Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137362e302f32332d3233203d3e20323638383138.roa
File:                     34352e3137332e3137362e302f32332d3233203d3e20323638383138.roa (raw, json)
Hash identifier:          0G2dYsXrWniTmqEsTSM9vN7iMyRRAS2C6Kup73MscZE=
Subject key identifier:   FE:C0:F7:21:92:B4:AB:36:27:32:A4:EF:7D:F2:5B:AF:2C:17:D7:BA
Certificate issuer:       /CN=C4D5C5400FE83E14C685785FB1C216DAF000FF44
Certificate serial:       3952884DC74FE05ABBDA190F0AFD67EE48E09BBD
Authority key identifier: C4:D5:C5:40:0F:E8:3E:14:C6:85:78:5F:B1:C2:16:DA:F0:00:FF:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137362e302f32332d3233203d3e20323638383138.roa
Signing time:             Tue 24 Sep 2024 13:22:00 +0000
ROA not before:           Tue 24 Sep 2024 13:17:00 +0000
ROA not after:            Tue 23 Sep 2025 13:22:00 +0000
asID:                     268818
IP address blocks:        45.173.176.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.crl
                          rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:52:88:4d:c7:4f:e0:5a:bb:da:19:0f:0a:fd:67:ee:48:e0:9b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4D5C5400FE83E14C685785FB1C216DAF000FF44
        Validity
            Not Before: Sep 24 13:17:00 2024 GMT
            Not After : Sep 23 13:22:00 2025 GMT
        Subject: CN=FEC0F72192B4AB362732A4EF7DF25BAF2C17D7BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:36:88:4d:4f:5c:70:56:2d:85:b6:09:25:
                    1f:74:3a:c3:79:9b:9e:06:c8:07:6d:0d:e0:53:ac:
                    90:79:4b:61:37:b4:db:ff:74:80:9a:45:ef:ff:a9:
                    07:bc:9d:c0:94:b5:57:d2:d8:f2:20:fd:c2:fb:a9:
                    32:4c:6d:b4:2d:8a:e8:fe:7c:7a:58:cd:a4:d3:29:
                    66:60:5e:ea:46:eb:a9:64:74:de:63:29:8c:7c:cc:
                    3c:d0:13:76:44:df:3f:8d:19:b1:6e:b8:d3:29:eb:
                    a8:c6:29:be:7a:09:4a:22:67:f6:85:10:de:bf:7e:
                    ca:13:09:b9:97:66:11:8f:72:89:49:c3:8f:68:9a:
                    45:e0:a5:db:68:14:71:34:14:aa:fe:7b:02:02:f1:
                    25:71:f6:19:20:d6:2a:f4:b2:df:5c:4a:17:78:fc:
                    aa:01:35:ef:86:e5:5d:17:91:f7:79:6b:dc:75:14:
                    6b:f6:65:63:8b:f3:31:28:d4:ce:d2:8e:66:66:f5:
                    77:ac:58:c9:f9:cf:92:aa:d2:f8:60:e3:f0:e6:b9:
                    c1:85:16:aa:ee:e6:dd:f5:61:c0:d3:66:5d:d4:0b:
                    e0:a6:4c:41:d5:53:ab:70:83:b2:e4:10:12:47:f2:
                    3f:6c:e4:8a:f1:49:12:37:8d:6c:2b:4a:b9:07:56:
                    73:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C0:F7:21:92:B4:AB:36:27:32:A4:EF:7D:F2:5B:AF:2C:17:D7:BA
            X509v3 Authority Key Identifier:
                keyid:C4:D5:C5:40:0F:E8:3E:14:C6:85:78:5F:B1:C2:16:DA:F0:00:FF:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137362e302f32332d3233203d3e20323638383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:43:9e:f4:55:86:a0:2e:72:d9:ca:ac:2a:c3:a1:0c:34:fc:
         6e:7d:ab:6b:49:8a:dc:7a:34:7d:62:a3:70:46:9e:f6:61:64:
         80:3b:46:92:90:c2:7f:b2:31:38:db:e7:a5:e9:70:36:cb:d3:
         51:7e:91:86:fe:9f:eb:75:03:4e:6a:62:df:b8:57:24:72:bd:
         4c:23:60:b3:05:c4:7b:1a:00:0a:52:40:58:1d:fc:ab:3d:b4:
         4f:f7:f9:3e:2f:bb:e8:6d:d1:34:a2:6d:ad:f9:2b:3f:d1:05:
         41:cd:3f:c6:80:fa:02:18:2f:66:10:d1:98:1e:7b:87:50:67:
         38:14:62:92:b2:99:08:cb:20:62:e2:38:3c:2f:d1:fa:7d:20:
         0a:6b:cf:a8:b0:b3:d2:71:d6:c1:69:cb:dc:78:97:be:23:12:
         a5:7c:c2:52:c1:d0:c2:e9:85:9a:f6:85:2f:5d:20:ad:0e:06:
         62:54:51:4e:cf:37:db:b9:1f:01:b8:8a:8e:dd:0b:fe:35:d6:
         c8:f9:e4:eb:fd:73:bc:49:19:a9:a1:58:b1:10:67:5c:2f:e1:
         c5:83:63:3a:c0:14:01:db:3b:a9:c2:ff:a8:c0:f4:ac:77:b0:
         32:a3:78:85:52:af:ff:68:f8:d8:3b:c8:d4:96:a8:bc:fd:8e:
         24:f5:de:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:54 2024 by rpki-client on console-fra.rpki-client.org