Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa
File:                     34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa (raw, json)
Hash identifier:          0VRrHUdimTkaXspxbS/4Sp0Ch0xMwBedZvJCw0ZPnmM=
Subject key identifier:   BD:A9:3F:C1:79:D6:B0:B5:6A:0C:D4:A8:9A:C3:35:46:F6:2B:30:AD
Certificate issuer:       /CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
Certificate serial:       1BBED7A0F853A5BFF7C066B3819459B3CAB41D85
Authority key identifier: 79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa
Signing time:             Wed 05 Jun 2024 17:49:58 +0000
ROA not before:           Wed 05 Jun 2024 17:44:58 +0000
ROA not after:            Wed 04 Jun 2025 17:49:58 +0000
asID:                     269595
IP address blocks:        45.188.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 09:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:be:d7:a0:f8:53:a5:bf:f7:c0:66:b3:81:94:59:b3:ca:b4:1d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
        Validity
            Not Before: Jun  5 17:44:58 2024 GMT
            Not After : Jun  4 17:49:58 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f6:31:8c:43:52:03:e2:57:d4:0e:21:6b:37:
                    5b:c3:ab:18:f3:41:a3:70:09:38:a8:6e:7e:fc:92:
                    0a:f9:17:47:25:d7:cf:d8:e2:c5:41:62:93:24:b9:
                    61:32:81:77:a8:8a:d5:13:a2:58:53:43:dd:bc:79:
                    c0:7d:a8:30:77:5a:71:a4:eb:8c:43:d7:4c:60:dd:
                    ee:51:8b:61:9d:6c:9a:64:a3:60:96:65:15:0f:de:
                    d8:27:d6:e3:22:4d:ad:b3:7a:b9:b4:8d:05:29:11:
                    6a:3b:1e:d6:96:ef:9a:a1:da:39:ce:79:8b:58:cc:
                    34:ca:90:a1:13:f8:ff:75:60:42:74:f7:8b:8d:7c:
                    f4:35:a4:54:71:79:42:5b:b9:76:79:ff:9b:a6:1a:
                    b6:ae:be:b1:f9:29:86:99:61:ac:d5:4d:55:e6:15:
                    86:42:f3:c5:b3:31:c5:e0:76:8e:70:22:4c:75:cc:
                    32:33:af:97:b6:cb:d1:f0:a8:ee:90:49:5e:b0:8f:
                    df:5a:f4:6c:6d:18:e7:fa:93:63:ae:2a:e0:9b:f5:
                    84:d3:14:f9:7e:ca:e1:b8:fd:77:c0:e7:d5:76:64:
                    c0:4f:ba:2a:4f:69:65:6d:7f:b0:fc:a8:78:bd:b9:
                    10:eb:2f:37:be:63:09:e3:a0:78:36:13:c9:aa:e3:
                    46:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A9:3F:C1:79:D6:B0:B5:6A:0C:D4:A8:9A:C3:35:46:F6:2B:30:AD
            X509v3 Authority Key Identifier:
                keyid:79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:fe:c5:aa:a8:f9:42:40:b1:b2:cc:fa:dd:26:bc:d3:75:14:
         ed:d4:7c:6f:b5:04:6f:91:a3:2f:4b:bf:15:72:01:13:d4:e0:
         b3:7b:84:fb:de:a5:aa:e4:bb:95:c8:5b:13:44:be:84:21:54:
         14:1f:d2:74:df:e9:3d:de:1d:2d:b1:ec:55:96:49:e2:57:b4:
         2d:6e:aa:46:24:c1:fc:ec:f9:39:59:f5:3f:51:9e:da:b3:ad:
         2a:10:ed:5e:1c:08:62:ea:c2:b7:17:89:b5:12:2c:e4:5c:34:
         34:f6:32:97:c5:b5:c2:64:0a:59:4c:18:af:d8:92:41:d0:84:
         12:8c:a6:5c:8b:1c:5b:ce:b6:2b:98:e8:82:7c:e5:36:59:06:
         a5:fd:81:a8:a1:df:0b:51:f2:a2:33:a5:d5:8e:cf:d6:63:cb:
         96:f5:22:59:7a:0d:5b:3b:ae:1e:2a:c7:45:80:94:c8:06:b6:
         1b:3c:22:44:b4:08:b7:68:40:76:7b:87:9d:e1:b5:96:9e:f6:
         42:93:d8:8b:fd:74:c1:a2:7e:b4:d4:44:7d:b9:b2:6a:da:57:
         ef:fd:f6:52:8c:79:89:4e:4b:8e:a9:f2:52:41:82:54:29:19:
         be:84:64:f1:34:ae:ea:db:d0:f4:8e:08:11:8f:d1:35:fe:52:
         d2:43:e5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:09 2024 by rpki-client on console-ams.rpki-client.org