Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39352e302f32342d3234203d3e20323639313735.roa
File:                     34352e3138312e39352e302f32342d3234203d3e20323639313735.roa (raw, json)
Hash identifier:          1oY7FtDZ/o3AJipI3DGTsDD5HBCmtWkfvnscc/EGHNk=
Subject key identifier:   BB:96:E8:0C:42:AA:70:43:FA:9E:3C:31:68:D4:EA:B4:75:77:45:61
Certificate issuer:       /CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Certificate serial:       4B7364ED935D53AC6B4936755AB60A67E37067B4
Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39352e302f32342d3234203d3e20323639313735.roa
Signing time:             Tue 10 Sep 2024 19:50:27 +0000
ROA not before:           Tue 10 Sep 2024 19:45:27 +0000
ROA not after:            Tue 09 Sep 2025 19:50:27 +0000
asID:                     269175
IP address blocks:        45.181.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:73:64:ed:93:5d:53:ac:6b:49:36:75:5a:b6:0a:67:e3:70:67:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
        Validity
            Not Before: Sep 10 19:45:27 2024 GMT
            Not After : Sep  9 19:50:27 2025 GMT
        Subject: CN=BB96E80C42AA7043FA9E3C3168D4EAB475774561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:ce:17:50:c8:3d:0e:d4:4c:e5:fd:ae:d7:
                    bf:3d:56:a7:94:cf:b4:6f:ba:e9:4f:be:6f:a4:6a:
                    bf:c7:7c:e6:d4:e2:bb:ca:3a:41:46:63:e2:10:b4:
                    db:f3:0b:bf:6d:fc:c9:27:28:0e:09:e7:dd:58:20:
                    8f:c9:4f:fd:18:89:a7:64:bc:7b:77:e0:23:38:ad:
                    db:98:62:38:9d:62:b7:23:3b:0e:6a:02:17:41:d0:
                    e2:46:00:01:03:2a:7f:72:03:ac:32:23:46:2f:0d:
                    b4:05:1f:53:57:a4:ce:8e:75:cc:61:30:03:50:dc:
                    c2:7e:57:4c:8d:ba:84:84:c6:6c:8c:ac:c2:62:6e:
                    5b:37:0d:05:75:5b:c6:1e:7d:9f:75:ea:ef:eb:43:
                    8e:c6:a6:c3:2c:1b:97:9b:5c:ea:43:4e:c1:59:53:
                    d0:c3:60:96:f7:42:01:cc:80:cd:71:bf:01:cf:fd:
                    12:b5:93:0b:03:17:d6:ca:dd:b0:43:07:3a:d7:ed:
                    34:1a:04:b4:5d:db:a5:61:4b:af:91:49:a1:b3:f8:
                    18:e5:e6:80:70:73:1b:78:4f:3f:01:94:f0:75:09:
                    68:e2:be:8b:3f:d4:1a:7d:7a:9c:a4:f0:ae:e6:8c:
                    b6:18:f3:11:68:1f:5c:87:4e:95:3d:b9:73:49:e5:
                    8f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:96:E8:0C:42:AA:70:43:FA:9E:3C:31:68:D4:EA:B4:75:77:45:61
            X509v3 Authority Key Identifier:
                keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39352e302f32342d3234203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:72:69:89:4c:6f:25:57:ba:08:75:a9:0f:40:f2:2a:24:03:
         c6:ee:27:ce:f2:29:e9:25:a8:12:55:8f:f8:80:c1:a7:cd:bb:
         0b:2b:cc:29:c9:8a:c5:46:93:c1:27:b5:1d:d0:04:a3:69:88:
         31:45:a2:df:05:74:be:b6:6d:f6:29:8e:34:6d:ca:ed:40:52:
         aa:60:71:01:52:ae:52:d7:1c:f7:36:ce:0a:ec:77:60:d2:15:
         bf:2a:31:b5:cc:87:6c:cc:a0:8a:60:d8:a4:5c:20:43:13:29:
         af:30:24:7c:12:eb:af:1a:ff:f2:44:77:b8:8f:91:0e:b8:15:
         d4:c1:7b:7d:3c:a8:0c:36:4d:e6:4b:f1:32:56:9b:d6:c9:56:
         41:c6:03:85:43:b6:88:21:b0:3c:b6:75:c8:a1:9d:eb:f1:1d:
         54:10:26:bb:54:b5:f3:c9:82:1d:12:73:cc:20:11:90:1e:3a:
         ff:b3:4b:f6:7d:62:07:cc:05:cf:12:06:3c:54:4e:85:ef:31:
         1d:a2:a2:97:71:a7:34:d0:ce:33:37:ee:6c:95:7c:7b:29:47:
         5e:6d:d2:cb:e4:e1:05:54:7d:58:06:4c:4c:a4:92:82:3e:68:
         09:30:52:e0:b4:ec:3f:27:5e:9a:1f:11:53:c6:fc:e5:cf:e5:
         5f:b4:df:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:09 2024 by rpki-client on console-fra.rpki-client.org