Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/34352e3137392e352e302f32342d3234203d3e20323639313230.roa
File:                     34352e3137392e352e302f32342d3234203d3e20323639313230.roa (raw, json)
Hash identifier:          VJ/QNvZ7BCrtarRe0MrRQFzsM513V6tbAATX2Rvyr2Q=
Subject key identifier:   8C:95:D0:61:82:63:E5:49:44:4E:DB:11:5C:47:97:21:05:07:25:73
Certificate issuer:       /CN=99D9815999A6E537F44A7D30D9A17CE7453F2F16
Certificate serial:       37E0214C67358C1CAF7B9CD6E9254C928724C760
Authority key identifier: 99:D9:81:59:99:A6:E5:37:F4:4A:7D:30:D9:A1:7C:E7:45:3F:2F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/34352e3137392e352e302f32342d3234203d3e20323639313230.roa
Signing time:             Wed 03 Apr 2024 23:36:41 +0000
ROA not before:           Wed 03 Apr 2024 23:31:41 +0000
ROA not after:            Wed 02 Apr 2025 23:36:41 +0000
asID:                     269120
IP address blocks:        45.179.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.crl
                          rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e0:21:4c:67:35:8c:1c:af:7b:9c:d6:e9:25:4c:92:87:24:c7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D9815999A6E537F44A7D30D9A17CE7453F2F16
        Validity
            Not Before: Apr  3 23:31:41 2024 GMT
            Not After : Apr  2 23:36:41 2025 GMT
        Subject: CN=8C95D0618263E549444EDB115C47972105072573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4e:6f:cd:63:9e:c3:c4:c0:e5:08:81:bb:29:
                    3b:a6:17:ca:ad:8b:6a:10:62:dd:7a:f8:ca:4b:c9:
                    f3:d3:41:0e:23:07:a0:40:aa:7f:ec:b3:8c:64:fc:
                    fc:53:5a:b7:7a:c8:45:29:73:79:6a:57:5f:95:53:
                    99:42:24:38:13:62:4e:07:80:78:13:e1:4e:2f:76:
                    89:ff:91:ac:ba:b7:a1:41:12:1b:b2:3a:69:b2:1b:
                    50:51:66:68:c9:91:1b:5d:63:fb:44:45:51:32:d7:
                    27:4b:cd:1d:f2:de:40:c7:82:df:09:91:da:c7:9f:
                    71:97:25:43:f2:6f:b2:9b:7a:72:7d:b7:dd:2f:a3:
                    4d:2b:b0:9f:1b:ce:c5:d8:28:69:b1:70:3e:10:c6:
                    da:2b:ed:0c:7d:94:6f:d6:4a:1a:cd:4b:b6:07:19:
                    f2:6a:38:7c:2f:b0:2f:e7:5a:70:20:5a:cf:56:99:
                    4e:c3:73:16:d6:a0:49:cb:df:66:d9:da:3d:73:50:
                    f6:3c:27:1f:ea:f1:71:a6:41:63:5a:89:ee:10:99:
                    13:cb:b7:45:98:51:fe:48:67:21:f2:99:a5:ac:e7:
                    fa:bb:f3:6b:ee:28:8d:97:e7:81:63:ed:d9:dc:8f:
                    f9:ff:d7:3d:71:c1:6f:de:0f:96:6a:c5:da:34:cc:
                    dd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:95:D0:61:82:63:E5:49:44:4E:DB:11:5C:47:97:21:05:07:25:73
            X509v3 Authority Key Identifier:
                keyid:99:D9:81:59:99:A6:E5:37:F4:4A:7D:30:D9:A1:7C:E7:45:3F:2F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/34352e3137392e352e302f32342d3234203d3e20323639313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e2:07:56:fc:14:6f:f4:af:fe:a2:c4:af:82:39:be:1e:11:11:
         52:be:78:02:29:6a:2b:9e:b3:8f:bc:40:52:f0:1a:01:89:84:
         51:a7:cd:c0:71:60:a1:95:24:34:1c:4b:2d:15:e1:34:1f:c7:
         ab:d1:4f:25:09:ed:10:b7:8b:02:6b:e2:92:08:6b:b4:26:06:
         91:09:ec:12:50:a1:75:f3:2f:0a:ec:eb:cf:3d:53:c6:c9:1b:
         52:d5:ba:fa:b7:41:68:25:cc:44:b5:a2:2e:44:76:d9:33:c1:
         2a:42:a0:43:93:92:66:4c:6f:a8:98:11:ac:78:29:a7:4e:02:
         7c:b6:46:b6:b2:fd:73:84:13:40:21:3d:f3:ef:26:ec:66:d2:
         f8:f7:63:f7:a8:0d:27:97:ac:ec:23:5c:bf:08:85:30:de:0f:
         4a:ee:5d:6f:bb:ce:98:1e:39:3b:4a:fe:11:cc:ae:d2:5a:d3:
         ab:1d:18:a5:17:78:0e:f8:52:1a:8c:42:20:51:1f:56:0b:37:
         75:d3:18:de:cf:5d:6c:ce:42:7e:f3:a3:d2:a4:7a:0d:d8:02:
         d4:8f:5a:26:4c:64:3f:79:d4:57:57:b9:35:97:0e:58:58:60:
         f1:f5:ef:c7:d5:68:b0:62:eb:f7:8a:00:92:6c:fc:46:e1:b3:
         a2:71:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org