Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/34352e3137352e3130382e302f32322d3332203d3e20323638393031.roa
File:                     34352e3137352e3130382e302f32322d3332203d3e20323638393031.roa (raw, json)
Hash identifier:          ESpwmsPA1hNyTRvZvNJkHFN+NNwJwHsV1f4tuiIbjmc=
Subject key identifier:   CE:A0:6D:C5:B5:F2:8B:9E:33:4E:BC:13:CC:83:35:E5:6F:3D:D0:A8
Certificate issuer:       /CN=358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51
Certificate serial:       5176A13D33CD9F64DE518DEEDB81E0E10D5DDF19
Authority key identifier: 35:8D:0C:BA:1A:BA:22:62:A3:AF:D5:F8:2C:60:EF:92:BD:58:7C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/34352e3137352e3130382e302f32322d3332203d3e20323638393031.roa
Signing time:             Thu 04 Apr 2024 04:50:45 +0000
ROA not before:           Thu 04 Apr 2024 04:45:45 +0000
ROA not after:            Thu 03 Apr 2025 04:50:45 +0000
asID:                     268901
IP address blocks:        45.175.108.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.crl
                          rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:76:a1:3d:33:cd:9f:64:de:51:8d:ee:db:81:e0:e1:0d:5d:df:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51
        Validity
            Not Before: Apr  4 04:45:45 2024 GMT
            Not After : Apr  3 04:50:45 2025 GMT
        Subject: CN=CEA06DC5B5F28B9E334EBC13CC8335E56F3DD0A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:25:c2:f8:47:28:48:fe:d7:2a:4d:e8:2b:a4:
                    bb:7f:a0:6c:65:23:88:a2:38:74:8b:ff:67:12:d7:
                    9a:5f:45:bb:25:09:5a:24:e9:f6:62:64:3b:a3:e6:
                    d5:d1:37:93:55:50:9a:8b:fd:ac:b6:dd:5c:df:e3:
                    c1:e0:5e:f6:7b:6f:b6:b9:b3:37:1a:54:4b:8f:87:
                    ab:ec:5c:74:34:5b:6e:0c:bb:67:6d:89:e9:a5:57:
                    d2:02:1d:73:cf:cd:88:a4:d1:95:b6:59:ca:3a:01:
                    89:42:e9:99:12:2d:32:f2:fb:d9:be:96:10:81:b8:
                    4e:8e:47:d0:4e:82:a4:8e:50:bc:e7:28:a3:29:77:
                    25:e5:56:49:69:f9:4f:e8:aa:6b:d1:37:56:6e:be:
                    97:6b:ed:63:ed:de:1c:df:2b:e0:77:7a:1e:a0:f3:
                    28:e8:ce:81:a0:23:45:b6:58:38:17:88:e8:a2:82:
                    d2:62:3c:c2:f1:57:7f:82:68:19:fb:3f:41:fc:a1:
                    47:f3:2f:09:75:63:79:e7:9c:a4:49:36:f1:dd:eb:
                    2b:15:df:3f:02:af:f3:d7:2c:5a:76:77:f8:c4:08:
                    88:9d:84:9a:1c:0c:b7:66:1d:18:c2:7c:49:3e:e3:
                    4b:f4:24:5c:f4:2d:26:22:39:39:4f:22:45:65:a1:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A0:6D:C5:B5:F2:8B:9E:33:4E:BC:13:CC:83:35:E5:6F:3D:D0:A8
            X509v3 Authority Key Identifier:
                keyid:35:8D:0C:BA:1A:BA:22:62:A3:AF:D5:F8:2C:60:EF:92:BD:58:7C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/34352e3137352e3130382e302f32322d3332203d3e20323638393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:67:f9:64:a4:51:47:c0:8e:aa:c4:16:9b:3a:c5:50:6d:10:
         01:c7:28:32:26:e7:62:5a:cc:f9:19:8b:6f:fc:2d:bf:b4:bd:
         24:c6:a8:d0:6c:e1:3f:fe:76:95:f0:29:86:57:c4:bc:cc:40:
         6e:17:84:98:3e:59:14:ff:c0:69:f5:e3:9f:21:53:92:3c:8e:
         1b:12:f6:35:ec:25:32:4d:cd:aa:82:44:d8:22:27:b1:cd:ce:
         2f:94:e1:f5:a6:0a:dc:b9:7a:64:77:01:ca:72:ac:d4:7c:fe:
         77:d9:3e:fc:8b:b0:53:99:63:06:d5:45:40:ef:53:dc:ef:a5:
         5c:9b:4c:7e:e2:7f:1a:a7:5f:c6:56:ee:a0:0c:b7:c6:f0:19:
         99:06:be:d4:81:51:c0:d3:c5:0f:07:e3:d9:bb:f3:17:2c:d0:
         30:fc:df:dc:be:a0:e7:de:2b:60:ae:68:14:64:7a:83:ed:3e:
         04:e5:de:7a:de:8a:a4:3d:b7:dd:45:1f:1e:7e:c2:cb:cf:fd:
         8e:16:c0:27:99:c4:1e:4c:1e:b3:84:7d:f9:60:14:63:7c:7d:
         eb:39:70:e0:d8:cf:87:20:04:e8:72:45:08:2c:93:2a:44:5f:
         6e:40:21:4b:f8:36:9e:bc:0b:c2:6a:78:6e:61:6e:ff:b0:9a:
         2f:89:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:11 2024 by rpki-client on console-fra.rpki-client.org