Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/34352e3137342e3139362e302f32332d3233203d3e20323731353939.roa
File:                     34352e3137342e3139362e302f32332d3233203d3e20323731353939.roa (raw, json)
Hash identifier:          3daK+J5W0UtWQnUWWhIKvRmP5Rgac4DbfEdJP6q2qZA=
Subject key identifier:   5D:9A:CE:BA:17:29:EB:47:9E:B0:05:49:7D:1E:DA:A7:C5:94:FA:0C
Certificate issuer:       /CN=085B4B97D0BA72E679EC0F52343750221AD51660
Certificate serial:       73E082CA7E2C99695C04F34D45B5FF3081C2FCBB
Authority key identifier: 08:5B:4B:97:D0:BA:72:E6:79:EC:0F:52:34:37:50:22:1A:D5:16:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/34352e3137342e3139362e302f32332d3233203d3e20323731353939.roa
Signing time:             Thu 04 Apr 2024 13:04:32 +0000
ROA not before:           Thu 04 Apr 2024 12:59:32 +0000
ROA not after:            Thu 03 Apr 2025 13:04:32 +0000
asID:                     271599
IP address blocks:        45.174.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.crl
                          rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e0:82:ca:7e:2c:99:69:5c:04:f3:4d:45:b5:ff:30:81:c2:fc:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085B4B97D0BA72E679EC0F52343750221AD51660
        Validity
            Not Before: Apr  4 12:59:32 2024 GMT
            Not After : Apr  3 13:04:32 2025 GMT
        Subject: CN=5D9ACEBA1729EB479EB005497D1EDAA7C594FA0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:83:8b:10:d7:6f:ec:31:8e:56:cd:97:21:
                    0c:0b:7f:e3:1b:56:dd:95:7b:8c:cb:3c:bb:5f:2d:
                    a1:e6:ff:9a:cd:e1:30:84:ba:28:f0:fc:46:a1:98:
                    6a:02:0f:c7:4a:00:1e:73:d8:0f:7c:f4:78:39:b0:
                    4a:00:af:9c:ce:9f:59:b4:2d:a6:e4:11:01:3a:5e:
                    b8:cb:1b:b5:75:07:db:1e:4b:62:1c:9e:df:75:ec:
                    27:8a:e8:81:ca:6a:7d:c8:08:f6:c5:73:83:23:48:
                    53:8c:10:4f:68:e2:45:54:8f:38:03:76:99:76:3b:
                    58:47:59:34:66:05:d1:f1:53:29:80:b6:4c:35:18:
                    aa:ed:9a:3b:a9:09:6d:50:47:7a:09:d2:26:a5:7b:
                    a8:b0:bd:c2:18:de:a8:46:29:a9:3e:ee:a7:46:51:
                    2a:b2:b2:be:d8:1d:d4:51:be:af:0c:cc:bf:83:16:
                    88:af:cb:6f:4b:1e:ad:49:2c:2b:8f:6e:90:3e:47:
                    42:20:26:c0:82:50:27:eb:9c:ba:3f:dc:1e:ff:92:
                    a7:b8:1b:96:9e:82:18:43:a6:4e:77:01:5c:0a:df:
                    bd:a8:3a:ae:d9:56:6e:6a:86:3e:63:20:01:cd:8d:
                    d4:18:bd:f1:16:ae:b2:7f:e1:1f:3e:e3:b4:eb:3b:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9A:CE:BA:17:29:EB:47:9E:B0:05:49:7D:1E:DA:A7:C5:94:FA:0C
            X509v3 Authority Key Identifier:
                keyid:08:5B:4B:97:D0:BA:72:E6:79:EC:0F:52:34:37:50:22:1A:D5:16:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/34352e3137342e3139362e302f32332d3233203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:c6:0c:f3:00:a9:c5:16:3c:e6:91:26:41:ad:78:92:59:b7:
         4f:00:5a:1e:6d:ce:12:09:2b:e5:8e:c0:c8:5f:38:43:16:eb:
         b3:5d:b5:d0:64:82:3d:93:33:aa:b6:99:73:f7:e2:fb:bc:05:
         fd:00:f9:31:98:82:04:1c:c2:5f:f9:ee:c7:51:9f:fd:f4:73:
         8c:a4:af:3f:ad:d7:68:6b:59:95:e4:89:ff:b0:64:a9:53:a8:
         8c:b3:a7:d8:4b:c4:26:6a:b6:e3:81:4e:20:96:2e:6f:7c:e7:
         ba:b2:4b:b1:58:c3:14:45:80:87:a9:65:4f:5c:9b:01:9c:50:
         8c:71:02:70:ff:ef:f3:d4:44:b3:e7:c1:f6:32:2e:6e:d9:b3:
         f4:30:75:1b:77:05:84:bf:18:43:29:f6:d9:c8:6c:84:83:39:
         21:5b:2f:5b:26:1e:14:99:2b:46:f1:5d:81:09:13:54:8a:6f:
         3e:b3:7e:2f:d5:b1:af:2b:af:f5:51:33:8f:e9:fd:3e:df:16:
         06:2a:3b:ac:3f:78:cd:79:05:0b:c0:d2:69:bf:89:65:ad:cc:
         11:ac:4b:6e:ee:d9:68:04:bb:96:f4:51:55:e7:85:1e:13:8c:
         56:ea:09:cc:c9:b3:ee:b3:49:7d:89:1b:72:b3:e6:68:5b:fa:
         b1:ce:bd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org