:03:1f:86:34:4d:9f:f8:cb:bc:03:82:8c:15:42:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=462DDD71CA49B52AB4576EB8AE36E9D695B64F92
        Validity
            Not Before: Apr  4 06:12:14 2024 GMT
            Not After : Apr  3 06:17:14 2025 GMT
        Subject: CN=F1BB3C19C2E2A267D048F8C4DD13E8A7D1B6FBF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:4a:c0:26:c1:43:0c:1f:96:7d:4c:86:0d:
                    4f:40:dc:c2:35:9c:d9:a9:98:7c:81:26:4a:b9:81:
                    38:4d:6e:d3:4d:bf:cc:55:80:73:07:f9:ab:3b:a7:
                    fa:c4:40:0a:71:7e:4f:02:80:84:49:79:e1:b5:fe:
                    78:c5:f4:9d:d5:bb:b0:9a:e4:d6:cf:e3:04:5c:8d:
                    85:b9:fd:b9:27:17:86:6a:0c:f2:d2:a7:f7:67:b6:
                    5c:9d:dd:e7:83:5f:3d:14:62:03:03:8a:f5:b7:bf:
                    a1:06:0e:77:dd:c6:ad:ba:a6:1b:cb:ff:2a:85:06:
                    85:00:a0:3d:e3:15:01:fe:6b:21:34:fa:4c:2a:63:
                    bc:72:7a:11:76:d7:c3:1d:77:53:9a:44:30:4b:22:
                    11:dc:f3:61:44:26:13:96:81:15:c8:47:17:8f:ab:
                    ee:dc:ac:87:0e:7a:4d:80:d8:11:05:c8:80:fe:15:
                    7a:d8:c0:7b:78:77:db:cd:42:c9:a4:9e:90:5c:0a:
                    7a:af:30:fb:6b:22:0d:22:78:00:4b:db:98:76:c7:
                    09:77:e0:2f:c4:0c:b0:ef:d3:33:20:13:8b:fc:94:
                    a2:41:ae:3f:38:c2:5a:a4:bc:bc:1d:be:5b:d7:53:
                    dd:f8:68:50:12:26:2a:14:2e:a8:19:2d:2d:94:c9:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BB:3C:19:C2:E2:A2:67:D0:48:F8:C4:DD:13:E8:A7:D1:B6:FB:F9
            X509v3 Authority Key Identifier:
                keyid:46:2D:DD:71:CA:49:B5:2A:B4:57:6E:B8:AE:36:E9:D6:95:B6:4F:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pftEPEja9SRnSStKduoLCyptYQrf1GJDUqVR711dG4M/1/462DDD71CA49B52AB4576EB8AE36E9D695B64F92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/462DDD71CA49B52AB4576EB8AE36E9D695B64F92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pftEPEja9SRnSStKduoLCyptYQrf1GJDUqVR711dG4M/1/34352e3232372e35362e302f32322d3234203d3e20323637303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:69:52:85:33:80:30:88:f9:1d:94:e7:eb:77:19:0d:5b:f9:
         40:67:ec:3e:14:91:74:f5:7d:a2:b6:57:18:fe:b5:ad:11:3e:
         ec:13:85:ae:f1:f0:dc:c9:c6:95:94:18:9c:c3:c6:ab:56:5e:
         57:f8:02:e8:1a:21:fc:ec:24:89:49:fe:79:8e:3a:2a:9e:02:
         0e:b4:19:c2:92:3f:08:06:74:54:4b:3a:57:b9:55:76:61:76:
         e6:c4:ea:86:94:37:31:f8:84:ae:36:2c:c8:80:8a:d7:d7:08:
         d6:1b:60:d3:24:e3:66:cb:9c:c0:13:c1:c9:b7:4e:b5:f4:24:
         14:cf:69:3f:61:95:47:86:26:6f:36:35:0f:01:23:fa:96:cd:
         7e:30:9a:78:8c:cb:4a:e5:ac:b9:a1:57:ee:be:f4:6f:a8:26:
         af:82:1d:28:0a:7f:f1:f8:e5:95:29:ee:ac:51:fc:e6:87:c1:
         51:f5:cf:df:b8:99:2d:2a:96:96:ed:a9:ac:3f:0e:d4:f6:50:
         10:f3:54:87:ff:5a:86:31:b3:f9:05:ce:60:e9:d6:ff:99:c2:
         4a:6a:c1:5f:1d:02:30:b7:94:b3:9f:f0:45:1a:f3:40:37:b2:
         80:4a:4a:ce:2e:55:ae:65:7d:81:75:cf:be:42:3e:a4:2a:c4:
         0a:cf:9e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:14 2024 by rpki-client on console-fra.rpki-client.org