Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137382e302f32332d3233203d3e20323638383138.roa
File:                     34352e3137332e3137382e302f32332d3233203d3e20323638383138.roa (raw, json)
Hash identifier:          aWa3HXHPCo+hrFG39AaJvafNty17ZxqY/kroEnz8ZBk=
Subject key identifier:   36:7C:46:5C:F0:89:F5:02:1C:D8:05:11:CC:19:6A:6F:44:C6:E2:6B
Certificate issuer:       /CN=C4D5C5400FE83E14C685785FB1C216DAF000FF44
Certificate serial:       20E6036548A28495249303F466E6E7F64E131078
Authority key identifier: C4:D5:C5:40:0F:E8:3E:14:C6:85:78:5F:B1:C2:16:DA:F0:00:FF:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137382e302f32332d3233203d3e20323638383138.roa
Signing time:             Tue 24 Sep 2024 13:22:02 +0000
ROA not before:           Tue 24 Sep 2024 13:17:02 +0000
ROA not after:            Tue 23 Sep 2025 13:22:02 +0000
asID:                     268818
IP address blocks:        45.173.178.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.crl
                          rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e6:03:65:48:a2:84:95:24:93:03:f4:66:e6:e7:f6:4e:13:10:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4D5C5400FE83E14C685785FB1C216DAF000FF44
        Validity
            Not Before: Sep 24 13:17:02 2024 GMT
            Not After : Sep 23 13:22:02 2025 GMT
        Subject: CN=367C465CF089F5021CD80511CC196A6F44C6E26B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:16:03:52:d2:41:86:73:d7:85:83:fa:a4:f0:
                    68:ee:8e:2a:e4:2f:8c:95:ad:31:a4:d9:6b:82:d6:
                    15:b6:8d:bd:a8:2f:00:6e:26:50:40:72:ee:40:a7:
                    4c:3d:78:38:f4:8e:65:d7:08:fa:eb:5b:a2:5a:1e:
                    8a:cc:f8:75:89:ac:14:00:25:0d:05:63:28:21:54:
                    c0:8b:e5:69:75:bc:3a:b3:7d:61:5e:fc:30:0c:00:
                    e3:19:a4:a5:37:ca:a2:35:89:65:71:87:73:7f:b5:
                    96:59:f1:ce:83:38:78:36:20:ba:4b:f1:60:3b:f6:
                    02:ad:6c:79:bc:ba:bd:0d:a3:9a:6a:0e:55:16:d9:
                    3a:df:c8:bb:64:d9:86:22:81:61:d3:a5:1d:e8:25:
                    60:e0:fb:83:ef:32:0b:5f:9e:98:02:3b:91:62:4a:
                    de:d0:64:4d:b1:a6:1a:82:41:f6:4f:31:fa:3f:a6:
                    c6:60:f2:43:aa:11:4f:24:d0:79:29:c4:27:79:2d:
                    08:75:fe:ce:5d:91:2c:3e:e1:ad:7d:c1:c3:75:a5:
                    cd:ae:0a:d0:cd:97:a5:ff:55:db:52:a9:0d:79:0b:
                    d3:9d:7f:f4:45:c0:1f:77:05:e2:b0:76:d0:3a:07:
                    9e:94:f6:84:97:c6:cd:be:77:50:c8:f0:78:d5:20:
                    4f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7C:46:5C:F0:89:F5:02:1C:D8:05:11:CC:19:6A:6F:44:C6:E2:6B
            X509v3 Authority Key Identifier:
                keyid:C4:D5:C5:40:0F:E8:3E:14:C6:85:78:5F:B1:C2:16:DA:F0:00:FF:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137382e302f32332d3233203d3e20323638383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:2c:f3:8f:ca:63:1a:e0:a5:24:2a:b3:fe:7f:cc:44:3d:3e:
         1c:ad:7a:c8:2d:18:12:62:f8:b4:4b:c1:5c:f8:b0:51:c2:ad:
         ea:49:8d:9b:dc:f9:6d:98:5f:79:af:cb:ae:27:17:91:a8:6e:
         ef:96:78:0e:ec:15:aa:2b:11:9b:86:da:82:c4:41:03:32:2e:
         d8:01:05:42:de:77:ca:54:7d:b4:90:1f:ec:66:98:ab:e4:92:
         10:76:92:e9:d4:af:08:bd:60:33:10:15:84:49:05:10:92:0f:
         03:32:36:88:a4:2d:8d:a5:2d:3d:f6:7f:d3:e4:e9:91:49:cb:
         a4:a6:d0:2d:33:76:e4:f8:69:ee:0f:0e:06:fd:5c:01:ce:89:
         36:bc:20:f9:b5:28:1c:5a:a4:af:4f:53:c4:46:f2:03:6b:ce:
         44:5a:f1:fb:78:b8:9e:64:db:3f:ca:04:ee:53:97:9e:3d:c3:
         a3:79:8a:a6:ef:33:84:8b:dd:26:0c:53:10:dd:97:58:fb:55:
         07:b8:34:ab:1e:83:0e:8f:ac:6d:67:f3:f0:1e:b6:ce:df:99:
         5d:56:68:03:41:fa:81:ec:dc:4c:00:fc:56:6e:eb:0d:fb:9a:
         e9:b6:54:e1:4c:a1:bb:fb:1e:27:e8:ef:82:7b:17:38:25:a3:
         fe:1f:68:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:54 2024 by rpki-client on console-fra.rpki-client.org