Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e352e302f32342d3234203d3e20323638393235.roa
File:                     34352e3137362e352e302f32342d3234203d3e20323638393235.roa (raw, json)
Hash identifier:          KA+xtc7v2W6F1PkUEYfDWdydr452V0c1RVeK/Z5IYI4=
Subject key identifier:   85:46:B4:A8:64:55:A8:18:2A:21:EE:3E:7F:E8:D4:9B:F4:E1:9C:93
Certificate issuer:       /CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
Certificate serial:       67BFD707FF2C1328F34A14A69CD96D583A16415E
Authority key identifier: B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e352e302f32342d3234203d3e20323638393235.roa
Signing time:             Thu 04 Apr 2024 07:39:07 +0000
ROA not before:           Thu 04 Apr 2024 07:34:07 +0000
ROA not after:            Thu 03 Apr 2025 07:39:07 +0000
asID:                     268925
IP address blocks:        45.176.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.crl
                          rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bf:d7:07:ff:2c:13:28:f3:4a:14:a6:9c:d9:6d:58:3a:16:41:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
        Validity
            Not Before: Apr  4 07:34:07 2024 GMT
            Not After : Apr  3 07:39:07 2025 GMT
        Subject: CN=8546B4A86455A8182A21EE3E7FE8D49BF4E19C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:c1:39:74:75:c3:18:c8:92:dd:27:7c:70:
                    48:53:3c:01:f0:40:ed:89:6e:cb:33:7c:2e:75:97:
                    a7:ad:b2:29:87:77:ed:c6:85:a5:24:38:01:00:a1:
                    a6:8b:a7:5e:c1:1d:25:b2:bc:47:ba:fa:50:aa:4c:
                    8d:b4:91:c9:69:b4:bf:64:42:76:df:c9:7c:d0:20:
                    be:1a:40:57:f3:e9:c3:88:38:c1:90:ae:63:4e:b6:
                    ac:14:2b:3f:0a:27:21:cf:7e:eb:3f:ac:bc:61:3a:
                    ee:87:3b:96:4b:6c:04:bc:6c:c1:4e:9a:ea:4f:6e:
                    f6:d2:5c:69:66:9f:4a:d3:3a:39:11:ab:c8:cd:1b:
                    de:5b:b1:c5:67:1a:f7:b3:40:d1:9c:70:69:3a:ad:
                    a0:dc:1b:79:bc:5e:48:9b:7e:d4:e4:5a:6f:7a:05:
                    b9:8b:f2:12:7e:fb:42:17:8b:f2:d2:d2:f0:36:05:
                    17:89:1d:49:87:d3:13:4e:5c:4d:2c:da:e4:0c:36:
                    ab:3d:8d:3b:93:39:fa:64:dd:83:28:a6:46:6e:b6:
                    2c:0b:e9:aa:1c:3d:69:a9:eb:5d:23:65:53:07:67:
                    99:8b:a3:4b:0d:65:09:67:60:c2:69:66:de:b1:09:
                    b1:cf:6e:b1:30:45:7a:cb:0d:a6:27:7e:dd:85:2a:
                    bf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:46:B4:A8:64:55:A8:18:2A:21:EE:3E:7F:E8:D4:9B:F4:E1:9C:93
            X509v3 Authority Key Identifier:
                keyid:B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e352e302f32342d3234203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:89:29:16:6c:55:ac:19:e0:22:1c:a7:5c:75:26:62:fd:12:
         58:ae:01:3e:90:0f:f5:7b:5f:e1:57:9a:c2:4f:06:a0:1d:88:
         b3:82:6f:b1:d8:24:e9:98:2e:b0:eb:1a:9f:c3:26:16:9f:12:
         ad:c2:81:32:2f:2b:93:b5:69:f1:b8:9f:a6:19:bb:dc:76:f4:
         2b:32:ec:2d:5e:01:f8:f9:5d:55:f1:d4:ef:82:af:e3:1c:86:
         c3:8a:e2:29:55:c6:2a:41:a5:44:f7:4a:23:00:5b:6d:92:ff:
         6e:c8:13:0b:ee:f0:70:59:24:98:80:59:1c:2e:92:83:95:3c:
         54:d6:11:bd:54:b0:fc:34:75:23:b4:08:37:cd:b2:cf:5d:c2:
         3a:d7:61:28:46:f3:8a:91:4d:8b:73:7f:17:15:3a:1c:59:c6:
         05:13:43:3d:1e:b4:f3:4f:76:6f:3e:bb:02:f2:fd:c4:4a:f4:
         90:22:f9:5b:e2:fc:47:e3:39:8e:76:26:2c:a1:d4:c0:d8:63:
         a9:c0:7c:2d:ab:0c:e2:98:28:32:a1:dd:08:61:c5:34:ab:34:
         8c:53:d7:61:96:94:85:b0:c6:cd:40:51:b8:5c:f4:b2:43:d0:
         2a:e1:ac:e8:15:85:eb:66:72:31:72:4e:1e:8b:30:26:bb:9e:
         e2:e6:36:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:03 2024 by rpki-client on console-ams.rpki-client.org