Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/34352e3137392e342e302f32342d3234203d3e20323639313230.roa
File:                     34352e3137392e342e302f32342d3234203d3e20323639313230.roa (raw, json)
Hash identifier:          AeQAgDKMtN2Il5iFsomReYv/IyxvcDbnZkvRvj7FqNs=
Subject key identifier:   19:42:42:10:34:EE:F4:5F:F6:A2:EF:C6:45:E7:F3:1F:36:E4:A3:BA
Certificate issuer:       /CN=99D9815999A6E537F44A7D30D9A17CE7453F2F16
Certificate serial:       07483653645A557E4F2B43B92E13ACDCB4A3B30F
Authority key identifier: 99:D9:81:59:99:A6:E5:37:F4:4A:7D:30:D9:A1:7C:E7:45:3F:2F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/34352e3137392e342e302f32342d3234203d3e20323639313230.roa
Signing time:             Wed 03 Apr 2024 23:36:41 +0000
ROA not before:           Wed 03 Apr 2024 23:31:41 +0000
ROA not after:            Wed 02 Apr 2025 23:36:41 +0000
asID:                     269120
IP address blocks:        45.179.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.crl
                          rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 21:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:48:36:53:64:5a:55:7e:4f:2b:43:b9:2e:13:ac:dc:b4:a3:b3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D9815999A6E537F44A7D30D9A17CE7453F2F16
        Validity
            Not Before: Apr  3 23:31:41 2024 GMT
            Not After : Apr  2 23:36:41 2025 GMT
        Subject: CN=1942421034EEF45FF6A2EFC645E7F31F36E4A3BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:94:66:9b:a4:56:0b:28:ea:d5:b1:cd:7c:
                    44:99:48:05:f7:bc:cd:65:44:30:42:21:5b:16:e1:
                    57:da:3b:e2:df:ab:fb:f6:b9:24:92:a5:aa:61:f1:
                    5b:bb:16:f6:10:45:8b:8a:3a:86:85:f4:79:9a:ab:
                    93:40:6a:33:2a:8b:d3:a7:7f:55:8a:cf:a5:a3:03:
                    5d:5d:33:9d:bb:a9:27:1a:84:bc:b4:38:1a:2f:aa:
                    43:d2:29:b6:01:57:ae:59:17:75:f4:63:91:3f:24:
                    f8:fc:00:a4:38:e3:e6:a0:6c:a0:e7:64:05:29:2b:
                    cc:b5:65:cb:64:ec:6c:f1:42:06:b8:6a:9e:2a:6e:
                    a8:f5:62:a4:c5:2b:ce:96:b3:36:ad:39:82:ff:51:
                    e6:a7:f9:18:1f:fa:9f:b6:af:da:3a:bd:23:e1:7e:
                    9d:c6:d6:62:51:0c:51:a9:f2:13:78:66:2c:aa:ab:
                    f3:6a:a3:1e:8c:3f:37:92:27:f5:4d:09:c8:ed:00:
                    3e:e7:ff:89:2e:21:88:d7:c3:d3:91:b9:27:46:c4:
                    de:0a:d1:44:5b:47:b7:68:12:c9:be:32:62:31:e8:
                    87:f9:7d:bf:d2:a9:6d:2a:37:62:49:2d:38:e1:2f:
                    51:95:9f:0b:49:d5:8d:e0:35:65:ec:e8:16:a2:c7:
                    ab:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:42:42:10:34:EE:F4:5F:F6:A2:EF:C6:45:E7:F3:1F:36:E4:A3:BA
            X509v3 Authority Key Identifier:
                keyid:99:D9:81:59:99:A6:E5:37:F4:4A:7D:30:D9:A1:7C:E7:45:3F:2F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/34352e3137392e342e302f32342d3234203d3e20323639313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:37:08:99:64:32:14:26:04:98:19:ac:8a:49:bb:f5:b5:00:
         3e:31:ea:1a:0a:e8:90:d9:6a:2e:c1:ee:f7:7d:48:75:16:3f:
         4b:53:14:2a:a1:d8:29:e0:40:22:b7:ba:97:bd:74:43:08:46:
         02:6d:d9:45:37:90:95:ef:cd:9c:88:16:af:fa:d9:fd:0e:74:
         60:c8:66:7b:eb:62:e7:21:38:ce:72:2d:fa:1a:47:da:37:90:
         9d:36:7a:9d:22:f2:79:4b:43:e3:33:4a:c5:a3:3e:d5:ef:4d:
         f2:3c:83:00:55:d9:b5:42:32:04:d2:94:2f:df:21:14:a1:1d:
         7f:67:57:1b:b1:27:af:72:11:32:0e:2d:79:1e:f1:b0:80:c0:
         0a:2b:0c:d6:98:a7:46:67:04:d9:aa:fc:6e:ad:47:47:b1:23:
         31:fd:dd:c9:2f:d4:39:cb:72:66:bb:16:36:5d:a0:e9:a3:87:
         b8:97:16:b7:ee:98:4e:48:14:4a:c6:d3:bc:f1:14:20:bb:89:
         ca:9d:23:26:0b:80:23:37:7d:72:f5:9b:31:da:a7:27:b0:24:
         19:23:63:c5:ce:62:75:0c:20:c5:4b:0d:9e:c7:bc:e8:70:fc:
         8e:7a:8b:b1:0f:fb:f3:92:11:13:9c:da:32:60:b1:ec:bf:52:
         51:1e:35:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:38:32 2024 by rpki-client on console-ams.rpki-client.org