Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/34352e3137342e3132302e302f32342d3234203d3e203631373132.roa
File:                     34352e3137342e3132302e302f32342d3234203d3e203631373132.roa (raw, json)
Hash identifier:          tjTWjx9XZjorMz9TwvSXCNokEKT6m1uAO/EKteGBZtw=
Subject key identifier:   66:2D:01:A5:5E:B9:ED:96:08:9B:EF:83:05:74:B6:4F:55:47:A1:55
Certificate issuer:       /CN=5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B
Certificate serial:       02046EF253A4C317748949A626236C18CF973650
Authority key identifier: 5D:BC:18:BF:2E:89:F3:EF:15:D9:A4:2D:F4:82:5C:B6:38:9F:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/34352e3137342e3132302e302f32342d3234203d3e203631373132.roa
Signing time:             Tue 07 May 2024 19:10:45 +0000
ROA not before:           Tue 07 May 2024 19:05:45 +0000
ROA not after:            Tue 06 May 2025 19:10:45 +0000
asID:                     61712
IP address blocks:        45.174.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.crl
                          rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:04:6e:f2:53:a4:c3:17:74:89:49:a6:26:23:6c:18:cf:97:36:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B
        Validity
            Not Before: May  7 19:05:45 2024 GMT
            Not After : May  6 19:10:45 2025 GMT
        Subject: CN=662D01A55EB9ED96089BEF830574B64F5547A155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9a:31:8d:30:aa:3e:51:1f:4a:e5:3c:21:e0:
                    a1:ff:d6:cf:09:e1:0d:12:01:55:dd:08:87:9a:b5:
                    0d:cd:d6:e1:43:be:34:b7:9e:bb:73:73:25:fa:16:
                    8c:be:9d:4a:81:38:a5:48:b5:df:b3:84:e2:0e:17:
                    b9:93:e2:87:6b:3d:58:05:a8:2e:a1:e0:d5:b0:f0:
                    eb:2a:86:9c:93:21:a6:42:c8:97:5a:b5:63:d9:25:
                    60:fd:3d:38:dd:fe:25:4e:99:9c:78:fa:22:e2:25:
                    cd:b2:78:ce:f2:17:db:61:bf:e1:38:05:79:80:4f:
                    69:3d:d4:02:ad:8e:b7:d6:96:51:51:8f:9a:02:c5:
                    3d:94:ae:d7:76:c1:7c:12:c2:2d:a6:c0:14:0b:58:
                    d1:6d:79:a5:b5:0b:52:b4:65:f2:05:58:42:d3:1c:
                    7b:8e:18:64:02:31:e2:0c:a7:0d:e0:db:80:db:92:
                    f9:e2:aa:92:b9:f1:56:a4:82:2b:1f:d2:df:fe:8c:
                    98:ac:e4:3b:2e:d5:2d:6b:ce:73:cf:a1:6a:bd:fd:
                    f7:77:ef:41:cd:fb:42:47:29:05:9e:32:1e:ce:58:
                    8e:4c:c5:1a:8c:4b:fc:6f:67:5b:f3:40:fa:db:22:
                    3f:36:a3:3c:fa:de:ec:1d:f7:1b:1b:f2:2f:ec:cd:
                    03:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2D:01:A5:5E:B9:ED:96:08:9B:EF:83:05:74:B6:4F:55:47:A1:55
            X509v3 Authority Key Identifier:
                keyid:5D:BC:18:BF:2E:89:F3:EF:15:D9:A4:2D:F4:82:5C:B6:38:9F:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/34352e3137342e3132302e302f32342d3234203d3e203631373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:51:2b:38:25:a9:ce:58:84:7b:07:b4:12:d6:ea:50:22:f3:
         6a:76:85:41:d8:3b:ce:c1:54:17:ed:c8:36:57:73:10:c3:a6:
         5d:de:75:41:35:5a:41:55:91:9c:09:ac:c5:87:61:5a:c0:b2:
         57:ec:01:92:eb:01:af:b8:05:da:26:16:ae:50:50:d4:ed:6f:
         ee:94:a4:18:c5:f5:96:6c:12:67:8f:b7:0a:2a:81:f1:30:1c:
         c1:c9:4d:fe:76:75:3a:91:91:a4:51:ee:5d:15:c3:67:fa:86:
         2e:71:2f:4b:89:87:c2:0d:52:10:6b:ea:af:6b:db:00:b3:12:
         a2:5a:f9:70:7a:6e:f4:ed:2b:ee:6e:6a:de:08:4e:47:18:5b:
         76:a9:df:6c:ab:19:da:ef:a4:15:a8:49:11:e2:b3:e0:db:fa:
         69:47:bc:f3:b8:02:62:b3:4b:3a:c7:7e:10:39:cb:a2:db:9e:
         bd:5c:e9:c9:c3:ea:8b:43:e4:1d:07:2c:ce:5b:39:99:b6:f5:
         69:58:d9:da:7d:ad:a3:13:2e:f1:41:d8:19:f0:e9:8a:16:14:
         13:03:e7:93:cc:ec:0c:f4:76:03:5d:59:69:74:d2:ac:97:45:
         5d:b6:64:33:59:85:b1:46:33:e5:c2:83:38:0b:2a:2b:20:2a:
         8c:76:20:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:28 2024 by rpki-client on console-fra.rpki-client.org