Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/34352e3233352e31382e302f32342d3234203d3e203533303632.roa
File:                     34352e3233352e31382e302f32342d3234203d3e203533303632.roa (raw, json)
Hash identifier:          ARDlN2CbJAY9H4f/a9fz0Yqy1Jtrcpo2vj3PSbIO/Zg=
Subject key identifier:   AC:7D:8C:43:C3:43:65:5F:87:24:70:92:11:CB:3D:22:06:13:DC:DA
Certificate issuer:       /CN=4EED9818567EF67A561AEB24FB9C960FF884B0BB
Certificate serial:       6A55810FA74106A9694FF02A84183806B412774C
Authority key identifier: 4E:ED:98:18:56:7E:F6:7A:56:1A:EB:24:FB:9C:96:0F:F8:84:B0:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/34352e3233352e31382e302f32342d3234203d3e203533303632.roa
Signing time:             Wed 14 Aug 2024 01:06:12 +0000
ROA not before:           Wed 14 Aug 2024 01:01:12 +0000
ROA not after:            Wed 13 Aug 2025 01:06:12 +0000
asID:                     53062
IP address blocks:        45.235.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:55:81:0f:a7:41:06:a9:69:4f:f0:2a:84:18:38:06:b4:12:77:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EED9818567EF67A561AEB24FB9C960FF884B0BB
        Validity
            Not Before: Aug 14 01:01:12 2024 GMT
            Not After : Aug 13 01:06:12 2025 GMT
        Subject: CN=AC7D8C43C343655F8724709211CB3D220613DCDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:21:61:8b:fb:a5:90:52:27:77:a5:b0:c4:55:
                    ce:b3:c4:a6:db:1e:70:01:ac:26:7c:a8:48:df:8f:
                    c7:d5:8f:e3:1d:99:9c:60:d7:ec:2c:4e:b2:e1:3a:
                    b9:9c:bf:ba:62:43:de:e9:92:81:24:a1:33:1b:e7:
                    56:b5:99:b0:a5:bf:0e:6d:bc:10:64:4d:ab:14:42:
                    f1:ed:11:fe:4f:0a:32:91:c2:a7:ba:9b:13:8f:36:
                    c3:54:6c:ea:bb:b0:1a:d4:f1:3a:b4:d5:ec:2c:cf:
                    cb:d7:dc:58:3d:23:94:ef:91:51:2a:07:19:a8:a7:
                    94:43:3a:60:4c:38:85:c2:41:51:6d:67:85:39:65:
                    72:7d:56:8d:35:10:3e:72:61:33:73:1e:5d:09:49:
                    69:93:d6:4c:65:32:7a:06:3c:78:30:22:bf:80:98:
                    7b:a2:cf:1c:81:d1:f1:db:ab:bf:4b:3a:cd:6b:9d:
                    53:4d:e9:c6:4b:1a:39:19:6f:09:8a:4b:cb:da:ff:
                    e0:00:25:53:e8:82:b9:7f:45:0f:e0:7d:db:69:38:
                    01:a1:9f:c0:64:1d:f4:99:c5:fa:6b:95:5b:89:a1:
                    17:80:4d:3e:37:12:55:41:64:d0:8f:31:ff:08:04:
                    de:d4:ca:09:0e:8f:54:5f:96:42:de:ed:35:35:23:
                    f1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7D:8C:43:C3:43:65:5F:87:24:70:92:11:CB:3D:22:06:13:DC:DA
            X509v3 Authority Key Identifier:
                keyid:4E:ED:98:18:56:7E:F6:7A:56:1A:EB:24:FB:9C:96:0F:F8:84:B0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/34352e3233352e31382e302f32342d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:c8:5e:19:c9:e2:34:5b:33:3b:eb:36:be:de:0f:c7:ed:a5:
         a9:ae:41:08:97:c7:02:d1:84:8e:52:d2:32:14:72:0f:bc:c3:
         2f:6c:99:2e:da:2a:ba:af:d9:50:ad:d8:3f:07:18:4b:11:9e:
         b5:7f:4c:46:e6:05:7f:b8:2e:b5:f9:86:d6:65:dd:2a:16:eb:
         cd:71:9a:b4:a7:07:e8:76:9d:72:70:1d:4d:57:10:76:40:b0:
         23:cd:5d:30:1d:e7:91:6b:ff:2d:da:d9:9f:e0:03:f9:35:1d:
         6d:a9:33:18:fa:08:39:d0:3c:7d:60:47:34:bc:58:5e:46:39:
         3a:39:b8:ca:79:5c:b8:26:f7:94:ee:e1:98:47:8d:d0:97:4a:
         7f:96:51:98:e9:e9:5e:10:36:e8:f6:90:c5:cb:68:ee:b6:37:
         1f:9a:b5:55:94:23:c5:d8:58:dd:9c:f5:3b:63:df:2a:25:79:
         a7:68:b0:7d:41:04:3f:81:dc:49:f1:95:f0:37:2c:b4:38:be:
         ab:52:72:84:cf:82:df:c7:83:41:dd:f0:11:41:ec:f4:05:92:
         70:0f:e7:ca:1a:73:bd:15:f6:8f:b2:4c:0c:55:b5:15:86:68:
         b6:01:42:34:7d:cf:41:32:7c:f5:64:a3:05:d3:a2:07:39:22:
         96:bb:11:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:02 2024 by rpki-client on console-fra.rpki-client.org