Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa
File:                     34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa (raw, json)
Hash identifier:          w1TLqTtvX4MTiFTr7FwJaTl2NZ1STzMsr1AT5PMwpWc=
Subject key identifier:   56:36:B6:10:4E:41:18:B5:99:98:66:84:B4:29:CE:D8:83:DF:67:C8
Certificate issuer:       /CN=085B4B97D0BA72E679EC0F52343750221AD51660
Certificate serial:       04AC38E365EE9F404A15BBB15CFF7A64E79922DF
Authority key identifier: 08:5B:4B:97:D0:BA:72:E6:79:EC:0F:52:34:37:50:22:1A:D5:16:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa
Signing time:             Thu 04 Apr 2024 13:04:32 +0000
ROA not before:           Thu 04 Apr 2024 12:59:32 +0000
ROA not after:            Thu 03 Apr 2025 13:04:32 +0000
asID:                     271599
IP address blocks:        45.174.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.crl
                          rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ac:38:e3:65:ee:9f:40:4a:15:bb:b1:5c:ff:7a:64:e7:99:22:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085B4B97D0BA72E679EC0F52343750221AD51660
        Validity
            Not Before: Apr  4 12:59:32 2024 GMT
            Not After : Apr  3 13:04:32 2025 GMT
        Subject: CN=5636B6104E4118B599986684B429CED883DF67C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4f:6c:f3:7c:3b:1d:fb:e1:f7:67:f9:ac:52:
                    f3:78:ed:30:0b:9a:18:07:2b:0a:5f:a5:21:74:cc:
                    2c:e2:7f:48:05:2b:11:6c:95:14:47:48:f2:20:f7:
                    7c:12:95:15:cd:6a:67:27:42:46:d3:bf:56:a2:a3:
                    03:3f:27:d4:48:e7:ef:1f:3d:3e:94:2f:bc:ed:c2:
                    82:4c:dd:02:d9:f9:4c:0f:dc:dc:fa:d1:dd:e6:63:
                    a9:b5:dd:24:09:c5:ba:0a:f4:0d:bb:62:58:e3:f8:
                    0e:a5:28:18:40:11:a8:0a:41:6c:83:9d:d8:cb:2e:
                    92:20:a2:77:d3:25:8e:9e:84:3b:50:3c:5d:89:2b:
                    56:74:7c:6b:c6:5d:1c:c9:c7:cb:ba:e7:6a:11:cd:
                    ee:78:1c:04:8a:b2:dc:f5:d7:cd:1a:72:4c:31:77:
                    a4:d5:db:05:d1:76:54:eb:cf:de:ef:25:90:80:fc:
                    d8:93:c0:7e:b2:7d:77:40:38:18:85:d7:3e:f7:ea:
                    4e:c7:72:9b:2d:0e:f6:84:b5:05:fb:f4:47:de:17:
                    5c:3b:39:23:b7:54:b0:2d:78:7f:04:e5:73:dc:c1:
                    90:38:c9:be:95:57:cf:4c:c3:84:0e:68:de:55:23:
                    e3:7f:44:4a:db:ed:35:1b:e5:cf:96:7f:c1:81:27:
                    fc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:36:B6:10:4E:41:18:B5:99:98:66:84:B4:29:CE:D8:83:DF:67:C8
            X509v3 Authority Key Identifier:
                keyid:08:5B:4B:97:D0:BA:72:E6:79:EC:0F:52:34:37:50:22:1A:D5:16:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:2f:f4:c7:66:68:64:86:e4:18:03:11:96:06:4e:6c:c9:8a:
         8a:92:35:39:6d:88:80:65:cb:73:e2:2a:49:34:92:0a:de:1b:
         21:58:07:22:e1:07:9d:21:f4:50:f1:76:45:13:fc:66:e4:ea:
         8a:1a:d7:05:19:29:25:23:a1:0f:89:d4:95:82:1b:0d:60:2a:
         e0:7e:64:c6:8d:69:78:74:5d:ff:ec:96:d3:c9:a6:30:b7:e7:
         d4:5d:e6:3c:13:9d:33:7d:31:52:f6:62:2a:31:12:c5:8b:fb:
         d6:f3:a5:75:37:c1:9b:4d:d2:8a:2e:a8:08:12:37:c2:bd:8d:
         ca:c4:35:9b:4c:53:05:dd:c3:70:95:18:8c:25:4d:6d:2d:2e:
         7d:50:1f:f7:e4:53:4c:ea:18:4e:53:33:8b:ee:e8:ac:57:7f:
         60:0c:49:fd:4a:64:6c:dd:16:69:02:1b:77:81:e6:d9:f8:e1:
         cd:4f:6a:83:c7:90:3f:7c:a7:3d:23:80:fa:2e:06:7e:9e:15:
         1c:69:cd:8a:10:5d:bc:ee:b2:6a:07:b2:5d:75:c5:47:e6:dd:
         93:02:64:f6:18:fe:5c:6e:e9:fe:f1:fe:f9:4c:06:34:be:90:
         71:cd:aa:f3:a3:1a:ea:83:e6:37:29:e2:70:e4:db:a6:88:01:
         f0:b0:36:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org