Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137372e302f32342d3234203d3e20323638383138.roa
File:                     34352e3137332e3137372e302f32342d3234203d3e20323638383138.roa (raw, json)
Hash identifier:          yr/6deuyqUecdmnywV9GLkVi3wP/TyvsDPvARIhmPxo=
Subject key identifier:   94:9B:C5:B3:98:F1:3D:93:71:90:C2:A3:3D:9F:14:B1:F6:32:17:41
Certificate issuer:       /CN=C4D5C5400FE83E14C685785FB1C216DAF000FF44
Certificate serial:       733C749B1D37DDDEF8C4FF00D58E62F295A7E6E3
Authority key identifier: C4:D5:C5:40:0F:E8:3E:14:C6:85:78:5F:B1:C2:16:DA:F0:00:FF:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137372e302f32342d3234203d3e20323638383138.roa
Signing time:             Tue 24 Sep 2024 13:22:02 +0000
ROA not before:           Tue 24 Sep 2024 13:17:02 +0000
ROA not after:            Tue 23 Sep 2025 13:22:02 +0000
asID:                     268818
IP address blocks:        45.173.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.crl
                          rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3c:74:9b:1d:37:dd:de:f8:c4:ff:00:d5:8e:62:f2:95:a7:e6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4D5C5400FE83E14C685785FB1C216DAF000FF44
        Validity
            Not Before: Sep 24 13:17:02 2024 GMT
            Not After : Sep 23 13:22:02 2025 GMT
        Subject: CN=949BC5B398F13D937190C2A33D9F14B1F6321741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ad:2f:15:9f:ea:f6:04:5b:5f:c4:ef:ab:c0:
                    d9:89:a7:3b:ba:86:f4:7f:e1:74:a0:13:17:2c:50:
                    96:99:df:5a:82:c6:ee:5e:0f:64:aa:76:f7:7e:3b:
                    5b:31:e9:72:4d:8f:fc:fb:e2:a7:04:82:4a:9f:5d:
                    c9:95:fe:9c:27:2d:13:f1:fe:8f:d0:15:0f:47:5b:
                    15:99:f2:12:50:38:30:e1:8d:8b:a2:6d:3a:7b:1b:
                    94:94:91:ac:bb:46:46:90:f2:1f:b5:65:80:23:e9:
                    20:f5:2c:cd:f7:e5:0d:21:cd:ad:1e:cd:fe:e5:b7:
                    3f:1f:42:1e:12:18:8b:71:6a:75:85:91:cb:78:aa:
                    cc:97:af:31:cf:28:f7:f1:92:b6:a3:02:29:c4:88:
                    ce:e3:ce:69:1f:62:a2:e1:fc:ae:ae:ce:b6:a7:01:
                    26:0a:5d:53:08:85:30:3f:e3:39:03:00:5c:c7:4a:
                    a9:40:fb:9a:91:21:e3:5b:6a:09:9b:db:17:27:48:
                    c8:0b:fc:02:2c:f7:6b:25:22:97:7a:5e:75:d8:5d:
                    54:c5:d8:29:44:d5:9c:ea:30:42:3b:11:c3:72:e2:
                    38:16:e7:0c:05:34:27:71:66:31:48:67:9a:a6:d6:
                    e7:15:c6:ed:93:c3:08:52:27:8d:66:39:5e:c2:52:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9B:C5:B3:98:F1:3D:93:71:90:C2:A3:3D:9F:14:B1:F6:32:17:41
            X509v3 Authority Key Identifier:
                keyid:C4:D5:C5:40:0F:E8:3E:14:C6:85:78:5F:B1:C2:16:DA:F0:00:FF:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137372e302f32342d3234203d3e20323638383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:af:5e:96:e7:ce:45:a4:c7:09:d1:25:e8:34:0e:b8:73:c4:
         cb:9b:1f:24:32:30:eb:3a:ed:e4:b0:4b:8b:fe:a2:21:29:67:
         34:bc:be:85:a6:d7:07:fd:d6:b4:40:b4:07:24:81:88:f2:c8:
         78:11:c9:c7:e8:c9:7e:36:96:dd:ec:48:35:0b:ad:4d:19:6e:
         d4:f9:7f:56:66:66:7b:46:1d:53:73:e6:cf:4f:72:d1:ae:a3:
         03:c4:cd:af:17:72:32:25:c1:7a:b1:5a:cc:36:a5:ca:ea:14:
         d7:47:0f:14:81:4f:64:f6:1f:80:34:44:b8:26:63:f9:eb:5f:
         20:03:71:8a:91:93:b6:f5:47:cd:29:c1:a8:33:44:0f:24:5f:
         af:6c:f4:8c:a7:9a:4d:c7:a3:9a:f4:31:ab:53:27:0c:c6:2f:
         20:69:f5:2f:f8:ac:e4:c7:a5:c5:84:43:68:27:b4:14:ad:e2:
         a1:62:6d:fb:00:09:cc:1c:57:ab:e8:cd:fb:4d:16:58:9e:ba:
         ce:f3:e5:de:0f:23:bf:15:7d:65:cb:2c:ab:61:28:a3:01:1a:
         b9:08:70:0d:2e:be:12:68:22:23:b6:9e:2f:83:24:6e:f3:e9:
         b1:e0:9c:ec:a1:9e:a3:81:d1:30:b6:26:2a:86:d4:a1:37:63:
         fd:b5:78:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:54 2024 by rpki-client on console-fra.rpki-client.org