Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31382e302f32332d3233203d3e20323638383738.roa
File:                     34352e3137342e31382e302f32332d3233203d3e20323638383738.roa (raw, json)
Hash identifier:          41ELiU99tck6WbOdDchmCh4QB05aX1FsYsyMhWf44iA=
Subject key identifier:   BC:1B:A0:05:7F:47:5A:8F:04:8D:01:CF:D8:E9:57:C9:E6:FE:CF:1A
Certificate issuer:       /CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59
Certificate serial:       224AF819D45D6C429E985BE5AA2D025977A79561
Authority key identifier: DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31382e302f32332d3233203d3e20323638383738.roa
Signing time:             Tue 12 Nov 2024 19:10:07 +0000
ROA not before:           Tue 12 Nov 2024 19:05:07 +0000
ROA not after:            Tue 11 Nov 2025 19:10:07 +0000
asID:                     268878
IP address blocks:        45.174.18.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.crl
                          rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4a:f8:19:d4:5d:6c:42:9e:98:5b:e5:aa:2d:02:59:77:a7:95:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59
        Validity
            Not Before: Nov 12 19:05:07 2024 GMT
            Not After : Nov 11 19:10:07 2025 GMT
        Subject: CN=BC1BA0057F475A8F048D01CFD8E957C9E6FECF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:54:70:51:04:41:93:83:39:7f:60:a6:ee:
                    0a:49:44:96:56:d0:ab:fa:a2:9e:04:6e:3b:57:40:
                    42:3f:40:ef:d6:6a:d1:f3:e1:d3:91:8c:5f:99:eb:
                    a3:9a:63:24:cc:68:36:98:0d:65:d0:53:ab:bb:2d:
                    f1:d1:36:52:28:8b:95:9f:2f:d1:65:11:5c:bd:38:
                    17:18:55:2b:5a:bb:ff:9b:5d:3c:97:ee:28:91:e9:
                    46:c1:56:27:bb:d2:7d:9d:dd:9f:c8:54:4c:af:63:
                    1b:09:e2:35:e6:60:6a:aa:62:76:0f:2f:fd:6f:1b:
                    0d:6d:00:c7:28:a3:8a:c9:19:d4:2e:55:1e:db:ee:
                    44:7f:79:3a:66:9e:40:7e:9f:bf:89:50:70:60:40:
                    a3:18:74:ac:01:e7:f6:05:1c:d0:14:14:aa:3a:8d:
                    b3:44:b0:12:d4:f5:b1:a7:f8:5f:d3:bc:09:8c:5e:
                    97:88:7f:fd:b6:cf:b2:8f:c4:86:01:c5:e5:14:3e:
                    4b:c9:f4:6e:a6:08:e1:02:cb:6d:5f:f7:7a:ba:e3:
                    90:f0:61:b1:71:23:2c:ee:90:1b:46:f1:19:90:2f:
                    ee:08:91:dc:25:e9:f0:67:0c:cb:82:c0:69:ff:8f:
                    82:bc:cf:21:bc:69:96:63:f6:12:90:7e:fc:d0:43:
                    90:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1B:A0:05:7F:47:5A:8F:04:8D:01:CF:D8:E9:57:C9:E6:FE:CF:1A
            X509v3 Authority Key Identifier:
                keyid:DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31382e302f32332d3233203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:bb:46:e1:99:96:5a:89:53:cc:ca:62:a7:74:85:a5:af:52:
         07:2e:54:5c:ef:a0:dd:ed:13:4c:9c:09:1c:45:5f:8f:3d:d4:
         ba:f7:29:74:14:25:73:be:71:f1:aa:95:6b:a8:13:f4:e6:1e:
         11:61:dc:0f:b1:4c:71:42:e3:8f:c6:c6:fc:38:4a:ff:d0:b7:
         8e:4d:cc:0d:a2:31:cf:86:37:e7:05:ab:36:71:4d:29:f2:f0:
         a0:e1:4d:dd:95:ed:7a:e7:10:e6:ec:28:e8:e8:52:a4:e2:99:
         0f:74:5c:26:25:81:3c:dc:13:32:18:59:39:d0:bf:64:17:00:
         63:be:6d:59:5d:b5:34:75:d6:3f:5b:a3:c2:9e:82:91:45:b5:
         bf:fb:0c:54:15:79:99:00:d5:f6:be:38:96:ba:cb:64:cf:18:
         9f:88:f6:42:be:4a:31:79:5d:57:1c:cc:65:7a:4f:9c:b4:c6:
         8f:4c:35:e3:83:df:fa:c2:cb:bd:d1:10:35:0b:7a:28:c1:d1:
         6b:b1:64:ae:3f:47:2e:9a:72:3b:6c:e4:17:3f:46:88:b1:e5:
         3e:15:ab:ab:49:19:83:25:96:64:87:90:ee:d1:94:30:c2:15:
         16:d6:bd:ea:ec:63:7b:79:0f:7b:7c:a3:dd:9a:90:dc:f9:55:
         02:08:56:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:38 2024 by rpki-client on console-fra.rpki-client.org