Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/1/34352e3138352e33392e302f32342d3234203d3e20323639343431.roa
File:                     34352e3138352e33392e302f32342d3234203d3e20323639343431.roa (raw, json)
Hash identifier:          DuY7g/Nuaz3126yK/y08HSMLW7ZhA6PuBYAaXwwrBPw=
Subject key identifier:   71:9B:77:BB:04:54:94:97:37:1F:16:A8:90:1C:2D:84:D6:3E:6B:E3
Certificate issuer:       /CN=7BDB8E46A577D9E35DC75F64051C0386B874A16F
Certificate serial:       6420763E0EE312170658F514B2FEE296979CAEFE
Authority key identifier: 7B:DB:8E:46:A5:77:D9:E3:5D:C7:5F:64:05:1C:03:86:B8:74:A1:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDB8E46A577D9E35DC75F64051C0386B874A16F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/1/34352e3138352e33392e302f32342d3234203d3e20323639343431.roa
Signing time:             Thu 04 Apr 2024 21:51:02 +0000
ROA not before:           Thu 04 Apr 2024 21:46:02 +0000
ROA not after:            Thu 03 Apr 2025 21:51:02 +0000
asID:                     269441
IP address blocks:        45.185.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/1/7BDB8E46A577D9E35DC75F64051C0386B874A16F.crl
                          rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/1/7BDB8E46A577D9E35DC75F64051C0386B874A16F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDB8E46A577D9E35DC75F64051C0386B874A16F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:20:76:3e:0e:e3:12:17:06:58:f5:14:b2:fe:e2:96:97:9c:ae:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BDB8E46A577D9E35DC75F64051C0386B874A16F
        Validity
            Not Before: Apr  4 21:46:02 2024 GMT
            Not After : Apr  3 21:51:02 2025 GMT
        Subject: CN=719B77BB04549497371F16A8901C2D84D63E6BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:0a:ea:46:55:83:ab:4e:bf:cf:ec:82:6a:
                    72:66:ca:20:46:b5:f8:e9:34:8b:f6:04:38:f5:0b:
                    fd:54:09:ce:80:ef:2b:3d:1b:c2:ab:2c:1c:8f:06:
                    b1:f9:91:ad:82:82:16:89:68:1c:76:4d:e1:5a:34:
                    45:90:78:4f:d9:20:00:70:b4:d7:2f:ee:69:5a:0e:
                    0e:46:48:9e:9b:e2:0d:ec:2b:f9:a8:ad:ab:dd:88:
                    d9:ea:32:d7:b4:8b:fa:17:85:2e:b7:61:57:71:ed:
                    04:49:61:8b:24:c1:aa:57:0a:3f:1c:87:33:0a:6e:
                    92:c8:29:71:9f:a9:22:9f:39:71:2d:64:c7:ed:63:
                    28:45:1c:ab:e1:70:07:3d:0b:ef:8a:09:5e:bd:79:
                    a1:aa:be:5c:67:08:4e:e1:20:9e:70:68:83:de:ab:
                    58:54:f5:46:f6:3f:c5:93:bd:09:b2:5f:54:2b:0b:
                    e5:d4:b9:84:68:27:e0:80:4a:2f:a3:54:f3:d1:0a:
                    6d:58:30:f5:06:26:2d:5f:fc:3f:c7:c6:87:6a:1a:
                    c4:ab:4a:d0:b4:8a:1b:63:db:da:60:1a:cb:53:25:
                    07:7b:f6:4d:e6:30:78:e8:7a:b9:4e:0b:60:5f:51:
                    09:26:a9:5c:27:72:34:7c:aa:df:48:99:56:f9:af:
                    3f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9B:77:BB:04:54:94:97:37:1F:16:A8:90:1C:2D:84:D6:3E:6B:E3
            X509v3 Authority Key Identifier:
                keyid:7B:DB:8E:46:A5:77:D9:E3:5D:C7:5F:64:05:1C:03:86:B8:74:A1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/1/7BDB8E46A577D9E35DC75F64051C0386B874A16F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDB8E46A577D9E35DC75F64051C0386B874A16F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/1/34352e3138352e33392e302f32342d3234203d3e20323639343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:10:ff:47:0e:43:7e:78:85:a8:8b:8e:ec:52:33:7f:d3:06:
         77:8d:c6:96:b1:e1:d1:c6:98:9e:64:28:33:62:d1:8b:88:2a:
         0f:cb:1f:b0:0d:d6:4f:17:01:ba:49:32:dd:71:3c:09:95:2e:
         e5:46:fc:60:d1:cc:65:f9:92:cc:8c:c2:5a:c9:4b:22:23:c4:
         1d:84:47:b8:d5:d6:dc:8f:ac:11:fc:9f:71:63:b5:80:ca:98:
         c6:10:13:ee:66:a1:38:e8:0b:2c:37:40:ae:2d:c2:57:4d:f3:
         fc:de:a6:e2:ef:18:9f:10:e3:51:6e:bd:51:c5:52:71:14:a5:
         19:71:d7:d6:ba:1a:35:91:69:cb:c7:1d:77:68:d4:b8:b8:3a:
         22:b2:ca:57:6a:8f:9d:bd:04:5e:f3:7e:e7:87:42:af:07:e3:
         13:fb:33:cc:a2:2c:a7:27:77:13:44:ba:e2:a9:a5:ee:11:99:
         b1:56:69:3e:a1:5e:6b:bf:6c:ab:e4:d4:14:72:5f:5a:8f:f3:
         bf:bc:00:fa:eb:ae:28:3b:b2:a7:d2:8f:bb:ed:a9:a8:6d:1e:
         32:e0:82:c4:93:7d:68:7b:1c:9f:4c:5e:d8:aa:83:50:56:43:
         2f:2a:cc:a8:15:08:73:a8:ef:6d:c0:c4:2f:63:c7:ea:3c:ff:
         4c:f5:14:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:15 2024 by rpki-client on console-ams.rpki-client.org