Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234342e302f32332d3233203d3e20323638373937.roa
File:                     34352e3137322e3234342e302f32332d3233203d3e20323638373937.roa (raw, json)
Hash identifier:          ruwbNfdWnyp6nbwkBzEjd3LYp+S3B6C5QN1XFwMo8TA=
Subject key identifier:   BE:7D:4D:7A:41:65:1E:80:85:ED:4E:43:57:7F:7C:92:9F:36:D5:9C
Certificate issuer:       /CN=EEEAE781774BBF39D3939DF8D9AFE5D134958196
Certificate serial:       659B2398C521ED7E6759E684E02F80D8CDCC6CE5
Authority key identifier: EE:EA:E7:81:77:4B:BF:39:D3:93:9D:F8:D9:AF:E5:D1:34:95:81:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234342e302f32332d3233203d3e20323638373937.roa
Signing time:             Fri 31 May 2024 17:28:37 +0000
ROA not before:           Fri 31 May 2024 17:23:37 +0000
ROA not after:            Fri 30 May 2025 17:28:37 +0000
asID:                     268797
IP address blocks:        45.172.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.crl
                          rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9b:23:98:c5:21:ed:7e:67:59:e6:84:e0:2f:80:d8:cd:cc:6c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEEAE781774BBF39D3939DF8D9AFE5D134958196
        Validity
            Not Before: May 31 17:23:37 2024 GMT
            Not After : May 30 17:28:37 2025 GMT
        Subject: CN=BE7D4D7A41651E8085ED4E43577F7C929F36D59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:f4:6b:14:6b:53:94:fa:e0:54:26:1c:ed:
                    7c:d4:15:b0:2d:23:c4:ea:d6:36:07:44:e1:fe:85:
                    4d:77:fb:cd:65:c1:2a:7d:23:d9:01:23:14:27:dc:
                    7a:b6:a1:28:95:f2:59:62:92:11:b0:52:fa:80:97:
                    9b:a8:a7:00:43:50:78:e0:2b:00:cd:ff:8a:2c:76:
                    07:33:d4:7d:8f:67:8e:9d:74:dd:09:95:a1:99:2b:
                    6d:81:09:d3:ed:bb:89:28:ca:af:21:c4:30:d9:b1:
                    8e:15:a7:c0:53:b2:c4:61:99:4a:ff:b7:98:b1:9b:
                    c6:8e:1e:6a:b6:1b:31:11:4a:93:10:7c:81:4b:ef:
                    5e:15:a3:37:a1:c7:2e:56:e0:13:63:c2:0e:63:3d:
                    de:ff:8e:9e:ae:2c:bb:97:68:4b:71:fd:af:dc:d2:
                    4f:7b:09:a1:d9:d7:4c:74:20:ca:67:ca:d3:ea:9f:
                    2f:f2:e4:13:70:87:45:b5:98:9b:11:cd:e7:ae:3d:
                    16:48:b5:98:ab:4c:d4:8c:7f:e3:8d:dd:56:01:04:
                    e7:f1:2d:e4:62:24:9f:02:2f:97:48:73:43:25:e6:
                    45:a0:15:05:3e:b3:a7:69:72:e3:f9:2e:6e:a5:69:
                    1a:ec:4b:7e:4e:4f:c9:ae:6e:fb:a1:64:51:f9:6f:
                    eb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7D:4D:7A:41:65:1E:80:85:ED:4E:43:57:7F:7C:92:9F:36:D5:9C
            X509v3 Authority Key Identifier:
                keyid:EE:EA:E7:81:77:4B:BF:39:D3:93:9D:F8:D9:AF:E5:D1:34:95:81:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234342e302f32332d3233203d3e20323638373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:d3:f8:cd:b4:53:89:44:08:42:c3:51:c3:24:4c:e3:fa:be:
         38:9e:db:88:30:35:5d:21:9d:27:24:c7:56:ea:ea:bf:95:96:
         7f:72:f7:b6:1c:0e:6d:da:45:f3:3c:ec:83:78:eb:5e:db:1b:
         63:58:0e:93:a6:30:46:ab:4a:64:c4:74:73:85:85:49:10:4f:
         00:5c:e4:e9:56:e2:00:8c:3d:f6:26:6c:fa:21:1e:90:8b:5b:
         30:77:52:57:dc:19:1b:d4:eb:56:1c:a8:e2:62:4c:b3:dc:1b:
         6d:82:d5:32:bb:24:6a:b5:93:fc:9b:a0:75:9f:43:33:e0:fb:
         65:78:08:1b:51:ec:74:dc:9c:b6:ec:d8:d7:c3:8e:3e:fb:df:
         23:75:00:02:4c:2c:36:71:33:6f:93:ac:2d:a6:2f:7b:c6:df:
         f6:99:cc:45:78:61:1f:d6:bc:d3:ee:81:2d:ed:5a:1e:8f:33:
         2d:19:e3:83:38:bd:34:00:37:18:b9:26:bb:f5:ce:55:9b:fe:
         4f:be:d9:95:3e:1e:f7:68:78:6d:35:ed:cb:84:4f:23:77:ab:
         3b:e7:97:cb:cd:9b:70:c4:f3:7f:bc:c0:b8:cc:b1:34:75:61:
         6c:d8:74:8e:f2:e7:51:83:8a:b4:5a:d4:70:25:b2:b8:d3:31:
         cb:05:16:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:32 2024 by rpki-client on console-fra.rpki-client.org