Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33362e302f32342d3234203d3e20323638373930.roa
File:                     34352e3137332e33362e302f32342d3234203d3e20323638373930.roa (raw, json)
Hash identifier:          qO1MZdp6sjZiER2s99YpS6d5YmlIi7LwtzdmsNxMv6w=
Subject key identifier:   D1:0D:59:39:23:22:9C:23:D6:8B:2B:FD:D4:3E:53:68:F7:0A:5C:70
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       6E690DC80A01EB1A1DB7AFB1F3F6C46D24CB09D0
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33362e302f32342d3234203d3e20323638373930.roa
Signing time:             Wed 15 May 2024 14:33:20 +0000
ROA not before:           Wed 15 May 2024 14:28:20 +0000
ROA not after:            Wed 14 May 2025 14:33:20 +0000
asID:                     268790
IP address blocks:        45.173.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:69:0d:c8:0a:01:eb:1a:1d:b7:af:b1:f3:f6:c4:6d:24:cb:09:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: May 15 14:28:20 2024 GMT
            Not After : May 14 14:33:20 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e2:76:c5:54:0f:4b:74:eb:a4:ca:74:08:de:
                    b0:11:df:b9:af:a3:85:15:4f:ff:fe:3b:ca:fb:4e:
                    4f:c1:9b:80:38:54:7e:2d:51:43:3a:99:9d:9f:63:
                    4a:dc:e5:15:33:82:18:f2:13:c7:18:4a:29:2e:73:
                    21:9a:e4:eb:0e:9e:a8:63:22:a4:2e:80:28:40:d8:
                    d1:cc:9e:9a:c7:65:49:15:f1:3d:10:4d:0a:d0:e9:
                    dc:01:11:b8:06:2a:a0:1c:0b:f7:f3:4b:67:75:df:
                    fb:9c:6b:50:34:4f:11:df:40:ae:9d:0e:45:c3:4a:
                    e8:49:83:73:03:5c:4d:e1:b4:e3:32:46:9b:c4:f5:
                    e8:a2:54:20:6e:49:3d:75:89:c9:0c:e3:d1:37:13:
                    00:fc:82:d3:65:3f:12:d8:3b:a4:88:b8:bb:31:3f:
                    2d:49:79:55:d0:75:ec:52:e5:6d:e5:a1:8b:ed:05:
                    ea:8f:30:ba:58:10:5d:aa:ee:c1:f6:d4:4e:37:f7:
                    ab:02:a4:fd:da:ec:c8:9c:57:02:65:1a:75:0b:b2:
                    16:e9:8d:09:8d:07:83:fa:bd:63:34:ef:3d:fe:63:
                    8a:54:4c:d7:1b:0e:67:b1:f8:38:b1:92:f8:1a:bf:
                    6f:d8:ca:3d:2f:59:ba:d5:52:aa:a6:e5:7e:07:f3:
                    81:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0D:59:39:23:22:9C:23:D6:8B:2B:FD:D4:3E:53:68:F7:0A:5C:70
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33362e302f32342d3234203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:a7:b1:bb:41:25:1a:f8:22:af:38:fa:07:b0:10:46:a5:0d:
         d9:14:6d:61:30:cc:94:5c:7a:22:8a:cc:dd:bc:1c:3b:cf:22:
         22:e0:32:9c:d0:fe:e3:24:64:3f:e4:64:d8:0a:a9:f4:aa:12:
         22:8b:09:f6:0f:be:00:f1:a9:2f:75:a2:b2:28:e5:f0:fe:19:
         ff:37:97:6e:9a:98:1c:49:f3:14:9e:c7:7e:b0:16:83:65:1d:
         db:3d:5b:de:36:d0:45:73:ac:9d:e5:28:a3:b0:b5:26:a3:44:
         f9:f4:08:a8:38:f0:cf:40:bb:84:2a:ec:f0:92:ad:81:b3:50:
         cf:6c:19:47:c3:b1:e6:bb:40:c3:d3:11:7b:f1:b4:12:b8:bc:
         01:27:69:a4:25:b5:7b:86:2f:4e:a7:a8:70:61:62:de:60:4c:
         17:1f:68:92:0f:fa:d1:a4:ee:75:d6:77:aa:9a:43:97:8e:28:
         a0:8f:57:5f:ff:39:0f:84:b1:87:58:14:7c:be:84:48:04:57:
         52:3d:bb:b1:3f:ad:72:31:72:89:56:62:1d:3e:43:5d:b0:dc:
         38:d5:87:77:a6:b6:bd:0a:39:7c:bc:08:6b:98:50:8a:9c:a9:
         11:ef:9e:8b:32:7b:98:70:3c:c9:dd:54:ab:e3:b4:9f:c3:9a:
         51:b4:71:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:51 2024 by rpki-client on console-fra.rpki-client.org