Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135322e302f32322d3233203d3e20323638383135.roa
File:                     34352e3137332e3135322e302f32322d3233203d3e20323638383135.roa (raw, json)
Hash identifier:          HNGCI5EFMpHSH1QELClVuQjCvamQ8nC8fwgDfQoeRno=
Subject key identifier:   1A:7B:CB:9B:E1:EA:CF:65:C6:A6:7F:A4:B3:D6:BD:71:73:BE:06:FA
Certificate issuer:       /CN=0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831
Certificate serial:       0B2343E0583D5F791D6A5B1362ACD257D5A4B48F
Authority key identifier: 0E:7E:1E:38:AD:4F:03:E9:AE:C2:B0:4B:DD:FF:ED:7A:B5:AC:B8:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135322e302f32322d3233203d3e20323638383135.roa
Signing time:             Thu 16 May 2024 14:13:41 +0000
ROA not before:           Thu 16 May 2024 14:08:41 +0000
ROA not after:            Thu 15 May 2025 14:13:41 +0000
asID:                     268815
IP address blocks:        45.173.152.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.crl
                          rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 00:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:23:43:e0:58:3d:5f:79:1d:6a:5b:13:62:ac:d2:57:d5:a4:b4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831
        Validity
            Not Before: May 16 14:08:41 2024 GMT
            Not After : May 15 14:13:41 2025 GMT
        Subject: CN=1A7BCB9BE1EACF65C6A67FA4B3D6BD7173BE06FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:bf:1e:af:c2:fc:6e:58:21:2b:97:c1:86:
                    a2:74:1a:53:cc:d1:1c:7c:9f:aa:5f:b0:d5:8b:75:
                    c3:d7:c4:b5:ba:cd:26:72:02:4b:13:60:da:6f:98:
                    3e:2c:94:e3:57:e7:4e:11:75:ba:38:4c:8d:a6:84:
                    3c:5c:c7:15:54:27:5e:db:b7:a2:a2:c6:95:9e:7d:
                    14:60:72:d4:98:9d:c1:3b:fa:3e:ab:2e:54:6e:43:
                    c2:4f:70:76:65:79:9d:1b:f4:1d:6a:b7:7e:4b:21:
                    84:6d:c0:f4:e6:0a:6d:f6:f5:34:dc:a6:75:4c:ec:
                    69:78:b8:91:e3:11:1a:b2:e5:58:b9:c9:01:7b:e7:
                    1b:ac:2f:dc:ef:d9:c5:a5:11:63:74:b4:9b:93:0f:
                    1e:23:54:33:64:c8:b0:84:36:51:33:52:cd:c6:1d:
                    cd:ab:0c:89:56:40:e2:d7:65:e4:54:7c:9a:9f:40:
                    b2:49:45:77:de:bf:22:e7:96:8c:77:14:67:72:1c:
                    3e:f5:7b:13:94:9d:2c:d0:03:16:fb:4d:ac:08:c1:
                    c1:1b:d6:a7:6a:c9:c1:94:af:96:a3:df:f2:de:09:
                    c5:ec:24:d2:7d:b2:05:2e:8f:e6:58:ec:9f:d5:f8:
                    dd:82:0d:28:61:bf:76:e2:9a:5d:ba:60:8d:dc:a3:
                    ee:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7B:CB:9B:E1:EA:CF:65:C6:A6:7F:A4:B3:D6:BD:71:73:BE:06:FA
            X509v3 Authority Key Identifier:
                keyid:0E:7E:1E:38:AD:4F:03:E9:AE:C2:B0:4B:DD:FF:ED:7A:B5:AC:B8:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135322e302f32322d3233203d3e20323638383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:97:f3:c2:72:90:8d:3d:46:37:59:76:14:b1:5d:5f:ba:5e:
         e0:3d:5c:dd:10:02:62:ce:48:b8:a0:20:46:a9:5e:8b:93:1a:
         88:c6:17:21:a1:49:83:88:32:99:01:9d:79:8e:fd:1e:08:26:
         fd:e2:dd:12:a2:1e:86:c9:3b:fb:ec:18:26:60:3a:d8:2e:15:
         01:ab:bc:c9:60:5e:8b:fb:c2:13:9d:46:cb:bb:fe:3d:66:ca:
         97:f1:01:38:08:fc:06:9f:ea:64:ef:8e:bc:50:6a:5e:79:ae:
         26:97:a7:fe:8e:7f:99:00:de:7b:af:a9:38:cd:91:90:4c:07:
         00:ff:c6:c2:dd:3e:cd:ed:21:f7:ad:c3:23:c8:47:e6:39:f0:
         60:d9:92:be:03:48:1c:2b:da:ed:80:15:39:f8:50:cb:d8:c7:
         f5:cd:7e:28:ff:35:d4:b0:04:e5:c5:f6:a6:85:46:53:81:c0:
         69:02:d4:88:d2:12:e0:28:ab:a9:db:a5:c8:8f:a3:de:8b:37:
         92:b2:09:97:e5:28:90:8a:9e:77:c4:d2:49:ca:a6:22:5d:ff:
         8b:25:d1:2a:b8:8b:62:48:a9:21:91:fe:30:f8:09:bd:cd:f3:
         c8:81:c0:a8:9e:82:ec:11:03:d6:2b:d4:96:83:a8:99:ea:8f:
         96:5d:97:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:08:09 2024 by rpki-client on console-fra.rpki-client.org