Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa
File:                     34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa (raw, json)
Hash identifier:          ZufcBWue91JEPC6CwktDSraRyhtFjRlBYRPtTkg2xKc=
Subject key identifier:   B1:89:3D:87:E7:65:61:01:00:DD:D8:47:0B:80:89:C0:A4:5F:8A:0C
Certificate issuer:       /CN=759056D29FFF39251355512175D35C57E1A33318
Certificate serial:       19E6DB5799D7E00D12D4870049763DB08CECA69B
Authority key identifier: 75:90:56:D2:9F:FF:39:25:13:55:51:21:75:D3:5C:57:E1:A3:33:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759056D29FFF39251355512175D35C57E1A33318.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa
Signing time:             Tue 21 May 2024 15:20:15 +0000
ROA not before:           Tue 21 May 2024 15:15:15 +0000
ROA not after:            Tue 20 May 2025 15:20:15 +0000
asID:                     268763
IP address blocks:        45.172.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.crl
                          rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759056D29FFF39251355512175D35C57E1A33318.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 07:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e6:db:57:99:d7:e0:0d:12:d4:87:00:49:76:3d:b0:8c:ec:a6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759056D29FFF39251355512175D35C57E1A33318
        Validity
            Not Before: May 21 15:15:15 2024 GMT
            Not After : May 20 15:20:15 2025 GMT
        Subject: CN=B1893D87E765610100DDD8470B8089C0A45F8A0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4b:e6:47:31:0e:3b:c0:61:8c:7f:63:af:73:
                    0c:ce:39:91:b0:f1:b3:04:b4:e9:a4:73:73:11:20:
                    ed:21:94:c9:bb:1f:63:b0:ee:9c:a2:f6:b3:1a:93:
                    26:51:05:6f:95:70:4b:3d:4e:85:c1:2e:39:b6:88:
                    84:55:fd:d9:8f:ac:79:76:e1:bd:d7:4b:13:77:5c:
                    dc:b7:84:03:65:8b:b3:8e:58:a3:4a:23:1b:e4:94:
                    d0:03:a1:0c:bb:3d:fd:1e:88:cc:25:ec:63:76:65:
                    f1:aa:27:17:38:71:48:af:0f:e1:b8:a5:d1:78:47:
                    73:e8:4c:2f:90:c2:57:1c:4e:dc:30:b9:22:9d:41:
                    10:cb:cd:86:16:9f:dc:a9:36:7a:c9:1c:27:24:2f:
                    51:4f:d7:95:f2:57:35:ef:b1:1b:83:db:ed:90:59:
                    65:cd:00:10:ba:06:71:12:2a:8e:ee:6f:14:e6:fa:
                    72:2b:19:9e:5f:e1:8f:fe:e6:2b:63:3e:6c:7a:14:
                    36:77:af:43:89:7c:3f:6b:c1:5d:be:36:e2:89:81:
                    a7:0f:94:7d:47:04:5a:3e:46:3d:f5:65:b5:d1:26:
                    8b:40:5c:7d:5a:bc:2a:05:32:bf:17:32:d9:70:23:
                    b3:94:d6:c4:96:12:19:a2:d1:db:ca:03:b3:74:89:
                    79:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:89:3D:87:E7:65:61:01:00:DD:D8:47:0B:80:89:C0:A4:5F:8A:0C
            X509v3 Authority Key Identifier:
                keyid:75:90:56:D2:9F:FF:39:25:13:55:51:21:75:D3:5C:57:E1:A3:33:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759056D29FFF39251355512175D35C57E1A33318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:ac:80:87:28:7b:17:54:a5:c7:26:17:7d:c5:bb:5d:52:de:
         1b:a4:9b:ad:b9:fd:a2:d1:0f:cc:ec:f3:88:ec:fa:a7:45:03:
         3f:17:8f:53:d2:f9:76:2b:3f:2a:21:10:a9:4e:94:f6:00:66:
         a9:ff:3d:18:44:fc:7c:7e:35:13:d0:16:25:81:19:99:9f:b0:
         06:b4:c1:d8:19:3e:c1:95:53:8d:99:3a:f9:5a:a1:83:44:ce:
         48:55:59:23:43:44:e7:b6:01:39:53:48:56:bc:f7:ce:7f:e2:
         75:81:2f:1a:a7:7e:00:f4:b3:20:b8:98:57:2f:95:f6:fe:64:
         3e:7a:02:8e:a6:cb:2f:cf:78:12:9b:2d:ed:67:cf:19:5e:d6:
         55:a6:c6:9b:48:cf:8d:ec:e7:1a:01:82:98:a1:77:36:9e:a9:
         bb:32:6d:7b:34:65:01:7c:8e:90:c0:7b:a1:9e:51:53:cd:3f:
         96:9c:27:94:06:ef:86:da:40:78:86:59:40:c3:dc:74:de:f8:
         2a:e0:f4:e1:f5:27:66:cc:8b:2d:42:2b:91:d3:50:be:e1:4b:
         23:31:11:c5:5c:ae:88:9e:a9:25:6b:48:b3:e6:2f:4a:1b:ff:
         ae:91:c8:b5:c4:e4:52:d1:82:e8:5e:7f:39:46:0c:3b:fa:5d:
         ff:33:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 06:27:32 2024 by rpki-client on console-fra.rpki-client.org