Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32342d3234203d3e20323636393234.roa
File:                     34352e3232342e33322e302f32342d3234203d3e20323636393234.roa (raw, json)
Hash identifier:          CG2l1j6d177DyU9Hd/oFyM+BKsJFCer8pflIo2sCkL4=
Subject key identifier:   33:19:27:38:D0:A2:DF:35:D7:FF:58:F1:4C:CA:F6:ED:5E:2E:1A:E1
Certificate issuer:       /CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
Certificate serial:       33E19F63C0C2BD968C3E0D4DAF207EFE3D372830
Authority key identifier: 8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32342d3234203d3e20323636393234.roa
Signing time:             Wed 04 Dec 2024 16:44:51 +0000
ROA not before:           Wed 04 Dec 2024 16:39:51 +0000
ROA not after:            Wed 03 Dec 2025 16:44:51 +0000
asID:                     266924
IP address blocks:        45.224.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl
                          rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 02:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e1:9f:63:c0:c2:bd:96:8c:3e:0d:4d:af:20:7e:fe:3d:37:28:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
        Validity
            Not Before: Dec  4 16:39:51 2024 GMT
            Not After : Dec  3 16:44:51 2025 GMT
        Subject: CN=33192738D0A2DF35D7FF58F14CCAF6ED5E2E1AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b5:d1:9a:37:91:e4:94:5a:d6:5c:a4:cf:f2:
                    e3:84:d2:ba:7e:e5:b7:1d:f5:bf:1a:ac:2d:10:d2:
                    e3:d4:c5:01:71:c1:93:77:ef:b0:39:15:47:ba:ec:
                    6e:86:1a:1e:86:cc:14:ae:a3:1a:9f:c9:06:08:52:
                    a0:71:be:40:2f:a0:3d:09:5a:f6:82:69:20:5f:d1:
                    bb:8c:14:62:94:dc:5c:3d:70:54:fa:a7:11:b6:6c:
                    28:48:da:64:e0:89:ed:d1:5b:84:37:63:90:49:08:
                    13:53:f4:1e:68:3c:ba:4c:ee:66:61:5f:dd:7c:0b:
                    71:d4:51:62:0b:3c:5e:39:53:61:09:a7:5d:a2:8c:
                    0e:2a:27:d8:f2:2c:77:aa:f5:a0:9e:67:4d:07:13:
                    a5:36:96:23:47:35:30:62:3b:43:fd:fc:39:61:5b:
                    a1:ee:53:ef:88:95:9a:ff:32:7e:e9:67:5c:4f:44:
                    74:6e:f4:66:ee:f2:fb:de:d8:90:04:ab:e2:3b:fe:
                    fb:1b:a7:b5:04:c8:51:1f:44:7a:b1:eb:49:7c:28:
                    d9:88:ef:bd:8b:32:25:5b:23:a3:c4:ba:1f:10:2f:
                    91:85:5d:b1:33:8a:45:9b:2e:dc:80:15:c2:e0:1e:
                    7c:4c:35:d2:34:79:a1:71:48:d9:d1:b2:08:7d:5b:
                    15:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:19:27:38:D0:A2:DF:35:D7:FF:58:F1:4C:CA:F6:ED:5E:2E:1A:E1
            X509v3 Authority Key Identifier:
                keyid:8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32342d3234203d3e20323636393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:9a:a5:ea:9f:12:d6:01:9c:f5:02:c1:dd:ca:1c:47:cc:35:
         d1:c7:6e:0b:ba:b9:b4:40:a6:6f:11:87:f7:e4:93:aa:cf:6f:
         74:3e:e2:ad:05:05:3e:88:47:1a:1f:5d:06:10:6b:03:16:1d:
         92:94:b3:75:71:c5:50:7c:66:62:2e:c2:9f:71:69:a3:4f:a4:
         06:41:d9:9d:5f:1c:1c:8e:45:7d:69:ac:80:24:f5:1a:c4:f6:
         87:05:06:f5:4c:24:a3:e1:1c:6a:e2:a5:1e:a6:99:9a:be:2c:
         9d:de:2c:b7:15:fb:6a:8f:83:86:6a:9f:c7:eb:62:91:2b:c3:
         24:51:9a:d4:90:79:4b:5d:42:e5:e4:da:37:af:6b:45:b5:cb:
         04:4a:2d:86:1d:d0:80:7c:ec:8b:5c:ad:bd:4a:10:b1:52:d1:
         5f:1a:5e:15:27:98:bc:81:1c:cc:d3:c6:8f:85:a7:4f:91:b9:
         c1:5c:ae:ba:4e:3f:1e:c0:57:36:cb:8c:2c:9b:86:e1:a2:2a:
         91:86:14:5f:58:8b:5d:f8:d7:1a:a3:fc:21:05:b3:fe:1d:82:
         65:54:0e:48:95:a0:8d:34:3f:20:f9:97:4d:a3:6a:cf:33:7a:
         bc:2b:d3:3e:6c:32:f8:b1:51:7b:8e:ee:b7:19:08:60:77:fa:
         b4:66:8d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:37 2025 by rpki-client on console.sobornost.net