Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/32342e3135322e31302e302f32332d3233203d3e20323730343730.roa
File:                     32342e3135322e31302e302f32332d3233203d3e20323730343730.roa (raw, json)
Hash identifier:          JzG2HTlIxfrto08mdXmLOQSbZ9OZe0hjVg4LZfrLP+c=
Subject key identifier:   47:FD:8C:AE:8A:94:A5:25:CD:7A:39:5F:A5:A3:F2:46:36:35:2B:12
Certificate issuer:       /CN=F8627EF4EC5630BFBFA1853F634FB0290F6D4852
Certificate serial:       2756C754F918BA658D1BBDD4ADF451CAD4365DBA
Authority key identifier: F8:62:7E:F4:EC:56:30:BF:BF:A1:85:3F:63:4F:B0:29:0F:6D:48:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/32342e3135322e31302e302f32332d3233203d3e20323730343730.roa
Signing time:             Wed 04 Sep 2024 05:50:14 +0000
ROA not before:           Wed 04 Sep 2024 05:45:14 +0000
ROA not after:            Wed 03 Sep 2025 05:50:14 +0000
asID:                     270470
IP address blocks:        24.152.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.crl
                          rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:56:c7:54:f9:18:ba:65:8d:1b:bd:d4:ad:f4:51:ca:d4:36:5d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8627EF4EC5630BFBFA1853F634FB0290F6D4852
        Validity
            Not Before: Sep  4 05:45:14 2024 GMT
            Not After : Sep  3 05:50:14 2025 GMT
        Subject: CN=47FD8CAE8A94A525CD7A395FA5A3F24636352B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:c7:71:ff:b4:0b:95:5d:96:6f:c6:4b:dd:
                    94:dd:dd:d9:a5:f2:a7:6a:a4:ab:93:d3:44:d1:aa:
                    21:b8:42:92:13:49:f2:35:56:8c:50:3e:c1:51:53:
                    09:5b:72:d4:a2:a8:8b:f1:86:27:c1:a5:82:a2:d0:
                    e0:d9:29:af:cd:8c:2a:54:39:69:e3:30:8e:30:9a:
                    df:db:4e:5b:f8:5b:a3:25:e0:2f:b0:f5:80:96:35:
                    7c:32:95:86:29:40:96:a4:e6:1c:db:9c:8b:9e:ca:
                    17:f3:ed:94:3c:4f:95:17:b0:3d:fa:d9:b3:f4:c6:
                    83:cc:b7:76:65:24:27:13:e7:e2:d4:1e:3c:26:06:
                    96:f6:18:2b:e9:f7:5d:ee:5a:2e:68:9e:2a:d1:e7:
                    cf:47:5e:cc:4d:6a:f9:d3:3a:21:75:a6:2e:21:2b:
                    00:b4:14:94:d9:58:03:47:27:09:e6:b7:3d:c5:19:
                    45:6d:ca:92:f1:f3:96:93:ec:ec:90:49:f0:8e:f4:
                    c0:8e:a5:27:79:ac:46:e7:4e:54:21:11:1f:aa:f0:
                    df:dd:4c:1c:13:7b:82:3a:42:04:8a:14:29:7d:d7:
                    09:cc:df:81:79:86:88:a3:a0:da:00:c5:99:ee:e8:
                    53:b2:ee:92:f9:bf:c9:db:ef:bf:56:c6:38:45:2f:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FD:8C:AE:8A:94:A5:25:CD:7A:39:5F:A5:A3:F2:46:36:35:2B:12
            X509v3 Authority Key Identifier:
                keyid:F8:62:7E:F4:EC:56:30:BF:BF:A1:85:3F:63:4F:B0:29:0F:6D:48:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/32342e3135322e31302e302f32332d3233203d3e20323730343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:78:27:fe:5f:ce:66:d8:11:9a:a4:77:04:e5:c1:58:6f:45:
         ae:7d:11:ba:a3:14:e3:e4:ef:2e:51:60:54:37:5f:0c:37:c8:
         9f:c2:57:08:63:c9:13:4f:92:d5:96:0b:af:34:bc:bb:a2:4c:
         12:f4:eb:76:d8:ee:c0:f6:78:97:0c:80:c9:e0:b1:19:89:71:
         93:90:94:f5:6f:07:69:bc:6a:c5:c5:f4:3d:1c:97:2d:7e:ab:
         71:3a:f7:7d:08:cd:5e:c0:08:14:07:7d:80:7e:aa:19:16:6d:
         ff:9a:28:98:02:53:ad:d6:16:08:86:9a:a0:91:e2:91:02:54:
         34:11:3f:d8:af:cf:4f:8a:61:d4:d4:1d:66:23:19:0c:7b:9c:
         1c:a5:b8:84:37:81:79:e2:d2:60:5d:b4:7a:6d:da:76:08:5b:
         b7:ce:9c:20:1b:1f:44:a3:26:06:b9:96:cf:0f:51:a2:e9:86:
         10:f5:e8:1d:6d:cd:1b:57:19:2d:4b:14:ed:23:d0:b6:4a:6f:
         3c:96:e0:fa:95:5d:09:8b:a0:9f:50:e5:3d:2c:9d:24:3c:03:
         e9:46:2a:08:6d:69:06:3c:46:80:75:f9:af:bf:08:36:74:b1:
         d1:33:ff:8a:63:47:3f:03:de:e4:ed:e6:6b:28:c8:b2:0b:3d:
         be:2f:7a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:36 2024 by rpki-client on console.sobornost.net