Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa
File:                     34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa (raw, json)
Hash identifier:          AM10fA5MNM7LQYSbFnfDRESO8d41QzSOq0dN7lS7F9U=
Subject key identifier:   AD:EA:47:6A:04:A9:94:EB:07:13:EF:02:39:08:B2:1E:79:8C:66:86
Certificate issuer:       /CN=085B4B97D0BA72E679EC0F52343750221AD51660
Certificate serial:       1EE424F468DCC2F658E2A1D1577BF59C411E433D
Authority key identifier: 08:5B:4B:97:D0:BA:72:E6:79:EC:0F:52:34:37:50:22:1A:D5:16:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa
Signing time:             Thu 04 Apr 2024 13:04:32 +0000
ROA not before:           Thu 04 Apr 2024 12:59:32 +0000
ROA not after:            Thu 03 Apr 2025 13:04:32 +0000
asID:                     271599
IP address blocks:        45.174.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.crl
                          rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e4:24:f4:68:dc:c2:f6:58:e2:a1:d1:57:7b:f5:9c:41:1e:43:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085B4B97D0BA72E679EC0F52343750221AD51660
        Validity
            Not Before: Apr  4 12:59:32 2024 GMT
            Not After : Apr  3 13:04:32 2025 GMT
        Subject: CN=ADEA476A04A994EB0713EF023908B21E798C6686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5d:bd:dc:70:1d:7d:0d:c5:b7:58:36:e4:31:
                    63:3b:4c:b5:1e:8c:50:7f:e0:3b:79:56:8d:e7:2c:
                    1a:83:19:f9:08:b1:7e:a6:51:58:b6:c1:28:63:f5:
                    90:0a:ea:b0:4f:dc:27:e2:5a:54:5a:9c:ca:de:94:
                    f0:20:ea:9a:b9:c5:59:53:0a:77:36:37:74:9f:ff:
                    d0:6f:a6:a6:cd:14:cb:1e:3a:93:c0:c5:6e:ed:2c:
                    3b:65:b6:26:d2:0b:27:d1:15:f4:af:70:e3:d5:a6:
                    4c:f6:0b:54:6c:5a:72:74:83:33:86:20:42:94:cf:
                    39:aa:86:bd:bd:9b:cb:4f:57:4d:55:64:9f:51:58:
                    56:d3:4d:bd:31:95:9c:a1:6c:6b:cb:18:f5:16:8f:
                    dd:6b:2e:ed:f6:fe:f0:82:76:d1:57:4f:60:c7:5f:
                    f9:44:9e:d7:14:74:3a:e9:26:89:0b:aa:fa:73:6c:
                    30:d4:91:6d:a8:6b:fd:3a:13:c1:07:fd:9d:e6:d4:
                    0d:13:62:e7:39:81:3c:cb:e2:61:a8:c1:31:c4:d4:
                    dc:9d:6f:5b:43:7a:0f:69:93:a5:45:cc:fd:a9:19:
                    2c:a1:b9:24:14:07:0a:d9:1f:65:d3:e9:e2:0a:81:
                    7f:e2:d2:a8:0f:31:17:de:c5:92:01:20:9f:ee:ea:
                    1a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EA:47:6A:04:A9:94:EB:07:13:EF:02:39:08:B2:1E:79:8C:66:86
            X509v3 Authority Key Identifier:
                keyid:08:5B:4B:97:D0:BA:72:E6:79:EC:0F:52:34:37:50:22:1A:D5:16:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:88:9d:d1:e8:75:31:ce:0f:70:3f:41:2a:78:e5:a0:ef:9d:
         55:55:d2:78:86:41:92:71:8f:c7:03:2d:42:f0:a2:32:9f:85:
         21:d2:7a:96:39:a1:63:3d:83:07:41:2f:07:18:81:c6:d4:ae:
         3d:07:f0:69:26:e9:df:bf:93:3d:08:ee:6d:c6:58:ad:54:59:
         b5:ca:0d:91:8d:d8:78:5c:bf:29:59:56:87:37:4f:1f:8a:c3:
         d4:b2:7f:ac:32:6f:12:7b:89:2a:af:7e:ba:24:2f:6b:b1:c2:
         c9:d4:33:7e:52:4b:ab:d3:85:3a:25:34:d1:af:85:87:54:b6:
         c5:fa:b3:63:e9:26:28:4e:13:ac:b8:ca:b8:f9:53:93:d7:db:
         f8:47:e8:30:96:62:12:97:c2:13:2c:88:c4:a8:ce:d9:26:3f:
         d7:b2:fe:51:3b:a4:13:d3:e7:cc:3e:5e:1c:d7:5d:12:09:05:
         b0:98:c0:a1:a6:c2:78:56:c7:0e:47:2b:62:0c:1e:73:b1:54:
         08:30:24:0e:4f:16:dc:4c:ce:cd:2e:22:96:09:55:2e:55:95:
         bd:3d:4d:7f:da:4c:ef:68:6e:61:bf:f9:31:01:15:e4:42:57:
         53:d2:63:98:52:a4:22:c3:97:d6:db:0f:01:97:10:15:6d:e4:
         f8:39:98:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:37 2024 by rpki-client on console-ams.rpki-client.org