Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137362e302f32342d3234203d3e20323638383138.roa
File:                     34352e3137332e3137362e302f32342d3234203d3e20323638383138.roa (raw, json)
Hash identifier:          Ouvkxu6sajqZKakxEpxluPPndZi4jo1PuhOWdY+JOKs=
Subject key identifier:   73:02:74:69:B0:2B:4C:78:E7:62:39:20:D3:72:5A:ED:85:73:53:14
Certificate issuer:       /CN=C4D5C5400FE83E14C685785FB1C216DAF000FF44
Certificate serial:       71DB52286F169B6ED5028995CD2C97CFBC4433C0
Authority key identifier: C4:D5:C5:40:0F:E8:3E:14:C6:85:78:5F:B1:C2:16:DA:F0:00:FF:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137362e302f32342d3234203d3e20323638383138.roa
Signing time:             Tue 24 Sep 2024 13:22:01 +0000
ROA not before:           Tue 24 Sep 2024 13:17:01 +0000
ROA not after:            Tue 23 Sep 2025 13:22:01 +0000
asID:                     268818
IP address blocks:        45.173.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.crl
                          rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:db:52:28:6f:16:9b:6e:d5:02:89:95:cd:2c:97:cf:bc:44:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4D5C5400FE83E14C685785FB1C216DAF000FF44
        Validity
            Not Before: Sep 24 13:17:01 2024 GMT
            Not After : Sep 23 13:22:01 2025 GMT
        Subject: CN=73027469B02B4C78E7623920D3725AED85735314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:0a:2e:b9:f5:d0:66:34:9f:d3:6d:9b:a8:
                    c4:86:91:c5:25:24:eb:5d:5c:af:42:1d:64:32:8c:
                    0f:e0:e5:a7:c9:35:e1:ed:11:2f:60:80:08:38:87:
                    7b:ae:c2:07:52:9a:7f:c8:71:98:d2:45:74:cb:8c:
                    54:76:bf:35:4c:41:50:40:0b:37:14:58:88:fb:f5:
                    d1:b5:3f:2f:b8:7f:e0:a8:81:57:da:c5:5f:cb:3c:
                    45:b3:b9:07:a7:a0:00:73:dc:1c:ac:97:8d:1d:d4:
                    03:30:14:4a:5c:a5:ec:b9:8e:4c:42:28:bf:57:c1:
                    81:99:c4:00:44:d3:dc:bb:f8:f2:5a:0c:b4:6b:86:
                    ef:05:98:62:f2:49:e4:1d:b2:6c:04:c4:74:3c:0e:
                    47:7d:3d:ea:61:e5:fb:74:21:0b:85:95:3a:1c:5d:
                    49:a2:64:51:c9:28:17:f4:b8:7d:ff:d6:a8:0d:3e:
                    03:f6:c9:84:28:2a:53:e9:0a:79:f3:95:4d:13:57:
                    62:db:ba:50:9d:5f:cf:2e:db:98:58:94:e9:09:3c:
                    42:53:28:7c:3b:55:6d:05:86:6a:ba:22:0e:3b:8e:
                    fd:9f:eb:12:09:84:ce:3b:91:79:34:13:48:11:5a:
                    a7:6e:7b:b6:c7:20:12:75:73:ed:b6:16:c8:02:d1:
                    75:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:02:74:69:B0:2B:4C:78:E7:62:39:20:D3:72:5A:ED:85:73:53:14
            X509v3 Authority Key Identifier:
                keyid:C4:D5:C5:40:0F:E8:3E:14:C6:85:78:5F:B1:C2:16:DA:F0:00:FF:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137362e302f32342d3234203d3e20323638383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:80:45:5d:9d:0d:72:c6:2b:7b:6a:81:0f:c3:ca:7b:57:48:
         10:68:17:6a:1b:3f:86:33:e9:ec:3d:02:98:16:e9:60:a2:09:
         69:0a:4b:27:08:6c:45:3d:23:0f:4b:0e:0d:25:9e:7d:1b:35:
         75:fa:78:fb:a3:f4:4c:7d:a9:83:97:b9:bd:2e:5c:fd:de:ee:
         26:90:1e:0e:cd:65:92:42:c4:03:df:c0:f4:9d:04:3c:14:3b:
         91:59:7c:9f:7b:2e:29:9f:09:00:61:1f:0a:60:92:8a:ce:43:
         54:a0:1b:32:f0:26:21:cd:3b:ff:a5:af:08:a3:da:d5:5c:9e:
         df:b1:34:a8:df:4e:87:06:eb:08:9e:0f:aa:67:b7:18:fe:d5:
         26:47:8d:c5:9c:34:57:95:69:e7:57:32:8f:91:a9:9a:6d:86:
         13:b6:bf:61:10:4f:2a:4b:b8:a9:48:08:30:b0:7d:cd:ff:f2:
         d8:fe:06:48:34:38:4c:cb:0f:52:89:39:43:29:8f:ef:4d:fd:
         c4:4d:ba:c9:b4:f0:82:af:cf:d5:6c:61:eb:eb:f4:c4:ab:ac:
         e2:4e:0a:45:26:11:3c:1c:f5:40:b2:94:21:00:24:7a:be:40:
         29:38:ec:70:13:5b:9f:81:b2:39:51:69:6e:7e:90:c4:e4:b7:
         37:20:72:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:54 2024 by rpki-client on console-fra.rpki-client.org