Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37322e302f32342d3234203d3e20323638313533.roa
File:                     34352e3137302e37322e302f32342d3234203d3e20323638313533.roa (raw, json)
Hash identifier:          Wjv6VVkvUWzY21aCDwz5GwQjtAUSbfKvmP00sqjwkSo=
Subject key identifier:   89:2E:8A:17:E2:F6:D3:54:1D:B3:28:D4:DE:D9:52:5C:3E:91:3E:44
Certificate issuer:       /CN=6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438
Certificate serial:       185A1E77261E212E7275E42058CC848A213975D6
Authority key identifier: 6B:DD:E9:7E:C2:F2:BE:52:8B:DA:85:FA:60:EA:EA:59:78:0E:A4:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37322e302f32342d3234203d3e20323638313533.roa
Signing time:             Thu 04 Apr 2024 00:54:54 +0000
ROA not before:           Thu 04 Apr 2024 00:49:54 +0000
ROA not after:            Thu 03 Apr 2025 00:54:54 +0000
asID:                     268153
IP address blocks:        45.170.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.crl
                          rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5a:1e:77:26:1e:21:2e:72:75:e4:20:58:cc:84:8a:21:39:75:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438
        Validity
            Not Before: Apr  4 00:49:54 2024 GMT
            Not After : Apr  3 00:54:54 2025 GMT
        Subject: CN=892E8A17E2F6D3541DB328D4DED9525C3E913E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:81:b4:d3:bf:e8:89:15:9a:12:2c:41:aa:
                    3e:ec:2f:f3:52:10:23:00:73:8f:e4:6e:85:5f:0a:
                    1f:f4:71:22:62:40:2c:ac:10:ae:f7:22:93:30:b4:
                    92:6b:70:a1:f3:ea:45:b5:5b:2e:88:72:17:3a:1d:
                    cd:ae:97:96:68:19:a7:6d:bf:c1:e4:1f:fe:8a:0d:
                    00:ba:7d:51:29:1f:8e:3c:03:d9:a1:45:b3:71:5a:
                    e7:b8:b1:85:4e:2b:b8:b9:1a:f0:99:b8:af:40:5c:
                    68:74:27:d5:5a:e0:af:a7:e1:a2:be:72:f2:ea:6d:
                    36:23:31:f1:f8:fd:d2:f8:4c:be:ff:e9:32:12:64:
                    a0:02:15:06:4f:37:b1:00:2c:40:9b:ff:a5:a1:36:
                    62:29:ab:51:78:59:6f:66:10:1d:02:d4:13:65:74:
                    02:b4:8c:1b:bb:8e:ea:95:f3:f1:ed:70:5e:63:dc:
                    97:30:7d:72:ca:23:e7:ca:40:81:15:63:12:6b:cd:
                    b0:df:1c:df:ac:85:30:b2:85:f2:d7:5d:bc:76:68:
                    fe:12:03:c4:66:26:a1:bf:7d:6d:c6:f6:0c:19:6f:
                    d3:2b:72:2e:80:bd:5b:c2:06:66:dc:b9:19:48:02:
                    c6:a7:eb:8d:81:a7:87:95:77:40:ed:3b:1e:17:7f:
                    f0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2E:8A:17:E2:F6:D3:54:1D:B3:28:D4:DE:D9:52:5C:3E:91:3E:44
            X509v3 Authority Key Identifier:
                keyid:6B:DD:E9:7E:C2:F2:BE:52:8B:DA:85:FA:60:EA:EA:59:78:0E:A4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37322e302f32342d3234203d3e20323638313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:b8:48:57:c5:05:64:9c:31:ce:bf:1e:94:dd:e9:ae:77:43:
         c0:b4:50:88:41:b2:6a:60:bb:20:ef:4c:47:80:46:e5:00:8e:
         bb:56:18:42:8a:07:4d:26:c8:d1:91:ae:5e:46:f0:4e:5b:2a:
         09:c3:02:5c:db:f8:c8:c9:68:a5:b1:d7:ef:85:e2:f3:02:81:
         df:91:95:bf:98:e5:42:84:74:31:74:62:ed:4e:2b:ea:5d:6d:
         38:de:5c:71:b9:62:8f:82:7e:fb:02:3e:bb:9c:8f:ad:86:bf:
         19:5b:cb:4a:44:a4:43:c2:54:4c:69:70:a1:8e:6b:0c:3a:30:
         8a:ea:3c:fe:c5:43:03:36:91:8d:1f:7c:9b:22:25:00:10:a0:
         70:37:64:23:3f:80:3a:ce:80:13:06:f5:ae:60:56:25:20:23:
         59:56:81:c0:35:4e:1a:f4:e7:b9:53:b9:2d:84:da:e8:a1:54:
         8f:58:4d:c4:bd:60:f1:93:f9:ac:89:a6:bc:25:a8:8a:c1:b1:
         5b:1a:90:d9:d9:2b:ad:e0:53:cf:bd:20:77:d9:b8:9e:fe:31:
         e2:32:0e:b5:da:b9:b6:04:37:dc:26:b9:61:a1:14:03:42:5e:
         cf:0a:33:94:4a:5e:0c:e3:84:1c:c6:de:13:ff:0c:b6:ac:23:
         27:5c:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org