Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/34352e3233342e3233362e302f32342d3234203d3e20323637333836.roa
File:                     34352e3233342e3233362e302f32342d3234203d3e20323637333836.roa (raw, json)
Hash identifier:          fN4tZsVuCNTsTRMc2SKTILQBpvJxcnxDBOvWrr5GQc8=
Subject key identifier:   8B:22:96:10:B5:3E:B8:08:88:53:25:8A:AC:7D:BC:92:3E:92:39:1D
Certificate issuer:       /CN=272EE1B25800F489DD72CC554F5C22037BDA8291
Certificate serial:       7A357FDEAA68C2A7FCF01DBEA451434E55041B25
Authority key identifier: 27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/34352e3233342e3233362e302f32342d3234203d3e20323637333836.roa
Signing time:             Thu 01 Aug 2024 11:59:01 +0000
ROA not before:           Thu 01 Aug 2024 11:54:01 +0000
ROA not after:            Thu 31 Jul 2025 11:59:01 +0000
asID:                     267386
IP address blocks:        45.234.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl
                          rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Oct 2024 14:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:35:7f:de:aa:68:c2:a7:fc:f0:1d:be:a4:51:43:4e:55:04:1b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272EE1B25800F489DD72CC554F5C22037BDA8291
        Validity
            Not Before: Aug  1 11:54:01 2024 GMT
            Not After : Jul 31 11:59:01 2025 GMT
        Subject: CN=8B229610B53EB8088853258AAC7DBC923E92391D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dd:e5:6a:cd:23:b0:29:67:d1:ff:a6:fa:1e:
                    9d:5d:25:b9:41:8c:7f:73:0c:9b:6a:94:89:d9:ed:
                    8f:fc:3b:8d:d1:08:14:fa:93:65:80:31:9a:c0:7a:
                    58:82:eb:de:3c:8c:bf:dd:03:9a:85:18:ef:c1:91:
                    38:52:e8:2c:ee:3f:3a:c4:55:ad:88:e8:ba:78:bc:
                    6d:68:b9:ca:6c:d0:d1:f6:da:85:37:88:03:b8:06:
                    c5:87:c3:b5:1e:15:03:2e:e2:54:f2:c5:ed:30:41:
                    b0:40:75:86:4f:cb:6d:6f:64:cc:71:8e:c1:73:fe:
                    0b:f4:96:28:fe:0c:bf:83:f3:1d:bc:95:e1:7c:58:
                    06:bb:5b:52:ba:32:9b:df:63:9c:31:b2:fe:6d:45:
                    4f:12:b8:3d:7e:10:54:1b:ea:a9:1a:33:26:b0:20:
                    b8:71:a8:79:26:0a:42:9d:e4:e0:79:8e:21:31:cf:
                    99:54:cb:c8:95:81:c1:a9:f5:86:7c:68:63:9a:ea:
                    6f:d3:d8:76:a5:02:da:da:22:be:51:6d:40:8f:9d:
                    e4:76:b8:e4:cf:83:87:08:94:2c:22:fb:57:70:35:
                    3c:db:f1:6f:03:45:cf:a8:83:53:03:ee:f8:a5:49:
                    d3:9d:24:e1:6e:5f:71:a8:ef:e2:72:73:21:25:c5:
                    14:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:22:96:10:B5:3E:B8:08:88:53:25:8A:AC:7D:BC:92:3E:92:39:1D
            X509v3 Authority Key Identifier:
                keyid:27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/34352e3233342e3233362e302f32342d3234203d3e20323637333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:ae:df:47:93:a6:6e:93:6f:64:57:71:ac:cb:5a:f1:d5:53:
         26:f3:04:4d:1a:7c:d1:df:0c:bd:0f:db:e1:9a:b3:0c:cb:fb:
         75:13:bf:98:bd:8b:d3:0b:18:a6:2d:e3:17:30:8a:8a:87:69:
         e1:3f:19:57:39:8a:de:ae:71:a2:7b:dc:58:25:11:01:f0:cb:
         73:35:e1:b3:36:ed:b8:99:4a:43:cc:93:36:1f:fb:6a:be:a7:
         07:b2:d3:08:72:7c:b4:65:ff:b9:ea:1b:08:93:2f:c1:af:72:
         00:d3:4b:01:7d:e7:df:4e:18:bd:b0:9c:1a:94:32:ee:06:6e:
         54:b6:4f:5e:f6:d2:3c:72:12:3b:bd:93:4d:0b:15:10:0b:b4:
         e5:10:df:11:c0:ec:44:f5:ec:2b:9d:7d:fe:ce:cf:08:e8:4e:
         b0:c5:ee:00:ef:af:5e:c4:6c:a3:4e:ba:ce:9d:d4:4e:4b:bb:
         dd:68:6c:79:d4:fa:ca:cf:93:2c:26:8a:fe:9f:98:1e:8e:59:
         49:5e:32:71:55:ca:d5:f0:99:d5:c9:2e:4b:35:19:75:75:3b:
         e1:8d:8c:4f:90:58:72:fa:72:3f:dd:c8:56:49:9c:ae:e3:a3:
         39:c5:2b:40:57:c2:a6:92:30:34:23:a1:3e:7b:51:6c:98:81:
         b0:3b:13:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 17:01:38 2024 by rpki-client on console.sobornost.net