Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234372e302f32342d3234203d3e20323638373937.roa
File:                     34352e3137322e3234372e302f32342d3234203d3e20323638373937.roa (raw, json)
Hash identifier:          cVQutSr4/q+QouhNW2XQt6Ups2Hoq0UH3LxZRlFKvKo=
Subject key identifier:   18:A2:16:23:B9:9D:1F:89:DF:CE:57:81:7E:E4:E2:C5:46:5C:7A:39
Certificate issuer:       /CN=EEEAE781774BBF39D3939DF8D9AFE5D134958196
Certificate serial:       670CB4A17C4BB27F0F33C521505AAE7CEF049FEF
Authority key identifier: EE:EA:E7:81:77:4B:BF:39:D3:93:9D:F8:D9:AF:E5:D1:34:95:81:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234372e302f32342d3234203d3e20323638373937.roa
Signing time:             Fri 31 May 2024 17:28:36 +0000
ROA not before:           Fri 31 May 2024 17:23:36 +0000
ROA not after:            Fri 30 May 2025 17:28:36 +0000
asID:                     268797
IP address blocks:        45.172.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.crl
                          rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0c:b4:a1:7c:4b:b2:7f:0f:33:c5:21:50:5a:ae:7c:ef:04:9f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEEAE781774BBF39D3939DF8D9AFE5D134958196
        Validity
            Not Before: May 31 17:23:36 2024 GMT
            Not After : May 30 17:28:36 2025 GMT
        Subject: CN=18A21623B99D1F89DFCE57817EE4E2C5465C7A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:38:e1:6b:71:4b:ed:35:e2:5a:80:29:9b:3d:
                    83:c5:09:05:11:f4:f3:32:7c:e9:e2:15:b7:49:0b:
                    85:96:c3:c8:4a:15:82:73:36:17:d4:c8:a5:39:c5:
                    1a:f7:de:d7:6d:a4:02:57:ae:ec:8c:20:05:b8:0c:
                    bc:05:0f:0f:32:25:be:77:22:24:ea:14:0e:d7:85:
                    ae:f5:f4:b8:72:2c:a1:58:69:83:bf:1f:30:23:0c:
                    f8:66:75:be:80:17:4f:5a:07:10:30:7f:e4:70:c3:
                    3e:82:2f:3b:fa:ae:c4:b0:a2:91:1a:c8:62:ba:65:
                    3b:72:b2:6f:8b:38:4b:51:91:0b:ff:4d:63:ad:cb:
                    35:e5:bd:5a:44:20:40:1e:58:42:ea:1e:70:82:27:
                    7d:25:df:92:3d:ad:08:76:dd:17:d9:e9:39:00:a6:
                    0a:a6:4f:65:ac:10:81:07:fa:b3:1f:d1:be:cd:00:
                    dd:0c:37:b8:73:73:b5:3f:5b:70:bd:98:7f:fc:1d:
                    36:fd:f4:e0:d0:24:7f:20:70:cb:ca:4d:ad:a1:dc:
                    af:0f:f5:3f:d3:84:1c:d6:98:9e:1f:3e:ab:7f:8e:
                    ec:2a:a6:52:6d:0b:3a:de:25:2a:77:c6:7a:d0:66:
                    58:19:46:52:0d:bc:74:08:50:3d:ab:95:4d:a9:d0:
                    90:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A2:16:23:B9:9D:1F:89:DF:CE:57:81:7E:E4:E2:C5:46:5C:7A:39
            X509v3 Authority Key Identifier:
                keyid:EE:EA:E7:81:77:4B:BF:39:D3:93:9D:F8:D9:AF:E5:D1:34:95:81:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234372e302f32342d3234203d3e20323638373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:76:91:4e:6f:cc:91:e2:35:4b:d2:14:9a:22:38:50:34:
         f9:13:52:bc:fa:4a:85:3a:01:3a:f4:54:11:97:16:cf:53:7f:
         4b:33:72:eb:ca:5f:16:8e:9a:40:e3:6b:ec:4c:1f:d1:6d:4b:
         e2:fa:27:ee:5a:80:db:f2:e2:7c:7c:e3:db:fb:26:ab:dd:b4:
         5d:66:bc:cb:fe:7c:96:d6:dd:79:e1:cc:02:3f:7f:12:69:c1:
         86:98:e3:47:20:8e:8d:a2:74:3e:81:2f:3f:ba:25:42:bc:4b:
         53:0c:ae:b2:a0:92:42:1a:36:ce:5f:86:91:ca:c5:68:fa:e0:
         bf:98:09:00:72:75:5d:a0:c7:aa:e9:7f:1a:78:70:75:55:7a:
         81:18:31:91:b7:2c:4b:28:19:c2:fb:a9:4e:43:13:c7:1f:f9:
         ff:2b:48:97:79:59:5d:5e:16:fe:a7:4c:50:52:ec:bb:4c:a9:
         6b:ca:3f:86:75:de:36:72:fe:eb:0b:7a:13:1d:b6:bd:e7:57:
         ad:34:51:f2:3b:98:18:c5:4d:1a:04:f5:b2:ab:0e:03:45:55:
         ee:3b:6a:ca:5c:e2:be:a1:83:6e:28:12:3c:f2:45:ed:e3:ad:
         70:1a:81:31:0c:b0:c9:32:da:db:8c:3b:eb:80:20:ee:d9:15:
         83:49:2c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:01 2024 by rpki-client on console-ams.rpki-client.org