Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/34352e3137392e36382e302f32322d3234203d3e20323639313039.roa
File:                     34352e3137392e36382e302f32322d3234203d3e20323639313039.roa (raw, json)
Hash identifier:          OS4lKGwB/K5/E4w8yFh7fWYPjrt8LTzTDxmiaBhZdyU=
Subject key identifier:   5F:EB:57:BE:6E:78:86:38:FF:2A:8C:A1:2C:C6:8E:70:97:C6:78:97
Certificate issuer:       /CN=731E05587A515DC8E182AA61A430D26BD051E940
Certificate serial:       679D9BA29E742CC0DE1CEE0E4985B05E97D79447
Authority key identifier: 73:1E:05:58:7A:51:5D:C8:E1:82:AA:61:A4:30:D2:6B:D0:51:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731E05587A515DC8E182AA61A430D26BD051E940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/34352e3137392e36382e302f32322d3234203d3e20323639313039.roa
Signing time:             Tue 16 Jul 2024 17:05:16 +0000
ROA not before:           Tue 16 Jul 2024 17:00:16 +0000
ROA not after:            Tue 15 Jul 2025 17:05:16 +0000
asID:                     269109
IP address blocks:        45.179.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/731E05587A515DC8E182AA61A430D26BD051E940.crl
                          rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/731E05587A515DC8E182AA61A430D26BD051E940.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731E05587A515DC8E182AA61A430D26BD051E940.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 03:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9d:9b:a2:9e:74:2c:c0:de:1c:ee:0e:49:85:b0:5e:97:d7:94:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731E05587A515DC8E182AA61A430D26BD051E940
        Validity
            Not Before: Jul 16 17:00:16 2024 GMT
            Not After : Jul 15 17:05:16 2025 GMT
        Subject: CN=5FEB57BE6E788638FF2A8CA12CC68E7097C67897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:75:cc:e6:77:4e:da:bf:58:ba:b3:88:d5:59:
                    15:2e:36:6c:a3:b2:f7:7d:8f:26:9d:48:c6:df:78:
                    b6:6e:89:a3:65:ac:37:86:84:1b:60:30:3c:78:da:
                    27:3b:48:71:58:00:01:40:3f:7a:51:a4:e3:48:a3:
                    5c:fb:7e:43:02:1c:e9:43:50:64:ad:04:b3:7a:24:
                    a9:15:65:34:87:0f:27:9d:2d:f3:39:4d:0e:99:59:
                    cc:73:2f:4e:1d:2f:a5:44:f8:d2:56:cb:3d:d5:28:
                    99:bf:3e:52:b9:f2:ae:de:0b:64:e4:09:7a:17:2a:
                    01:2f:ab:d6:d4:88:26:85:49:2f:80:09:91:b3:8d:
                    d0:11:4f:92:14:c1:27:8f:53:ef:ab:f3:44:48:ce:
                    61:38:30:4f:b8:ed:af:e9:3b:3e:36:ac:cd:70:63:
                    44:17:3e:b8:21:e2:20:c0:ac:b4:c7:ec:11:65:3f:
                    73:42:ed:8e:db:6a:3d:2d:f8:87:b5:73:f1:12:ab:
                    d5:5f:61:b4:75:ed:f4:7c:29:aa:dd:d7:ce:e6:3d:
                    32:0f:cf:90:4c:00:b9:2e:f6:e1:a8:fc:bc:04:8f:
                    46:5d:d1:bb:18:13:6a:bb:0b:03:13:57:6b:4b:72:
                    8d:f8:03:10:70:5a:19:7f:8d:e2:49:69:ab:81:a9:
                    52:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EB:57:BE:6E:78:86:38:FF:2A:8C:A1:2C:C6:8E:70:97:C6:78:97
            X509v3 Authority Key Identifier:
                keyid:73:1E:05:58:7A:51:5D:C8:E1:82:AA:61:A4:30:D2:6B:D0:51:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/731E05587A515DC8E182AA61A430D26BD051E940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731E05587A515DC8E182AA61A430D26BD051E940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/34352e3137392e36382e302f32322d3234203d3e20323639313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:04:55:f2:ab:13:dc:71:f3:75:e0:7b:3e:a5:4c:55:53:76:
         31:2a:17:12:61:ba:5a:9a:de:43:43:02:1d:9d:85:5a:7d:23:
         a9:9a:d0:13:2d:b6:5a:7c:77:ae:0d:31:de:7d:a9:75:51:b9:
         3e:1f:8f:10:01:18:57:c1:93:da:f1:89:8c:eb:e2:b7:06:ef:
         8d:19:5b:fa:1b:1f:cb:ca:27:1c:07:f8:57:09:1d:f6:6a:88:
         57:aa:94:ee:e9:37:36:66:0f:6e:68:b6:5f:a9:63:93:0f:24:
         c8:5d:d0:96:d6:e9:8f:88:1b:8e:74:16:7f:33:5b:eb:62:ed:
         e0:18:ae:04:37:a3:a4:ef:94:c5:e6:60:77:e2:dd:27:58:fd:
         c4:ff:98:39:05:46:e0:f3:aa:de:7b:98:ff:11:b2:03:2d:9c:
         2a:23:55:1d:cb:a7:a8:62:48:b8:aa:da:78:e9:f8:6e:11:2a:
         db:90:36:b9:b3:2c:a2:41:92:08:07:6b:f1:9b:6a:35:b5:ba:
         f5:55:61:6b:be:31:71:de:68:7b:67:e3:f2:d8:75:2b:a2:ce:
         29:03:85:b1:60:73:ae:80:7e:89:34:78:73:7c:4d:49:13:65:
         9b:74:cb:48:7f:63:8d:e3:96:11:da:99:dd:aa:de:1c:48:89:
         94:05:20:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:04:01 2024 by rpki-client on console-fra.rpki-client.org