Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/34352e3138372e33322e302f32322d3234203d3e20323639353234.roa
File:                     34352e3138372e33322e302f32322d3234203d3e20323639353234.roa (raw, json)
Hash identifier:          gJIFIK9aFAHb/0LGxIj2bWYjndNDbHONuewCwpY5+iE=
Subject key identifier:   24:DB:20:70:D3:1E:35:68:0F:D6:77:66:7D:60:D1:04:D5:AC:24:A7
Certificate issuer:       /CN=18A4CF42CC304D1E5395D809FDD692A864102BAE
Certificate serial:       37BC7B981D9D7671B5C7501A92F64873D0963A6B
Authority key identifier: 18:A4:CF:42:CC:30:4D:1E:53:95:D8:09:FD:D6:92:A8:64:10:2B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18A4CF42CC304D1E5395D809FDD692A864102BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/34352e3138372e33322e302f32322d3234203d3e20323639353234.roa
Signing time:             Fri 04 Oct 2024 06:45:31 +0000
ROA not before:           Fri 04 Oct 2024 06:40:31 +0000
ROA not after:            Fri 03 Oct 2025 06:45:31 +0000
asID:                     269524
IP address blocks:        45.187.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/18A4CF42CC304D1E5395D809FDD692A864102BAE.crl
                          rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/18A4CF42CC304D1E5395D809FDD692A864102BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18A4CF42CC304D1E5395D809FDD692A864102BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 12:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:bc:7b:98:1d:9d:76:71:b5:c7:50:1a:92:f6:48:73:d0:96:3a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A4CF42CC304D1E5395D809FDD692A864102BAE
        Validity
            Not Before: Oct  4 06:40:31 2024 GMT
            Not After : Oct  3 06:45:31 2025 GMT
        Subject: CN=24DB2070D31E35680FD677667D60D104D5AC24A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:c7:a8:ab:d4:a3:fe:49:e6:d2:60:e4:0e:
                    2c:b2:a5:f3:42:f3:5a:85:08:9c:a3:de:b3:34:2e:
                    62:7a:34:3d:a6:95:2f:3e:f7:1e:fa:18:01:7f:1e:
                    76:12:f3:cb:e5:0d:3a:0f:cb:20:e6:eb:ba:88:42:
                    11:c3:96:05:c0:db:cd:97:71:46:b2:d8:86:70:14:
                    a3:56:59:b9:ef:4f:f4:bc:77:96:1b:7f:d0:28:30:
                    27:78:01:00:5c:00:a5:83:1d:16:c3:d3:89:6a:26:
                    19:4b:c1:5e:c1:92:d7:8b:23:c3:ee:ec:5e:8a:11:
                    15:c1:72:8f:1a:de:c6:63:3d:e6:43:94:8c:c2:78:
                    f2:18:be:62:f4:64:c6:00:c9:79:f8:21:c1:31:9d:
                    2c:98:85:52:68:28:63:63:a2:ab:e0:fd:51:4b:8c:
                    bc:91:32:85:6a:de:7f:ae:28:ca:d4:94:92:37:2f:
                    49:91:34:96:a1:fb:9d:1d:fe:68:fc:19:f4:12:c2:
                    ca:73:db:5e:7b:f3:ec:42:98:02:9f:5c:08:da:2e:
                    ab:4d:13:d3:ed:87:2b:53:00:97:51:6b:c1:94:8e:
                    bc:73:26:1d:68:dc:b0:21:7e:0a:bd:8d:dd:7a:96:
                    92:5f:15:ed:e9:0b:a9:b9:8d:9d:ab:ef:de:8d:7b:
                    66:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DB:20:70:D3:1E:35:68:0F:D6:77:66:7D:60:D1:04:D5:AC:24:A7
            X509v3 Authority Key Identifier:
                keyid:18:A4:CF:42:CC:30:4D:1E:53:95:D8:09:FD:D6:92:A8:64:10:2B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/18A4CF42CC304D1E5395D809FDD692A864102BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18A4CF42CC304D1E5395D809FDD692A864102BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/34352e3138372e33322e302f32322d3234203d3e20323639353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:23:a7:ed:56:fd:89:67:43:04:6a:74:a1:d2:be:5b:43:b2:
         34:16:18:bf:53:4a:41:f0:ec:02:39:af:54:11:e1:74:0f:63:
         d7:ca:39:6a:f7:9c:57:e3:10:8f:c0:76:66:df:b8:1f:15:58:
         fe:aa:22:e2:0d:5b:24:ca:86:0e:ee:e2:1f:69:f7:c9:41:b3:
         be:ad:5e:be:42:1e:ae:49:cc:be:01:67:8a:3a:b7:c7:cf:68:
         b3:12:cf:16:a0:0b:94:d9:f4:8b:3a:a1:dc:c5:2e:85:aa:ab:
         7d:2e:bb:0a:74:1e:1e:aa:c5:ee:15:ee:36:d3:63:d4:84:d7:
         e1:be:05:3b:b2:b4:75:d5:51:34:e9:98:b2:65:3d:4c:c1:bd:
         3b:35:28:7c:ba:58:a8:66:77:bf:38:01:59:83:84:b2:13:63:
         c0:c7:7a:e4:db:09:1b:30:7c:57:ba:cd:40:9b:f9:76:e1:a7:
         d5:25:c8:d5:e8:94:35:0e:64:b8:f8:53:68:4c:5c:9a:8f:c6:
         04:f0:7f:bb:a1:38:87:ee:ca:20:a2:7d:9a:d5:b9:3a:de:c4:
         4e:69:1e:8b:44:af:3d:c5:67:82:0b:8a:1f:69:b8:93:d3:8d:
         a1:f8:2d:17:37:66:83:29:d4:8f:ea:bd:df:8f:5f:6e:5c:28:
         70:be:69:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:15:54 2024 by rpki-client on console-ams.rpki-client.org