Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136342e302f32342d3234203d3e20323638343132.roa
File:                     34352e3136302e3136342e302f32342d3234203d3e20323638343132.roa (raw, json)
Hash identifier:          hDu0UfhoJ4joUavqnj4jNbNqaz+v0LtLzLdVxs6XXLQ=
Subject key identifier:   95:02:1E:EA:1C:46:FA:47:72:F5:0B:C7:CB:CA:1D:B1:9D:F4:D4:0E
Certificate issuer:       /CN=68048497B89FF318156BA3D021C73EDE420ED5C8
Certificate serial:       4329039D8C1F1CA4C6A1BB23D01FB6D82B603BF8
Authority key identifier: 68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136342e302f32342d3234203d3e20323638343132.roa
Signing time:             Thu 04 Apr 2024 06:57:17 +0000
ROA not before:           Thu 04 Apr 2024 06:52:17 +0000
ROA not after:            Thu 03 Apr 2025 06:57:17 +0000
asID:                     268412
IP address blocks:        45.160.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl
                          rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:29:03:9d:8c:1f:1c:a4:c6:a1:bb:23:d0:1f:b6:d8:2b:60:3b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68048497B89FF318156BA3D021C73EDE420ED5C8
        Validity
            Not Before: Apr  4 06:52:17 2024 GMT
            Not After : Apr  3 06:57:17 2025 GMT
        Subject: CN=95021EEA1C46FA4772F50BC7CBCA1DB19DF4D40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2e:cd:7d:b1:7f:11:a7:70:ec:d2:34:e1:1c:
                    91:21:9e:c1:e3:55:67:c5:2b:d6:c9:40:46:47:a6:
                    50:ce:e7:1b:03:1f:90:00:6a:c7:65:89:2a:0f:10:
                    25:85:28:36:3b:d4:ef:d4:75:f6:57:35:a5:2b:e6:
                    b4:d4:f5:3a:c0:a5:60:f0:ea:f8:57:6e:be:c3:f7:
                    23:0b:30:c0:2a:6c:bb:89:05:29:47:e2:95:f4:9b:
                    37:3f:72:e8:d0:b2:ec:48:88:41:79:92:1f:14:e0:
                    0e:52:37:6d:3c:4e:e4:dc:43:c4:ac:b4:e0:df:36:
                    42:16:d3:95:94:4d:40:9b:01:40:ad:36:b1:3b:f0:
                    c8:65:41:51:bc:27:a5:6e:61:52:87:8f:32:1f:d6:
                    57:f4:b8:66:e6:28:0d:69:ef:07:62:56:7e:49:fc:
                    c6:4b:9d:bc:2e:99:c0:c3:96:22:37:6a:85:fe:d9:
                    94:a4:05:e3:05:27:c3:6a:71:58:b6:0a:56:29:a3:
                    f1:86:dc:5a:ea:85:c9:ba:3f:2e:f9:a9:ec:be:8d:
                    70:7c:41:96:68:77:e0:47:bc:4b:a4:4b:42:a7:d5:
                    98:22:93:d8:e8:81:a0:0e:11:1a:87:0d:f0:f3:4c:
                    08:67:c1:bd:e7:90:d7:62:37:3f:48:ef:8e:1a:1a:
                    23:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:02:1E:EA:1C:46:FA:47:72:F5:0B:C7:CB:CA:1D:B1:9D:F4:D4:0E
            X509v3 Authority Key Identifier:
                keyid:68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136342e302f32342d3234203d3e20323638343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:a0:74:21:20:ca:a9:62:29:15:ee:aa:cb:99:8a:cd:d3:40:
         4b:5d:f3:37:4c:f0:7c:13:f0:9b:c2:3b:bc:90:09:f9:95:ea:
         dc:3b:4e:b4:d0:35:32:e1:6d:08:ed:b8:b9:be:fd:d0:c4:05:
         3c:33:55:ba:1c:40:c9:f2:b2:a0:a3:68:0a:22:22:68:b5:5c:
         24:2f:b1:c7:51:1b:ee:ed:eb:43:0c:be:51:fd:08:a9:fd:2e:
         f9:a4:6d:2d:ae:d8:8b:38:a5:26:37:33:77:49:3a:39:cc:a8:
         3d:5d:21:7e:6f:91:fb:f7:d0:54:30:81:5f:5b:82:45:64:15:
         e4:cf:43:9f:d0:d9:23:9d:2b:6d:a9:eb:69:bc:33:1a:82:42:
         64:ee:11:52:72:80:46:57:96:9f:c1:2b:7e:bf:ae:06:67:d1:
         42:67:b3:3e:93:04:18:b2:41:76:be:7b:63:46:14:cd:dd:e0:
         bf:22:8b:7a:11:a6:dd:2f:e8:64:44:aa:bb:84:75:6b:34:96:
         e7:46:5d:b9:ae:b7:2c:95:ed:db:d0:a0:12:c3:c6:62:87:bb:
         b3:15:4d:1b:cc:c2:a2:12:3b:ca:f8:08:27:63:76:84:aa:07:
         68:c2:18:86:ab:11:0b:ab:fd:62:64:99:84:67:0a:02:3b:63:
         2d:ed:1f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:32 2024 by rpki-client on console-fra.rpki-client.org