Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135372e302f32342d3234203d3e20323638313031.roa
File:                     34352e3136382e3135372e302f32342d3234203d3e20323638313031.roa (raw, json)
Hash identifier:          tdIRpxLlIwDURe4ZnBaRCRvYENa7rFlSTXRIldThN1o=
Subject key identifier:   25:5C:8D:C9:40:68:90:DB:E7:54:8E:1E:F6:B1:A5:69:A4:96:67:5F
Certificate issuer:       /CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
Certificate serial:       43F4CD7B2B31C2E18C4D7C0BB42A2DE04E021C4F
Authority key identifier: 91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135372e302f32342d3234203d3e20323638313031.roa
Signing time:             Tue 02 Jul 2024 21:10:50 +0000
ROA not before:           Tue 02 Jul 2024 21:05:50 +0000
ROA not after:            Tue 01 Jul 2025 21:10:50 +0000
asID:                     268101
IP address blocks:        45.168.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl
                          rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f4:cd:7b:2b:31:c2:e1:8c:4d:7c:0b:b4:2a:2d:e0:4e:02:1c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
        Validity
            Not Before: Jul  2 21:05:50 2024 GMT
            Not After : Jul  1 21:10:50 2025 GMT
        Subject: CN=255C8DC9406890DBE7548E1EF6B1A569A496675F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:f3:ee:f2:5b:91:f0:c5:7f:b9:2f:6f:22:
                    bb:26:68:49:ca:f2:73:54:ca:45:3d:39:c9:ca:56:
                    65:75:97:a2:6a:a9:e1:2c:9e:91:28:a1:d6:65:39:
                    fc:37:12:a6:41:78:82:51:1a:5a:c0:cd:59:1b:1a:
                    91:35:3d:9c:44:38:70:6f:8f:22:a3:23:60:22:38:
                    e2:69:19:98:79:57:82:a8:45:dc:e3:cd:3d:55:c8:
                    5f:a2:00:da:90:ab:40:c8:9a:ef:59:4d:31:60:2c:
                    57:b8:61:a0:7a:4b:df:11:62:4f:53:bf:12:1f:24:
                    77:0d:cf:76:ee:9f:88:94:85:76:c1:0a:5d:d1:dd:
                    38:33:96:d7:d6:b7:27:40:e4:7b:58:c0:6c:33:a1:
                    d2:67:7b:9f:88:b6:cd:36:1f:fa:1b:17:a6:79:77:
                    16:00:c5:f4:69:1f:55:91:89:3c:5c:54:93:15:fc:
                    22:2c:bb:36:67:6c:d1:a8:be:88:e4:1b:a7:fe:35:
                    58:2a:35:0b:3d:1b:0f:0e:ff:26:14:3f:4c:47:13:
                    3f:ec:80:eb:5e:a4:e0:d6:cf:11:98:5d:ae:e4:52:
                    63:9a:ca:40:78:2d:44:27:1f:11:8c:72:3d:9d:4e:
                    c1:46:8e:ee:57:46:4c:0f:dc:f2:c3:cb:74:25:38:
                    e9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5C:8D:C9:40:68:90:DB:E7:54:8E:1E:F6:B1:A5:69:A4:96:67:5F
            X509v3 Authority Key Identifier:
                keyid:91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135372e302f32342d3234203d3e20323638313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:34:03:e7:b1:d7:b8:76:5e:ed:f3:42:39:cd:90:42:68:82:
         d4:39:a8:49:81:c0:10:e9:ea:14:a1:69:b7:2e:24:4f:3e:f1:
         1b:08:e8:85:3c:72:53:cc:a9:1d:27:0a:98:0d:a6:ea:e5:d3:
         f4:6b:52:7b:58:a0:31:da:1c:09:ef:2e:59:29:9d:07:d4:ac:
         e2:de:55:de:f0:aa:61:a4:5e:82:25:34:de:b0:40:b1:e3:f9:
         bc:4a:80:9f:f1:70:db:b2:a7:94:10:a8:76:f8:18:cd:cd:dc:
         5a:62:5b:14:7b:8d:f1:c8:30:80:35:d0:a7:76:6c:09:ea:91:
         8b:9a:17:65:2f:7e:d1:36:26:1a:2f:8e:3c:93:ab:d1:7a:ce:
         05:1d:33:95:fb:c9:dd:f4:f4:12:b8:c3:5a:6c:98:44:50:d8:
         d6:f4:f2:2f:b0:23:ca:40:26:10:55:fc:3d:e4:5e:a7:a1:91:
         45:5d:9b:b2:7c:9d:d3:13:71:af:f1:a5:0d:fe:66:e0:ec:da:
         4e:be:ab:0c:13:82:e9:d1:c0:fb:3e:56:dc:08:8e:3d:6c:87:
         ce:7e:96:1f:8f:d1:7c:33:29:56:5a:64:37:69:c2:a0:2e:44:
         4f:e9:88:8e:83:69:74:31:8f:b0:c8:ba:9c:7c:27:50:ab:aa:
         5b:fd:e6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org