Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/34352e3137342e3139382e302f32342d3234203d3e20323731353939.roa
File:                     34352e3137342e3139382e302f32342d3234203d3e20323731353939.roa (raw, json)
Hash identifier:          MM6/+cd6XFpXo6FPqtyW0NMnlkjUWb9oma4ZbAkNfvo=
Subject key identifier:   85:A4:1C:3E:7A:37:AA:61:E8:5C:30:DB:E9:D6:56:D2:E6:3D:09:76
Certificate issuer:       /CN=085B4B97D0BA72E679EC0F52343750221AD51660
Certificate serial:       567DFEA950AE12F4CF529BC93967F9780F523A4B
Authority key identifier: 08:5B:4B:97:D0:BA:72:E6:79:EC:0F:52:34:37:50:22:1A:D5:16:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/34352e3137342e3139382e302f32342d3234203d3e20323731353939.roa
Signing time:             Thu 04 Apr 2024 13:04:32 +0000
ROA not before:           Thu 04 Apr 2024 12:59:32 +0000
ROA not after:            Thu 03 Apr 2025 13:04:32 +0000
asID:                     271599
IP address blocks:        45.174.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.crl
                          rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7d:fe:a9:50:ae:12:f4:cf:52:9b:c9:39:67:f9:78:0f:52:3a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085B4B97D0BA72E679EC0F52343750221AD51660
        Validity
            Not Before: Apr  4 12:59:32 2024 GMT
            Not After : Apr  3 13:04:32 2025 GMT
        Subject: CN=85A41C3E7A37AA61E85C30DBE9D656D2E63D0976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:99:96:83:ca:f1:c5:45:ef:f7:63:1a:98:92:
                    0a:23:e7:ad:b9:a9:dd:48:73:11:7a:88:22:01:28:
                    0e:2a:e7:2f:64:1d:b6:01:5d:a2:34:e7:56:ff:97:
                    85:e6:36:e5:de:41:1c:32:99:f5:e1:a1:26:89:df:
                    e5:d9:d6:d3:fd:4d:a8:4f:b3:7c:23:99:46:5d:9f:
                    2f:2b:65:cc:3c:fe:d3:4f:12:80:0a:5b:94:4f:b0:
                    c3:7f:3f:3e:2e:e6:bf:28:b1:5a:06:32:87:87:d4:
                    e5:08:34:d9:ef:be:a1:0b:fb:8a:4f:1d:94:69:59:
                    1d:60:26:5d:a7:32:bc:33:08:b8:ba:90:98:1b:e0:
                    69:da:9e:8a:bd:1f:a4:cb:9d:37:cf:b5:bc:54:0b:
                    63:07:cb:c7:2a:8b:a1:5a:2a:43:63:8c:51:8e:c5:
                    c5:cb:b1:3a:c9:24:35:39:f9:55:0d:fd:23:f2:74:
                    9b:17:b4:bf:aa:9c:2b:75:d7:c8:a6:08:4f:fd:29:
                    81:ba:b0:5a:41:54:b6:23:97:52:1c:b8:95:50:c4:
                    f7:64:cf:0b:c2:cc:74:68:29:c1:12:8c:24:38:94:
                    91:2c:de:40:89:7d:30:d1:2c:15:8e:59:95:f0:6c:
                    40:1e:15:10:30:b7:2a:cb:8d:6c:56:37:d9:25:e1:
                    c1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A4:1C:3E:7A:37:AA:61:E8:5C:30:DB:E9:D6:56:D2:E6:3D:09:76
            X509v3 Authority Key Identifier:
                keyid:08:5B:4B:97:D0:BA:72:E6:79:EC:0F:52:34:37:50:22:1A:D5:16:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/34352e3137342e3139382e302f32342d3234203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:45:0e:92:e3:a2:48:e1:fa:3e:de:01:88:0b:21:b7:b3:c9:
         01:09:d9:b2:14:bc:1e:ee:41:99:e6:1f:4b:98:77:3a:f5:c1:
         18:c3:69:06:fe:ef:19:d5:b3:56:73:5d:8c:e6:d2:87:ff:98:
         4d:d7:2e:15:dc:f9:34:41:99:29:5c:ad:dc:85:ca:1a:c9:f9:
         98:aa:ed:e6:e5:19:ca:e1:4a:9a:a5:98:10:0a:55:2f:97:a3:
         45:12:9d:7b:b6:05:33:05:b6:19:11:01:72:56:3e:e8:09:51:
         bb:8d:a3:3d:ea:b7:b9:23:f0:86:58:f9:b4:c7:51:3c:64:c7:
         2d:a6:67:be:6d:0d:72:25:5a:4f:f7:67:d3:3e:b2:f3:81:72:
         c8:68:46:ed:85:95:81:b4:c9:c2:28:14:b1:67:ef:0c:47:8f:
         c9:a7:76:55:8f:fb:91:e3:49:bc:c6:96:2d:77:87:ac:27:dc:
         25:2e:51:d4:de:a5:1a:b4:b3:d2:1b:53:34:2e:ed:f1:56:29:
         e6:6b:8f:7d:2a:51:d3:e7:65:06:b4:17:cb:ce:9f:8a:c7:47:
         cb:9f:8e:b8:57:09:a0:cc:b0:86:0b:f8:bc:44:76:5b:57:42:
         5b:3a:ed:67:ab:94:67:13:d5:3a:78:42:f3:f9:6e:ca:54:1c:
         00:66:9b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org