Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137392e302f32342d3234203d3e20323638383138.roa
File:                     34352e3137332e3137392e302f32342d3234203d3e20323638383138.roa (raw, json)
Hash identifier:          ShaQHBt0wmBRqqiJubv9r6g3oMAiZxCQyVLfhuqu4Ww=
Subject key identifier:   25:A0:DC:54:0C:ED:2B:0D:DF:07:95:E6:B6:E0:24:90:3D:21:89:BD
Certificate issuer:       /CN=C4D5C5400FE83E14C685785FB1C216DAF000FF44
Certificate serial:       4499E7E3DC8EB33AB18BE3B95E5F68AD020906C9
Authority key identifier: C4:D5:C5:40:0F:E8:3E:14:C6:85:78:5F:B1:C2:16:DA:F0:00:FF:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137392e302f32342d3234203d3e20323638383138.roa
Signing time:             Tue 24 Sep 2024 13:22:00 +0000
ROA not before:           Tue 24 Sep 2024 13:17:00 +0000
ROA not after:            Tue 23 Sep 2025 13:22:00 +0000
asID:                     268818
IP address blocks:        45.173.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.crl
                          rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:99:e7:e3:dc:8e:b3:3a:b1:8b:e3:b9:5e:5f:68:ad:02:09:06:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4D5C5400FE83E14C685785FB1C216DAF000FF44
        Validity
            Not Before: Sep 24 13:17:00 2024 GMT
            Not After : Sep 23 13:22:00 2025 GMT
        Subject: CN=25A0DC540CED2B0DDF0795E6B6E024903D2189BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:d6:71:77:28:bc:ac:29:d0:9a:08:e6:87:
                    43:a5:8e:89:42:c4:17:56:2a:81:02:b3:bb:6c:d9:
                    50:ac:a5:0a:cb:a4:a9:8e:49:cf:78:21:24:42:ff:
                    cb:f5:83:de:96:ce:14:9e:4c:bd:8c:55:1c:5d:27:
                    e7:8e:3f:1f:31:99:0d:65:2a:0d:81:7d:04:1c:72:
                    90:3f:f8:cd:cb:8f:16:95:83:0b:30:c8:07:6a:99:
                    79:07:be:29:2b:d6:7d:45:9d:c8:8c:50:3a:c4:55:
                    88:6e:8b:3d:40:a2:9c:95:e8:02:33:4b:40:df:ad:
                    b2:eb:e5:3c:c2:43:e8:a3:09:62:46:66:aa:df:27:
                    57:cf:23:0b:f7:65:a1:a2:70:ff:f6:9a:16:26:5c:
                    2a:e3:5a:f1:56:b6:cd:98:89:05:fe:3a:f0:17:84:
                    74:68:11:c0:a5:7d:df:fd:50:f1:ea:ff:56:c4:3c:
                    70:bc:a8:c8:c9:44:7c:19:d6:33:38:c8:58:0f:df:
                    95:cf:8e:99:fa:9c:6b:65:ba:b7:8a:09:c6:f3:68:
                    ec:43:61:ca:2c:b4:0c:e3:94:9c:1c:a0:14:a4:84:
                    11:49:0a:7d:3b:20:60:ff:5e:e1:eb:ff:21:07:0b:
                    1b:71:9d:6d:d3:e0:36:e2:78:47:8a:d3:00:ea:e5:
                    ea:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A0:DC:54:0C:ED:2B:0D:DF:07:95:E6:B6:E0:24:90:3D:21:89:BD
            X509v3 Authority Key Identifier:
                keyid:C4:D5:C5:40:0F:E8:3E:14:C6:85:78:5F:B1:C2:16:DA:F0:00:FF:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137392e302f32342d3234203d3e20323638383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:11:d0:b5:15:da:71:58:fc:46:dc:2c:1a:24:8b:3a:8b:38:
         ac:84:7a:e1:90:ae:14:8e:50:9f:3c:64:a8:8a:f2:43:2c:c2:
         5c:f4:f3:9c:df:df:6a:df:b9:8c:58:47:ab:36:42:ac:ba:aa:
         63:81:fe:75:a0:86:dc:e4:b2:ab:6f:57:2e:75:50:8c:76:43:
         64:5b:2e:af:8c:01:13:c9:1c:41:57:0d:e3:6a:5a:cb:ff:a3:
         63:37:4f:12:0a:14:a8:1b:81:6b:f3:a6:18:39:74:13:6b:69:
         a6:56:2c:48:8b:c7:58:02:fa:6d:0b:d7:18:94:91:60:d9:8e:
         02:b1:92:86:2c:e8:bf:e0:8f:42:c5:16:ae:77:29:5e:ee:a0:
         dc:a7:e4:c9:84:09:a0:60:29:6d:7a:63:49:a0:c3:fb:b2:da:
         91:6f:bc:c3:d9:b8:44:e3:4b:a7:14:b4:c0:78:10:33:f9:5b:
         87:54:56:82:69:8d:64:01:c8:a3:7c:79:81:83:cc:e6:97:16:
         1e:9a:ce:1d:c5:82:7a:89:e1:5f:2b:ed:f6:f0:db:27:f9:3f:
         c2:dd:42:d4:bb:a2:2a:7d:89:67:66:75:92:2f:b0:b4:45:19:
         00:51:a6:ec:ef:3f:56:b7:64:1d:ba:61:5b:16:02:3a:82:06:
         33:68:0e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:36 2024 by rpki-client on console-ams.rpki-client.org