Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135342e302f32342d3234203d3e20323638383135.roa
File:                     34352e3137332e3135342e302f32342d3234203d3e20323638383135.roa (raw, json)
Hash identifier:          9CkryfZ0yP+F9P0BUr2kDHUjJ98zMpORUankG15EtSI=
Subject key identifier:   3D:9F:8F:71:20:07:7A:86:1B:CE:6A:5B:29:56:D8:4F:4C:F0:84:73
Certificate issuer:       /CN=0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831
Certificate serial:       38CE84A9CFBC7639BD3C1FF780D73B8AC8BEEF53
Authority key identifier: 0E:7E:1E:38:AD:4F:03:E9:AE:C2:B0:4B:DD:FF:ED:7A:B5:AC:B8:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135342e302f32342d3234203d3e20323638383135.roa
Signing time:             Thu 16 May 2024 14:13:53 +0000
ROA not before:           Thu 16 May 2024 14:08:53 +0000
ROA not after:            Thu 15 May 2025 14:13:53 +0000
asID:                     268815
IP address blocks:        45.173.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.crl
                          rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ce:84:a9:cf:bc:76:39:bd:3c:1f:f7:80:d7:3b:8a:c8:be:ef:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831
        Validity
            Not Before: May 16 14:08:53 2024 GMT
            Not After : May 15 14:13:53 2025 GMT
        Subject: CN=3D9F8F7120077A861BCE6A5B2956D84F4CF08473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:e2:84:9a:c4:48:6c:02:79:22:ae:30:85:
                    d3:72:f3:b9:98:e4:74:2f:3e:08:ad:3a:6e:4a:43:
                    97:bd:71:4a:b6:4e:da:44:90:a2:eb:55:09:b4:db:
                    46:21:83:75:5a:d9:59:ca:8a:be:f6:ec:b1:e2:06:
                    49:72:22:fe:79:1a:49:db:a9:02:dd:b1:f9:b5:f7:
                    2f:d8:c2:67:61:5f:e1:32:63:a5:e1:fa:28:f9:f1:
                    ac:f2:fd:21:d5:b5:c6:6e:99:e3:9e:52:65:db:3f:
                    ce:f2:cf:a9:80:d7:5e:67:64:63:99:66:be:27:c6:
                    50:60:28:38:bd:d2:8f:1f:07:ff:10:53:db:9c:b4:
                    44:e4:20:c6:3f:fc:3a:89:b3:19:4e:a4:d9:2c:9e:
                    dc:0e:56:be:e8:72:df:09:88:5a:c6:0f:f9:bf:fa:
                    c3:da:fd:67:57:c0:e4:21:b7:3a:1c:00:7a:05:cc:
                    ff:2f:2f:7f:0e:96:29:bd:75:19:e7:01:f1:d2:a8:
                    1e:34:d6:1f:4d:00:4f:6f:36:a5:eb:78:4d:59:a5:
                    b3:25:a6:aa:be:11:06:84:1f:51:e8:3f:59:ff:a3:
                    5e:3f:54:a2:3e:93:d7:33:1e:c7:ab:af:44:7a:2c:
                    4a:71:e4:1b:22:d4:90:bc:f1:df:e5:b8:ae:88:fc:
                    3b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9F:8F:71:20:07:7A:86:1B:CE:6A:5B:29:56:D8:4F:4C:F0:84:73
            X509v3 Authority Key Identifier:
                keyid:0E:7E:1E:38:AD:4F:03:E9:AE:C2:B0:4B:DD:FF:ED:7A:B5:AC:B8:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135342e302f32342d3234203d3e20323638383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:b2:ac:b4:dd:66:8c:4c:69:fa:f6:bc:c8:69:5c:d4:84:13:
         48:57:47:b4:10:a2:21:e7:51:2b:40:95:a9:58:4d:7a:59:d5:
         ff:4b:cd:a8:d8:d8:46:df:d4:53:92:45:b7:5f:d6:a2:dc:e0:
         a2:db:e0:d0:12:8b:25:84:ab:ab:3a:4f:fc:68:e8:08:9d:2e:
         8a:df:39:b8:5a:c7:ad:7e:0a:3a:2e:99:0c:e2:32:44:a6:5e:
         9b:ec:1c:e4:5b:aa:cc:fe:b1:c1:35:09:9f:17:b9:b8:17:03:
         13:4a:41:3f:99:bc:be:58:7c:18:d9:ab:88:3e:9e:c5:32:f0:
         2e:8c:0f:d1:57:cd:5c:f5:03:3e:8b:2f:4b:af:fd:b9:58:94:
         ec:b4:99:fc:d7:67:a0:cf:2e:d0:21:4b:5a:f0:c0:c3:89:01:
         79:48:f3:bf:57:88:51:17:48:1f:06:b6:e5:90:18:6e:ec:78:
         28:c8:ab:b0:53:38:98:ff:98:af:3c:da:fe:a2:50:54:39:54:
         fa:16:05:18:32:a8:f5:e8:52:1e:7d:06:0a:4b:f3:87:e0:f3:
         a3:f2:c2:e4:4f:45:22:ba:36:86:f7:24:a7:da:6b:5f:30:91:
         2d:cc:1b:4b:8a:09:bc:45:8b:1f:c7:55:f3:6a:ea:1f:be:3d:
         30:37:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 21:30:49 2024 by rpki-client on console-fra.rpki-client.org