Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/34352e3136382e3136392e302f32342d3234203d3e20323638303737.roa
File:                     34352e3136382e3136392e302f32342d3234203d3e20323638303737.roa (raw, json)
Hash identifier:          m/WjKOe301DDPpmet3z64bPHpt0zRPvjGU6B+u6VziQ=
Subject key identifier:   AE:7C:68:7B:A0:AA:58:E5:D9:9B:EA:77:D4:2F:12:71:58:CD:DB:CA
Certificate issuer:       /CN=EEAED5639DA591A226FB7469252567652499ADA3
Certificate serial:       58155A51F2C99F3BE8F5B817ED0EB4D159C67B86
Authority key identifier: EE:AE:D5:63:9D:A5:91:A2:26:FB:74:69:25:25:67:65:24:99:AD:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/34352e3136382e3136392e302f32342d3234203d3e20323638303737.roa
Signing time:             Thu 08 Aug 2024 12:46:48 +0000
ROA not before:           Thu 08 Aug 2024 12:41:48 +0000
ROA not after:            Thu 07 Aug 2025 12:46:48 +0000
asID:                     268077
IP address blocks:        45.168.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.crl
                          rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:15:5a:51:f2:c9:9f:3b:e8:f5:b8:17:ed:0e:b4:d1:59:c6:7b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEAED5639DA591A226FB7469252567652499ADA3
        Validity
            Not Before: Aug  8 12:41:48 2024 GMT
            Not After : Aug  7 12:46:48 2025 GMT
        Subject: CN=AE7C687BA0AA58E5D99BEA77D42F127158CDDBCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4a:b6:a4:b2:c5:01:2d:c9:bd:ee:de:1e:fa:
                    9f:09:08:4b:88:c0:fa:09:45:b6:53:ca:7d:83:5a:
                    91:33:3d:42:e3:50:b4:6f:6e:21:c9:07:55:8a:8b:
                    a2:3d:f7:97:fe:34:99:7e:42:26:fe:ea:8a:be:18:
                    fa:8c:98:5b:c3:dc:d1:25:0c:85:37:f2:14:f1:41:
                    24:64:6e:4e:35:30:55:bd:37:90:26:d5:98:ba:30:
                    61:f5:76:53:99:ff:af:42:40:79:4c:a7:27:c8:b2:
                    d8:95:1c:44:21:cc:97:ef:d3:08:74:2b:40:3a:41:
                    b2:6a:38:03:0c:09:2b:74:78:72:d1:64:ea:fa:a7:
                    a8:17:0e:df:fc:df:94:e7:c4:93:9d:e4:0e:73:14:
                    01:51:50:95:c2:2a:54:d5:a7:a7:1b:8a:c8:cb:8e:
                    09:6e:13:6c:19:1e:60:ea:51:95:f8:bf:54:26:c9:
                    7e:49:f9:4d:bf:67:58:c6:4c:78:52:8d:1f:f9:c2:
                    17:a1:49:08:76:d7:ba:86:7d:90:84:25:a9:a2:29:
                    78:0d:85:e1:45:b0:f3:2d:a5:80:ef:dd:5f:ac:22:
                    3a:8d:b0:10:16:04:7a:48:fa:22:c6:c0:de:95:b7:
                    33:f0:b1:31:0b:04:cd:62:0d:29:61:f8:4e:89:ce:
                    55:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7C:68:7B:A0:AA:58:E5:D9:9B:EA:77:D4:2F:12:71:58:CD:DB:CA
            X509v3 Authority Key Identifier:
                keyid:EE:AE:D5:63:9D:A5:91:A2:26:FB:74:69:25:25:67:65:24:99:AD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/34352e3136382e3136392e302f32342d3234203d3e20323638303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:65:95:8f:0b:a8:8f:f1:ed:2b:b3:37:6e:17:a7:bf:a2:8e:
         83:86:94:93:2d:70:19:f1:06:3f:89:3f:9c:5a:b7:ea:8c:f8:
         ae:a4:ca:cd:b4:65:0b:64:3c:e5:5e:50:c6:51:c8:85:12:90:
         0e:71:63:1e:88:e9:2e:0a:68:98:e2:55:26:13:79:43:34:e8:
         07:e7:00:8d:b8:bd:cc:cf:7e:67:48:ad:92:12:5c:aa:d3:f8:
         10:e5:b5:ea:aa:1f:06:ea:f3:1e:b6:83:d8:1d:28:6e:a6:e0:
         36:64:51:8b:5c:94:bb:be:3a:3a:ce:3c:ce:3e:eb:e8:1a:94:
         a4:e2:aa:a2:6b:6b:90:58:e9:2a:1f:f9:10:6d:cb:6b:7b:d9:
         d7:17:af:60:99:e8:1e:81:58:00:6e:bd:f1:f6:d0:63:9f:ec:
         12:69:bb:e0:80:24:40:0d:6c:26:df:88:4e:3b:9c:6a:70:e0:
         ee:73:2a:9a:7b:18:e7:bf:fe:f6:0e:a6:53:ce:c2:18:9c:d1:
         b5:e6:ea:0a:ce:54:85:12:96:e0:82:0a:33:2d:ac:2d:4c:be:
         35:c7:bb:21:05:4d:31:9b:66:3e:57:d5:97:b1:52:5c:f5:14:
         5e:d2:53:98:56:3a:f3:81:5a:49:8d:15:17:67:66:08:92:fd:
         2f:5b:3f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:01 2024 by rpki-client on console-ams.rpki-client.org