Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/34352e3137392e362e302f32342d3234203d3e20323639313230.roa
File:                     34352e3137392e362e302f32342d3234203d3e20323639313230.roa (raw, json)
Hash identifier:          AC/35uFsn+0jdoInSIlnBgxDRWGGp26f5u0xUmvmT4I=
Subject key identifier:   D9:23:4B:40:99:25:6C:94:8A:4C:E6:BA:24:FA:B3:3D:B2:CF:C4:05
Certificate issuer:       /CN=99D9815999A6E537F44A7D30D9A17CE7453F2F16
Certificate serial:       537322ADE1F257D59225D822E9678665C41F3297
Authority key identifier: 99:D9:81:59:99:A6:E5:37:F4:4A:7D:30:D9:A1:7C:E7:45:3F:2F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/34352e3137392e362e302f32342d3234203d3e20323639313230.roa
Signing time:             Wed 03 Apr 2024 23:36:41 +0000
ROA not before:           Wed 03 Apr 2024 23:31:41 +0000
ROA not after:            Wed 02 Apr 2025 23:36:41 +0000
asID:                     269120
IP address blocks:        45.179.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.crl
                          rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:73:22:ad:e1:f2:57:d5:92:25:d8:22:e9:67:86:65:c4:1f:32:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D9815999A6E537F44A7D30D9A17CE7453F2F16
        Validity
            Not Before: Apr  3 23:31:41 2024 GMT
            Not After : Apr  2 23:36:41 2025 GMT
        Subject: CN=D9234B4099256C948A4CE6BA24FAB33DB2CFC405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:76:52:36:df:5a:33:55:e3:d8:d9:ba:76:c0:
                    cd:5a:99:d2:76:19:cd:2f:5b:af:d8:19:80:a2:ae:
                    16:a6:8b:b0:a9:31:f7:40:1d:39:2b:c1:1d:38:00:
                    12:14:70:66:1b:13:63:a9:00:cd:ae:a0:c1:8e:d1:
                    fc:c6:a4:05:ca:0d:d6:ed:36:3e:4f:85:5f:47:32:
                    b4:58:bc:82:79:23:07:54:ff:e9:4d:fa:cc:a1:16:
                    2e:88:46:05:99:99:24:80:cc:85:8b:9b:05:40:7f:
                    c9:81:7e:c5:46:a0:c0:d8:f7:1a:f6:9a:a3:cf:ba:
                    5b:66:2d:fb:da:d6:f7:3e:eb:d1:6d:2e:22:55:1c:
                    47:90:39:99:2d:2c:37:77:0a:8b:49:b6:1f:bd:d7:
                    ec:e3:cb:a7:ab:f5:40:0e:d9:60:f5:a9:21:1a:b8:
                    94:9e:97:3a:70:4b:4f:7e:a6:a0:e1:b4:5f:58:48:
                    22:d9:24:0b:7f:66:75:c5:38:5c:4c:51:d0:cd:ca:
                    3b:02:92:8c:6a:06:b4:01:2b:8f:9c:72:93:8a:d9:
                    18:89:07:cf:a0:46:f4:85:ca:ec:49:a8:8e:9d:de:
                    10:3e:4e:a6:a4:31:c3:a9:bd:92:26:20:e2:b8:5a:
                    06:0e:91:ae:b5:9c:9d:08:b5:44:55:0a:c1:81:17:
                    65:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:23:4B:40:99:25:6C:94:8A:4C:E6:BA:24:FA:B3:3D:B2:CF:C4:05
            X509v3 Authority Key Identifier:
                keyid:99:D9:81:59:99:A6:E5:37:F4:4A:7D:30:D9:A1:7C:E7:45:3F:2F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/34352e3137392e362e302f32342d3234203d3e20323639313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:74:80:33:3a:22:d5:ef:91:e6:98:a5:3d:7f:b2:2a:c6:94:
         1b:86:7f:b6:76:aa:eb:b5:58:3d:9b:f7:3f:ef:65:3d:a0:99:
         a7:f6:b1:de:cc:72:e0:f8:32:bc:5a:d0:c0:88:b4:8a:e0:29:
         71:d8:1f:fb:10:e2:8a:57:78:dc:de:10:09:dc:15:8d:67:a9:
         78:cd:43:e1:05:7f:39:85:d2:e1:b0:57:61:3e:e1:8c:8d:70:
         81:d8:98:16:20:08:5c:0a:f9:1d:3c:7e:ca:a7:14:66:87:b4:
         57:87:42:c9:a2:45:45:5d:44:d5:b2:b1:17:55:38:a5:f0:cf:
         04:8d:31:e4:e5:bd:e8:68:ff:39:f7:31:c7:3f:6c:0e:5b:a7:
         34:1b:af:10:f4:d9:cb:5e:8f:f7:44:6d:e6:2d:c2:5c:a2:d5:
         bc:30:c4:54:07:ef:d0:54:e4:51:9e:cf:43:11:d9:4b:77:92:
         06:e2:38:6b:27:54:a2:20:b1:b9:ea:a0:1d:00:a8:2c:13:05:
         b1:33:f9:c8:7b:10:ad:35:82:2e:9d:00:6f:6c:21:da:48:bf:
         30:fc:e2:71:00:4a:65:1d:62:84:47:6a:30:fb:bb:1b:fa:a8:
         3f:5e:7d:82:91:ac:f3:2b:bc:a6:6e:2b:9a:de:03:af:a5:b7:
         0a:c1:3f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org