Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135332e302f32342d3234203d3e20323638383135.roa
File:                     34352e3137332e3135332e302f32342d3234203d3e20323638383135.roa (raw, json)
Hash identifier:          fHjapbPbNzSw0hXyvi2r9dJNHqzKlkFsz9oU0Dp6vVk=
Subject key identifier:   17:9A:A5:A7:73:99:00:E3:BF:6A:41:4C:AC:65:F0:56:44:A9:D7:DE
Certificate issuer:       /CN=0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831
Certificate serial:       0F7CAE3ED9F20C846E71DAE2F9AAB7D2EA1BA18F
Authority key identifier: 0E:7E:1E:38:AD:4F:03:E9:AE:C2:B0:4B:DD:FF:ED:7A:B5:AC:B8:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135332e302f32342d3234203d3e20323638383135.roa
Signing time:             Thu 16 May 2024 14:13:49 +0000
ROA not before:           Thu 16 May 2024 14:08:49 +0000
ROA not after:            Thu 15 May 2025 14:13:49 +0000
asID:                     268815
IP address blocks:        45.173.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.crl
                          rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7c:ae:3e:d9:f2:0c:84:6e:71:da:e2:f9:aa:b7:d2:ea:1b:a1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831
        Validity
            Not Before: May 16 14:08:49 2024 GMT
            Not After : May 15 14:13:49 2025 GMT
        Subject: CN=179AA5A7739900E3BF6A414CAC65F05644A9D7DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:f4:c7:af:05:3a:2a:fc:bf:95:72:8e:3b:
                    4e:10:d4:13:23:d9:50:98:4f:01:ba:18:54:30:bf:
                    dd:14:c0:7f:65:63:20:be:10:18:25:26:6c:40:3e:
                    0e:ce:25:63:4d:4b:ce:6a:5d:c1:18:42:59:8b:02:
                    e6:c2:c1:66:3e:6e:22:f3:31:22:b0:8d:5f:99:54:
                    37:55:41:12:78:fd:18:15:21:cc:67:fc:55:cd:c7:
                    20:5b:5c:2a:8d:04:7c:0e:19:31:83:8f:63:6d:ad:
                    9d:00:a1:13:e9:21:05:4e:26:1e:90:b6:ce:7f:7c:
                    bd:6d:ee:d5:fb:b1:f1:01:ad:07:0d:7b:68:88:e7:
                    af:44:8c:2d:1e:ed:ee:b1:42:45:c9:e0:ab:58:87:
                    eb:87:9a:b0:67:01:cb:50:6f:38:2c:bb:ec:8f:23:
                    da:5a:6d:4d:4d:86:5a:d8:d2:02:81:9a:7a:c3:11:
                    cc:22:4d:07:41:88:77:db:66:78:f1:5c:e0:2e:b9:
                    28:ab:3a:23:3f:c6:46:9e:32:2b:09:e2:a3:d0:12:
                    31:38:46:f8:5b:b2:bc:57:54:93:86:b3:25:bb:87:
                    5b:b5:e8:9c:a2:65:15:c0:fb:9a:5e:19:c9:c7:2d:
                    f3:76:5b:5e:8d:76:0f:77:f4:b3:60:4d:18:11:43:
                    6f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9A:A5:A7:73:99:00:E3:BF:6A:41:4C:AC:65:F0:56:44:A9:D7:DE
            X509v3 Authority Key Identifier:
                keyid:0E:7E:1E:38:AD:4F:03:E9:AE:C2:B0:4B:DD:FF:ED:7A:B5:AC:B8:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135332e302f32342d3234203d3e20323638383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:5e:3e:6d:7b:71:81:36:f6:91:23:2f:82:98:45:2c:68:b9:
         38:08:96:07:55:40:e0:1b:fe:46:16:f8:e3:7a:65:82:70:f5:
         0f:3c:70:0b:87:5e:4d:fe:83:6d:cc:25:ca:e8:b6:a9:fc:71:
         6d:9b:6d:43:f7:5c:cb:04:c3:b1:77:df:38:15:9d:26:68:c7:
         ee:fa:0c:fb:3f:cf:78:37:09:45:6b:f9:e2:fd:f6:1a:9d:84:
         80:1d:4c:d0:4e:73:a7:85:1c:bd:44:de:c1:b3:96:d3:a0:e0:
         07:05:68:79:9d:cd:b1:94:41:6e:d2:d2:b1:48:90:7d:a4:7c:
         0d:e4:67:0f:f3:c6:bc:d9:76:6c:9e:37:a2:a0:15:a1:70:34:
         17:af:d0:21:78:72:cf:bb:62:2e:ff:dd:4d:4c:6c:a5:39:1e:
         d7:85:8f:3f:a5:5e:19:5b:bc:cd:a0:71:62:7f:78:15:5f:7e:
         de:bb:67:a6:c8:00:f8:d2:f2:93:c2:a7:dd:05:90:56:ab:92:
         60:94:66:87:c4:58:e9:33:38:0a:78:4c:57:cf:b4:33:f0:17:
         8a:b2:98:3b:5c:62:20:c2:cb:44:70:71:9a:7d:41:ee:71:03:
         d1:46:a2:30:9a:18:f5:f9:60:f6:ba:d6:0d:9e:d4:fa:e6:e3:
         5b:58:b1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 21:30:49 2024 by rpki-client on console-fra.rpki-client.org