Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138392e302f32342d3234203d3e20323639313935.roa
File:                     34352e3137392e3138392e302f32342d3234203d3e20323639313935.roa (raw, json)
Hash identifier:          YKzKnvJoXx81YiQqNtz0YxpSiH2IsxlCs532pQnvaSo=
Subject key identifier:   62:8F:1D:B3:55:2B:4C:8C:20:00:9E:08:5B:87:C2:ED:C2:3D:44:82
Certificate issuer:       /CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
Certificate serial:       1167611680BFD61C7C87D9C6C649C7D8073CD9F5
Authority key identifier: 55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138392e302f32342d3234203d3e20323639313935.roa
Signing time:             Wed 03 Apr 2024 18:32:11 +0000
ROA not before:           Wed 03 Apr 2024 18:27:11 +0000
ROA not after:            Wed 02 Apr 2025 18:32:11 +0000
asID:                     269195
IP address blocks:        45.179.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl
                          rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:67:61:16:80:bf:d6:1c:7c:87:d9:c6:c6:49:c7:d8:07:3c:d9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
        Validity
            Not Before: Apr  3 18:27:11 2024 GMT
            Not After : Apr  2 18:32:11 2025 GMT
        Subject: CN=628F1DB3552B4C8C20009E085B87C2EDC23D4482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:b5:5b:7b:6f:72:74:ec:22:b8:f5:e0:e2:
                    56:ae:b8:bb:2a:4e:ac:2a:d2:68:36:ae:a0:7e:ae:
                    f8:a5:2a:2a:b3:ed:75:b6:b0:d4:af:11:02:82:b5:
                    d6:08:58:c4:09:5f:bb:4c:c5:67:0a:a1:72:9b:1f:
                    86:a1:03:54:88:2f:4b:f3:f5:7e:62:fb:0b:36:d4:
                    2f:15:e5:30:7f:e6:89:13:d7:2b:e0:40:3a:7d:27:
                    e7:8d:70:ab:cd:ef:a2:d8:8a:62:5d:bd:b3:22:78:
                    08:a4:ad:02:fd:bb:b0:b2:0d:79:7a:fa:67:76:53:
                    5a:a2:d5:de:47:13:b6:f9:fb:3c:10:6f:1e:4a:f1:
                    3d:a3:48:a8:93:58:a3:75:fc:15:10:c9:10:fb:c5:
                    0c:2b:79:21:16:1a:be:3e:2f:e8:b2:71:b3:3e:56:
                    71:e1:c4:3c:bf:e3:3c:32:99:b9:28:9d:5d:46:ff:
                    47:ac:ce:9b:4f:86:3f:20:e7:0e:06:b4:a5:15:9a:
                    e8:59:ae:8c:23:64:10:54:7c:04:21:b2:87:b7:c2:
                    27:3e:78:f2:e4:af:54:f5:81:aa:e2:eb:8a:91:fc:
                    7d:dd:dc:ac:c3:a7:91:fb:2e:81:83:00:89:50:bf:
                    eb:4a:82:77:41:61:a0:de:be:c4:dc:b9:16:e1:45:
                    dc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8F:1D:B3:55:2B:4C:8C:20:00:9E:08:5B:87:C2:ED:C2:3D:44:82
            X509v3 Authority Key Identifier:
                keyid:55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138392e302f32342d3234203d3e20323639313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:69:1c:47:0a:9f:ca:a6:be:35:40:f4:4b:d3:a7:0c:b9:32:
         78:54:a7:55:9e:5e:e4:ad:c8:3f:44:93:73:69:e7:f2:54:f4:
         b0:7c:4a:91:1a:9f:89:9e:09:79:af:9e:dd:cb:8d:da:f6:2d:
         f0:0c:99:e4:8e:eb:fa:09:8f:84:ac:61:60:30:e7:e8:f6:68:
         c5:a6:d9:3d:1e:f4:7e:37:87:91:62:4c:79:b5:33:eb:e7:8d:
         2b:f7:f1:7b:f7:e4:c8:ac:43:34:22:d6:bd:13:40:0d:59:a9:
         25:55:7e:7c:0e:81:95:d6:8f:73:74:a5:dc:67:33:8c:40:0d:
         db:af:3a:8d:d8:94:6f:4e:a8:43:46:a4:14:fb:cf:ad:d2:b3:
         9e:d9:13:a5:55:91:31:c9:9f:8f:d5:8e:eb:8d:f4:bf:1c:9e:
         a5:9a:84:1d:a1:73:6f:13:c0:a5:14:82:40:93:7d:2d:65:24:
         fe:6d:e1:7e:fc:dd:a6:5e:9e:b3:75:44:52:09:d1:e0:ad:04:
         aa:a6:0f:5d:61:5a:19:0e:af:2a:8e:3f:c1:fb:fa:59:b0:aa:
         f4:c3:e2:ab:07:f3:08:ef:42:e7:15:f9:28:ee:10:0e:31:3c:
         de:87:16:9a:bf:b6:47:df:50:c7:03:98:fd:cc:f1:c9:2b:bf:
         d7:ea:a8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org