Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135352e302f32342d3234203d3e20323638383135.roa
File:                     34352e3137332e3135352e302f32342d3234203d3e20323638383135.roa (raw, json)
Hash identifier:          WRWTnvQXMR8EIOqzv/jtc6j0jLFoqngBNHjTM2M0lNM=
Subject key identifier:   DF:00:39:DB:C7:3C:A0:6F:9A:A0:EE:45:19:1E:E4:66:CC:71:07:F7
Certificate issuer:       /CN=0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831
Certificate serial:       718360A87ACB37A5168997705A6C6F8F3EB45244
Authority key identifier: 0E:7E:1E:38:AD:4F:03:E9:AE:C2:B0:4B:DD:FF:ED:7A:B5:AC:B8:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135352e302f32342d3234203d3e20323638383135.roa
Signing time:             Thu 16 May 2024 14:13:56 +0000
ROA not before:           Thu 16 May 2024 14:08:56 +0000
ROA not after:            Thu 15 May 2025 14:13:56 +0000
asID:                     268815
IP address blocks:        45.173.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.crl
                          rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 00:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:83:60:a8:7a:cb:37:a5:16:89:97:70:5a:6c:6f:8f:3e:b4:52:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831
        Validity
            Not Before: May 16 14:08:56 2024 GMT
            Not After : May 15 14:13:56 2025 GMT
        Subject: CN=DF0039DBC73CA06F9AA0EE45191EE466CC7107F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1b:e9:d6:1b:bf:80:71:fb:ee:83:bf:48:85:
                    8a:48:2e:be:22:82:ec:a6:b5:d4:b9:f2:3b:69:b5:
                    36:1a:41:2e:ee:fe:c9:9b:ea:6e:c2:7a:0d:40:d8:
                    c5:47:13:58:9b:16:6a:da:00:05:20:31:68:cb:27:
                    b5:ae:6e:93:00:dd:e3:a4:b6:b4:c9:ab:ae:95:29:
                    1c:bc:e0:c1:c3:31:ca:fb:09:52:37:5d:cf:fa:2f:
                    4f:61:15:25:f4:c6:e1:99:aa:ed:74:9a:67:09:05:
                    81:2f:9e:6a:1d:03:c9:ba:6f:81:d5:e7:8c:8f:af:
                    79:b0:ac:df:37:b6:1c:4a:77:8f:0d:5e:e0:61:a6:
                    06:eb:56:8d:c8:7f:fe:9d:a3:51:0b:42:ee:0e:ee:
                    ea:a4:76:2a:77:fe:c5:20:d6:0c:04:5c:25:9b:a3:
                    00:a2:b7:17:f9:81:f1:30:e3:84:5d:9d:e4:14:7b:
                    f8:ce:4b:6c:3d:10:79:e1:38:62:35:07:a3:3b:c5:
                    8e:a4:53:a8:62:2f:79:2a:75:40:f3:3d:e2:55:2e:
                    0f:0f:1a:2e:57:3e:11:21:0b:0b:8e:61:b8:bb:95:
                    0a:c3:2c:ee:07:4f:96:57:36:c2:32:49:27:6e:05:
                    33:70:63:6d:59:6d:8f:26:37:61:7c:c7:62:e7:77:
                    5f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:00:39:DB:C7:3C:A0:6F:9A:A0:EE:45:19:1E:E4:66:CC:71:07:F7
            X509v3 Authority Key Identifier:
                keyid:0E:7E:1E:38:AD:4F:03:E9:AE:C2:B0:4B:DD:FF:ED:7A:B5:AC:B8:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135352e302f32342d3234203d3e20323638383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:b5:b6:5e:d7:99:11:e7:06:83:1d:30:1a:a5:b1:b1:46:96:
         53:bf:46:b3:8d:80:d3:14:92:97:09:5b:c0:51:38:64:ef:11:
         08:85:67:80:18:b1:10:f0:68:01:52:4e:f9:d5:fc:fe:24:7a:
         32:56:c0:86:f5:2e:0d:3f:21:53:cc:e2:9c:06:42:8a:0d:c3:
         5b:82:90:26:82:af:dd:fb:cd:3b:10:b1:99:38:a1:a0:4f:63:
         37:b8:38:5a:50:30:f8:41:c6:1e:c4:35:71:a7:b4:98:00:20:
         48:ee:49:09:f2:9e:e4:d5:fd:dd:ab:ca:f6:13:59:87:14:e6:
         19:0b:01:e3:1f:e7:fa:a5:db:54:b6:8c:01:cb:e1:60:7e:ec:
         ff:36:57:bb:84:39:40:e8:e7:89:8a:a2:a4:14:97:5e:5e:af:
         cf:b3:2a:ed:3b:76:27:b8:6a:d4:61:f5:78:3e:84:96:b7:b4:
         69:91:be:76:5c:ea:34:68:27:2b:03:a1:2b:c5:99:d5:03:d6:
         85:ce:5e:e1:3e:4f:50:b7:0d:40:68:88:1e:1b:63:18:0d:47:
         be:87:b2:11:9f:c6:90:71:ac:7e:99:e4:8f:5c:8b:2e:22:5e:
         08:84:62:47:1b:1e:e6:fe:af:95:2c:cd:a4:f7:1c:6e:e5:a1:
         01:15:3e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:52:25 2024 by rpki-client on console-ams.rpki-client.org