Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/34352e3137342e3132322e302f32342d3234203d3e203631373132.roa
File:                     34352e3137342e3132322e302f32342d3234203d3e203631373132.roa (raw, json)
Hash identifier:          PhzbSSLIW13HjGSNSGhCWkEhn1iswLEsnpVMLdbQ8Og=
Subject key identifier:   CB:4C:A8:E0:7C:CA:F2:EA:95:C1:68:08:50:2A:7C:A9:37:A2:E0:C5
Certificate issuer:       /CN=5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B
Certificate serial:       3D117FAF9B92511F40F15E26AEDB9E306CE3E13E
Authority key identifier: 5D:BC:18:BF:2E:89:F3:EF:15:D9:A4:2D:F4:82:5C:B6:38:9F:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/34352e3137342e3132322e302f32342d3234203d3e203631373132.roa
Signing time:             Tue 07 May 2024 19:11:10 +0000
ROA not before:           Tue 07 May 2024 19:06:10 +0000
ROA not after:            Tue 06 May 2025 19:11:10 +0000
asID:                     61712
IP address blocks:        45.174.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.crl
                          rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:11:7f:af:9b:92:51:1f:40:f1:5e:26:ae:db:9e:30:6c:e3:e1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B
        Validity
            Not Before: May  7 19:06:10 2024 GMT
            Not After : May  6 19:11:10 2025 GMT
        Subject: CN=CB4CA8E07CCAF2EA95C16808502A7CA937A2E0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:2b:17:9a:18:00:fe:64:c8:ce:4f:b6:45:
                    68:6d:b3:8a:36:31:10:cd:b1:9f:9d:cf:f8:a7:08:
                    b7:83:36:bc:52:96:71:6d:9f:9d:5c:73:9e:53:a0:
                    2d:14:97:6a:0a:dd:b2:61:5e:9b:3a:a6:51:2e:6a:
                    a8:65:94:b8:ae:8b:9d:b9:ed:bf:a2:91:72:aa:ab:
                    57:11:c3:1a:84:2e:70:77:f3:46:03:3c:4e:91:d1:
                    ae:d6:ae:69:be:42:8e:2c:ce:8b:f6:75:4f:ea:88:
                    fd:52:b3:3d:ef:67:00:c7:81:9c:40:a1:60:0f:78:
                    62:c3:d8:d9:c3:5b:1f:f3:a5:c8:64:a5:77:76:6a:
                    af:21:68:63:12:0e:ed:0b:00:22:9c:c1:6f:dc:f7:
                    a8:0a:4e:46:98:e6:bc:95:77:b9:29:99:d8:45:d6:
                    a3:f2:ef:4c:4b:7c:72:0c:93:0b:52:9a:28:d9:42:
                    5f:13:4f:7a:f5:73:ae:27:f2:50:ea:6a:80:17:8b:
                    33:ea:92:6d:86:4b:c0:23:fa:af:78:96:d8:f3:4e:
                    d0:6d:b7:95:46:c2:4f:39:95:4e:49:62:33:a4:0e:
                    85:a2:cc:8e:08:70:65:ac:e7:0f:e4:66:ed:9e:b5:
                    15:d1:57:0b:ba:03:b4:25:a8:17:bb:35:33:40:61:
                    9b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4C:A8:E0:7C:CA:F2:EA:95:C1:68:08:50:2A:7C:A9:37:A2:E0:C5
            X509v3 Authority Key Identifier:
                keyid:5D:BC:18:BF:2E:89:F3:EF:15:D9:A4:2D:F4:82:5C:B6:38:9F:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBC18BF2E89F3EF15D9A42DF4825CB6389FF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/1/34352e3137342e3132322e302f32342d3234203d3e203631373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:14:d3:46:06:63:4f:f5:34:ed:68:59:0d:12:5b:4d:7c:53:
         42:9e:9a:61:b3:ae:b7:4f:d4:0f:50:00:7a:42:a7:01:16:f6:
         4a:22:b6:10:65:2a:96:d5:00:0b:fc:d7:ba:59:3e:28:00:7b:
         7f:59:c8:e8:4a:9d:ca:d5:da:6d:54:27:ab:87:b0:1f:47:30:
         5d:0d:e5:81:c8:fe:27:c5:01:06:ce:c3:c1:5a:49:d6:06:34:
         d1:03:e6:7a:7c:2d:47:91:d6:96:50:68:a8:5f:5f:df:f6:14:
         ba:3d:ab:49:f6:00:db:6e:2d:23:8d:af:3a:77:12:1f:b9:db:
         1c:13:2f:8b:87:66:27:bf:18:f0:a3:2d:6d:40:f5:5f:5a:92:
         fa:cd:cc:9b:c6:45:34:64:47:58:2f:f4:35:55:c3:a4:3e:96:
         92:50:57:03:ec:86:8e:e9:f2:63:c8:ff:84:e1:d1:59:f5:dd:
         63:0a:21:e7:3f:38:4b:3f:2b:18:b2:37:cf:38:13:90:ae:f3:
         0e:ad:ac:82:04:64:bc:03:3f:ef:20:50:0e:28:9e:1a:1c:38:
         e7:b4:87:db:15:46:b9:33:d3:c3:3b:d5:c7:72:f0:63:76:13:
         b8:0b:6e:6c:29:3a:07:a9:b3:78:8b:ec:81:6c:ce:90:3e:f7:
         40:d4:8c:70
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPRF/r5uSUR9A8V4mrtueMGzj4T4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURCQzE4QkYyRTg5RjNFRjE1RDlBNDJERjQ4MjVDQjYz
ODlGRjEwQjAeFw0yNDA1MDcxOTA2MTBaFw0yNTA1MDYxOTExMTBaMDMxMTAvBgNV
BAMTKENCNENBOEUwN0NDQUYyRUE5NUMxNjgwODUwMkE3Q0E5MzdBMkUwQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0VisXmhgA/mTIzk+2RWhts4o2
MRDNsZ+dz/inCLeDNrxSlnFtn51cc55ToC0Ul2oK3bJhXps6plEuaqhllLiui525
7b+ikXKqq1cRwxqELnB380YDPE6R0a7Wrmm+Qo4szov2dU/qiP1Ssz3vZwDHgZxA
oWAPeGLD2NnDWx/zpchkpXd2aq8haGMSDu0LACKcwW/c96gKTkaY5ryVd7kpmdhF
1qPy70xLfHIMkwtSmijZQl8TT3r1c64n8lDqaoAXizPqkm2GS8Aj+q94ltjzTtBt
t5VGwk85lU5JYjOkDoWizI4IcGWs5w/kZu2etRXRVwu6A7QlqBe7NTNAYZtxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUy0yo4HzK8uqVwWgIUCp8qTei4MUwHwYDVR0j
BBgwFoAUXbwYvy6J8+8V2aQt9IJctjif8QswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjV4djVmOHZzdWhvV1l0c3NxcW9lS1M3ODV2WW9Fa2Y0eWZEam5HN2ZM
eGIvMS81REJDMThCRjJFODlGM0VGMTVEOUE0MkRGNDgyNUNCNjM4OUZGMTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEQkMxOEJGMkU4OUYzRUYx
NUQ5QTQyREY0ODI1Q0I2Mzg5RkYxMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1eHY1Zjh2c3Vob1dZdHNzcXFvZUtTNzg1dllvRWtmNHlmRGpuRzdmTHhiLzEv
MzQzNTJlMzEzNzM0MmUzMTMyMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzczMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALa56MA0GCSqGSIb3DQEBCwUAA4IBAQCxFNNGBmNP
9TTtaFkNEltNfFNCnpphs663T9QPUAB6QqcBFvZKIrYQZSqW1QAL/Ne6WT4oAHt/
WcjoSp3K1dptVCerh7AfRzBdDeWByP4nxQEGzsPBWknWBjTRA+Z6fC1HkdaWUGio
X1/f9hS6PatJ9gDbbi0jja86dxIfudscEy+Lh2Ynvxjwoy1tQPVfWpL6zcybxkU0
ZEdYL/Q1VcOkPpaSUFcD7IaO6fJjyP+E4dFZ9d1jCiHnPzhLPysYsjfPOBOQrvMO
rayCBGS8Az/vIFAOKJ4aHDjntIfbFUa5M9PDO9XHcvBjdhO4C25sKToHqbN4i+yB
bM6QPvdA1Ixw
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:01 2024 by rpki-client on console-fra.rpki-client.org