Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37392e302f32342d3234203d3e20323638383930.roa
File:                     34352e3137352e37392e302f32342d3234203d3e20323638383930.roa (raw, json)
Hash identifier:          fesU0k+uNaVKSnj/BDIGxhxRa2uhjyafrR9KCUhTZ5c=
Subject key identifier:   09:9C:DE:08:17:D5:0B:F1:03:EC:6D:41:27:10:8D:F9:79:BC:CF:88
Certificate issuer:       /CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
Certificate serial:       67316466A0C6A5DB6E1621C4FA8EE8F89290B2A2
Authority key identifier: A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37392e302f32342d3234203d3e20323638383930.roa
Signing time:             Tue 09 Apr 2024 19:50:14 +0000
ROA not before:           Tue 09 Apr 2024 19:45:14 +0000
ROA not after:            Tue 08 Apr 2025 19:50:14 +0000
asID:                     268890
IP address blocks:        45.175.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.crl
                          rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:31:64:66:a0:c6:a5:db:6e:16:21:c4:fa:8e:e8:f8:92:90:b2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
        Validity
            Not Before: Apr  9 19:45:14 2024 GMT
            Not After : Apr  8 19:50:14 2025 GMT
        Subject: CN=099CDE0817D50BF103EC6D4127108DF979BCCF88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:8d:1d:13:4f:1d:8c:db:b1:b5:1b:0d:c4:
                    30:01:86:0e:6d:ce:5e:58:ea:2b:ff:08:0d:2e:dd:
                    39:76:ba:9e:9c:f4:2b:fd:8e:6c:f1:b3:a6:6b:ed:
                    65:4e:68:11:f0:69:fd:f7:1c:b4:ab:f9:c7:ce:fa:
                    d3:7c:14:18:0e:63:b7:6c:2a:4b:7a:0d:01:3e:dc:
                    b5:b2:5d:c8:1c:30:4e:0c:76:a7:41:96:9d:ef:18:
                    cb:4d:4c:1b:6b:d0:ec:ed:46:c1:48:91:01:f3:2f:
                    a4:76:62:09:b8:9d:cd:b6:ce:cc:85:0a:94:ff:b0:
                    e6:b8:68:4c:62:11:f7:a0:c8:8f:0e:d1:20:85:9f:
                    4f:c2:a2:26:8f:42:e2:0d:69:25:7f:96:90:f1:6d:
                    f8:9f:4e:5f:4d:4a:66:e2:a7:de:ee:47:1d:16:2c:
                    b4:c7:c1:8d:ad:d4:3d:04:fe:01:c6:2c:22:3d:db:
                    26:57:15:6f:e1:47:2d:c7:51:c3:65:c5:a1:07:c7:
                    0e:55:f8:58:bd:98:37:3e:7f:87:f3:b4:18:61:e3:
                    e8:3f:12:66:1f:17:47:31:b3:03:47:5f:92:dc:a8:
                    77:c0:21:da:7f:86:03:b3:26:2d:b9:7f:5c:f2:ad:
                    eb:0c:f0:d4:ab:cf:99:d2:52:3c:1c:e7:19:9c:a6:
                    22:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9C:DE:08:17:D5:0B:F1:03:EC:6D:41:27:10:8D:F9:79:BC:CF:88
            X509v3 Authority Key Identifier:
                keyid:A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37392e302f32342d3234203d3e20323638383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:c6:43:ea:41:1c:5d:56:46:4d:7e:8d:92:08:44:2a:c0:ec:
         b3:2c:26:57:d1:cf:08:ed:a6:ed:54:26:34:fc:89:d8:8c:72:
         fb:1c:38:27:9c:57:14:7f:2e:36:cd:06:8e:a3:8f:c2:45:d6:
         56:74:29:91:a9:95:42:66:67:d4:9f:b3:7d:75:fe:b6:44:2d:
         8f:b0:f6:48:e0:3b:8f:a1:93:3b:b8:71:1d:67:2d:5a:11:46:
         48:7d:a0:9a:5a:f6:6b:7f:f6:08:05:83:1b:56:93:45:f1:bc:
         c6:71:9e:91:2e:3d:0c:51:db:78:7d:a0:b3:fd:6c:10:9b:34:
         2c:25:48:0e:5b:2d:0b:80:ac:aa:9b:fb:86:82:c1:21:dc:c6:
         d3:e1:b6:3e:75:fa:bc:ee:ab:86:5e:bb:bb:93:4c:cd:e9:1b:
         26:ea:ae:1d:0c:fc:7b:9b:4f:be:c5:59:f2:85:02:ea:24:ef:
         ea:15:e2:3d:40:e7:39:41:f5:b4:f7:96:4c:fc:28:4a:23:70:
         1c:02:31:a1:db:da:8b:55:f7:5b:f5:e8:e4:3d:cf:54:e6:5e:
         c4:b2:06:98:1c:9f:20:f3:6d:bb:ab:da:92:9c:d6:3a:9c:8a:
         65:ee:34:cf:4b:b7:2a:80:f4:a6:86:ae:d4:3c:cb:64:83:7b:
         ed:e3:ff:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:36 2024 by rpki-client on console-fra.rpki-client.org