Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/34352e3137372e3139352e302f32342d3234203d3e20323639303330.roa
File:                     34352e3137372e3139352e302f32342d3234203d3e20323639303330.roa (raw, json)
Hash identifier:          xYTnOYaJSRkK7XiSdsC3f9Gj4Ynuri94V+MA2q3Az28=
Subject key identifier:   F1:12:E2:EB:86:A9:3A:59:2D:6D:9A:66:1F:0C:87:25:C0:89:31:D5
Certificate issuer:       /CN=270A6B614E226CC356973519B40E8C57F2B8A8C9
Certificate serial:       1407C9FA5618D8C4D5850B81BBB9675285DC3FBC
Authority key identifier: 27:0A:6B:61:4E:22:6C:C3:56:97:35:19:B4:0E:8C:57:F2:B8:A8:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/34352e3137372e3139352e302f32342d3234203d3e20323639303330.roa
Signing time:             Thu 04 Apr 2024 00:49:13 +0000
ROA not before:           Thu 04 Apr 2024 00:44:13 +0000
ROA not after:            Thu 03 Apr 2025 00:49:13 +0000
asID:                     269030
IP address blocks:        45.177.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.crl
                          rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:07:c9:fa:56:18:d8:c4:d5:85:0b:81:bb:b9:67:52:85:dc:3f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=270A6B614E226CC356973519B40E8C57F2B8A8C9
        Validity
            Not Before: Apr  4 00:44:13 2024 GMT
            Not After : Apr  3 00:49:13 2025 GMT
        Subject: CN=F112E2EB86A93A592D6D9A661F0C8725C08931D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:2a:d4:8a:cc:2f:11:b8:24:9c:90:77:24:
                    a2:e7:05:50:47:ba:93:3f:fd:6c:f0:55:c9:dc:f6:
                    ec:2b:3c:bb:76:59:13:96:e4:44:dc:63:24:98:e0:
                    41:88:45:74:a3:42:1d:4b:d3:96:d5:8f:2f:8d:41:
                    c9:60:24:9c:b5:86:c8:90:dc:ab:9a:b2:6c:64:dc:
                    a6:87:3b:a3:9b:d9:2b:e9:0c:ce:4b:00:5b:5e:56:
                    c8:64:b7:06:be:13:b3:f1:06:12:e6:77:26:b4:02:
                    21:95:60:72:e9:b6:b1:3f:9f:f4:bd:b5:69:37:e2:
                    63:b2:09:ab:65:3a:b1:a9:96:25:8e:88:8d:35:f9:
                    94:49:ef:6b:fe:24:8f:b0:e2:8f:9f:41:f4:c3:30:
                    25:60:be:0c:ad:4c:88:9d:32:7f:c7:0e:34:04:29:
                    9a:ce:de:54:cc:19:66:1f:b4:91:6d:56:8e:23:03:
                    15:95:c5:c8:62:d3:c8:d8:34:e3:9c:9d:c0:e3:06:
                    e0:cf:b2:53:4a:35:4e:d8:ee:a1:b1:8c:3d:a4:5c:
                    51:fa:b5:a5:97:f3:99:d6:8d:52:e2:94:7a:1a:67:
                    ed:1d:bd:91:d8:47:05:b3:43:9b:56:8c:fd:a3:42:
                    cc:20:8d:f7:ea:59:1b:79:f3:f0:04:73:20:bc:57:
                    a2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:12:E2:EB:86:A9:3A:59:2D:6D:9A:66:1F:0C:87:25:C0:89:31:D5
            X509v3 Authority Key Identifier:
                keyid:27:0A:6B:61:4E:22:6C:C3:56:97:35:19:B4:0E:8C:57:F2:B8:A8:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/34352e3137372e3139352e302f32342d3234203d3e20323639303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:f5:a9:6f:90:ad:33:fc:4b:7c:13:0c:77:4f:63:16:1c:56:
         3e:07:56:ba:ea:4c:39:36:60:39:08:78:2a:4a:31:75:94:62:
         b0:13:b0:83:1c:4d:90:24:d0:77:87:a7:90:ad:f9:5d:9d:4e:
         d3:c4:51:da:75:28:84:43:1a:07:5e:ea:40:e5:19:11:55:fa:
         e3:1c:9f:32:6c:8b:09:de:48:8f:b5:a8:1b:84:ad:aa:f9:c2:
         54:47:29:d3:79:49:6f:8a:28:cd:26:3c:62:5d:65:9f:0b:17:
         c7:0e:e4:c5:47:57:18:a2:dd:d3:1d:d3:e3:6b:df:c8:52:56:
         ff:c3:20:06:95:56:41:b7:da:31:ba:4d:ef:52:e4:43:05:1e:
         e1:d2:22:ec:cc:0d:ea:8e:7e:ad:04:fb:19:c6:cc:2e:a7:94:
         76:85:44:b3:da:f8:c5:63:fd:60:ed:bd:68:ad:9a:83:68:5e:
         a6:69:17:5b:86:6a:55:3c:95:be:30:e1:a3:f0:ff:6f:0d:7c:
         c7:5f:03:dc:37:0d:d4:c0:6c:b9:a6:5e:57:c6:25:49:08:ac:
         b7:b7:d8:6a:15:d2:ee:5c:c8:38:72:b6:89:c9:bf:f4:a7:fe:
         ed:3b:a7:19:5c:32:32:63:66:2a:70:13:e9:14:a4:a8:34:c2:
         84:b7:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:35 2024 by rpki-client on console-ams.rpki-client.org