Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137362e302f32322d3232203d3e20323638383138.roa
File:                     34352e3137332e3137362e302f32322d3232203d3e20323638383138.roa (raw, json)
Hash identifier:          I4YgzMDVN/M32CjmjASp2M+2WS+VuckVrQKpGVlBn4U=
Subject key identifier:   F7:8F:62:35:28:B3:EA:34:46:C8:D7:BF:77:98:34:47:BF:64:9D:E5
Certificate issuer:       /CN=C4D5C5400FE83E14C685785FB1C216DAF000FF44
Certificate serial:       2A5FE4D197F1DC9DF75C6FE6C74877B75B030384
Authority key identifier: C4:D5:C5:40:0F:E8:3E:14:C6:85:78:5F:B1:C2:16:DA:F0:00:FF:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137362e302f32322d3232203d3e20323638383138.roa
Signing time:             Tue 24 Sep 2024 13:22:01 +0000
ROA not before:           Tue 24 Sep 2024 13:17:01 +0000
ROA not after:            Tue 23 Sep 2025 13:22:01 +0000
asID:                     268818
IP address blocks:        45.173.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.crl
                          rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5f:e4:d1:97:f1:dc:9d:f7:5c:6f:e6:c7:48:77:b7:5b:03:03:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4D5C5400FE83E14C685785FB1C216DAF000FF44
        Validity
            Not Before: Sep 24 13:17:01 2024 GMT
            Not After : Sep 23 13:22:01 2025 GMT
        Subject: CN=F78F623528B3EA3446C8D7BF77983447BF649DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:87:97:93:97:10:02:1b:07:a8:b8:b1:b8:
                    23:a0:09:11:64:a6:cd:08:a1:2e:32:2a:96:a6:f6:
                    28:1e:8b:4a:cb:a5:57:74:a9:48:ce:a2:b6:b2:32:
                    18:9d:29:0d:0a:6c:09:3d:cf:bb:ce:4b:f9:c7:9e:
                    1f:55:73:d1:3c:53:55:aa:77:65:1f:60:6e:ed:a3:
                    bb:57:5b:03:d3:75:7e:13:29:69:06:bc:0c:9e:2e:
                    c8:9d:5c:3c:0c:f0:84:cd:73:63:ea:79:83:bc:4c:
                    86:42:7a:ea:dc:8e:b5:08:a6:ad:eb:ff:56:8a:e2:
                    6b:66:a2:51:6e:79:c8:20:75:5f:08:f8:f9:38:e1:
                    43:cc:7e:6b:09:04:3e:06:58:cb:63:63:00:cc:42:
                    93:8b:e9:a1:7f:79:fe:82:c9:40:37:70:de:f6:3e:
                    24:34:0e:a3:af:cf:a0:9d:16:cd:b3:21:52:17:1d:
                    31:74:01:b8:bf:7c:77:92:62:83:d2:4b:fb:3b:2d:
                    24:54:be:88:da:ad:5a:fd:8a:19:da:98:39:a6:34:
                    a1:76:45:65:02:5e:2f:02:36:3e:66:84:04:b8:db:
                    86:f4:e3:ee:b5:21:7a:25:6a:4a:e9:45:72:27:a2:
                    0a:1e:8f:2f:0e:b8:94:f7:ae:99:9c:51:3c:1a:4a:
                    2c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8F:62:35:28:B3:EA:34:46:C8:D7:BF:77:98:34:47:BF:64:9D:E5
            X509v3 Authority Key Identifier:
                keyid:C4:D5:C5:40:0F:E8:3E:14:C6:85:78:5F:B1:C2:16:DA:F0:00:FF:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137362e302f32322d3232203d3e20323638383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:70:46:6b:72:74:c2:e2:14:de:4e:51:6a:43:18:9d:24:ae:
         b4:18:12:8b:9f:de:01:e1:46:03:82:26:12:8c:f4:a4:69:19:
         80:07:6c:ce:b3:b4:45:8f:24:36:5d:2a:31:be:e2:e7:14:fa:
         0b:76:d2:d7:59:2d:90:d1:33:8b:88:be:ac:1c:e6:81:f6:37:
         4c:8a:47:f8:9e:25:67:d7:b2:fe:3e:c5:6f:be:59:05:1e:7c:
         62:e3:3c:64:c9:9f:44:da:94:f9:ba:97:69:88:b4:57:14:2b:
         b1:18:8d:66:be:bc:f3:f1:58:ae:24:7f:21:18:11:bf:08:81:
         05:48:f5:4f:5f:3b:b3:20:e7:c3:d7:a7:4d:fc:30:a1:ec:c9:
         18:3b:e9:3d:f6:6f:9c:1b:8d:79:cf:55:19:c8:98:70:ac:af:
         26:61:e8:8c:4a:9b:6f:60:e9:60:72:17:0a:64:eb:ba:f6:81:
         7f:ff:db:b3:9e:41:cd:e1:f9:bd:2e:0b:e7:1a:23:bd:40:a7:
         87:d5:98:45:78:11:91:dd:bc:9d:81:48:36:21:a5:f1:12:a0:
         2c:2e:ba:85:ae:f5:2e:68:8b:c5:31:e3:ae:44:fa:85:1a:b2:
         b0:69:fc:aa:5f:b3:17:b4:d7:63:6b:57:75:95:76:78:cc:70:
         3f:7b:64:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:36 2024 by rpki-client on console-ams.rpki-client.org