Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/34352e3136302e3137322e302f32322d3234203d3e20323638343236.roa
File:                     34352e3136302e3137322e302f32322d3234203d3e20323638343236.roa (raw, json)
Hash identifier:          XLR5LCeywzqSWc6LNyUhLset2LWip7GQgJ4mP0W2/Ho=
Subject key identifier:   08:19:3F:9A:59:39:EC:30:36:FB:4C:33:F0:67:F0:6C:19:9C:3E:47
Certificate issuer:       /CN=9C5D5C9A5599F77587485119C21214F577AB3947
Certificate serial:       6420E83AEE58575D0C9B842662FD02925D249EE3
Authority key identifier: 9C:5D:5C:9A:55:99:F7:75:87:48:51:19:C2:12:14:F5:77:AB:39:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C5D5C9A5599F77587485119C21214F577AB3947.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/34352e3136302e3137322e302f32322d3234203d3e20323638343236.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     268426
IP address blocks:        45.160.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/9C5D5C9A5599F77587485119C21214F577AB3947.crl
                          rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/9C5D5C9A5599F77587485119C21214F577AB3947.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C5D5C9A5599F77587485119C21214F577AB3947.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:20:e8:3a:ee:58:57:5d:0c:9b:84:26:62:fd:02:92:5d:24:9e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C5D5C9A5599F77587485119C21214F577AB3947
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:e5:f9:87:0d:d9:b9:3f:86:10:8e:a6:a3:
                    20:66:71:7c:ab:8a:c5:fb:36:e8:c4:e7:33:fd:1b:
                    37:a6:45:4c:68:f0:a1:27:85:f2:81:be:df:5c:3e:
                    5a:26:58:af:ca:16:3a:ae:cf:04:74:5c:ca:af:df:
                    75:e8:24:47:b3:ed:dc:65:07:2b:8d:49:f7:62:f7:
                    c9:7c:90:f2:43:0c:b6:02:80:bf:90:93:01:0c:d7:
                    01:51:c4:ab:69:c0:83:06:a2:51:8f:e3:41:fa:a3:
                    b1:a5:83:20:d3:a2:0f:da:46:64:b2:41:d5:8b:7b:
                    c7:12:38:dc:1d:c1:51:90:33:86:02:f5:ac:d7:3b:
                    c9:e2:36:b4:73:37:b8:4c:33:79:b1:fc:9e:cf:c0:
                    b4:ec:4f:5a:67:ef:20:1e:51:9a:de:c4:1b:9f:c6:
                    b1:85:b5:91:53:2c:3e:7b:aa:09:35:58:a7:68:8a:
                    0b:3f:a4:eb:cc:b3:44:9b:26:81:f3:4d:5c:fb:87:
                    6f:10:9e:a0:d1:c2:6f:5b:a0:b9:a6:7a:ab:4e:df:
                    eb:4b:2c:ce:1f:9a:87:e4:3f:b2:fb:57:20:dc:6f:
                    8f:ab:ed:6b:2e:a9:69:67:c0:1c:38:2e:70:fb:06:
                    6c:ea:06:2f:cc:b9:33:39:82:94:33:2b:06:b7:a9:
                    87:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:19:3F:9A:59:39:EC:30:36:FB:4C:33:F0:67:F0:6C:19:9C:3E:47
            X509v3 Authority Key Identifier:
                keyid:9C:5D:5C:9A:55:99:F7:75:87:48:51:19:C2:12:14:F5:77:AB:39:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/9C5D5C9A5599F77587485119C21214F577AB3947.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C5D5C9A5599F77587485119C21214F577AB3947.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/34352e3136302e3137322e302f32322d3234203d3e20323638343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:71:ba:52:1c:18:cf:e4:8b:7a:94:22:33:48:d6:d5:ea:b8:
         02:72:bd:3e:74:b2:25:b3:e4:17:3b:ed:e6:28:5b:e7:e0:62:
         b0:be:e0:37:6d:b3:a1:cf:41:c4:92:0e:ad:a5:8b:70:5b:eb:
         a9:43:23:62:2a:c1:57:8f:25:b9:b4:5d:3d:1d:ee:96:ea:a6:
         0f:fe:1d:3a:4b:39:4e:f5:a0:38:5b:76:68:01:67:39:9e:94:
         a4:58:dc:66:e4:73:c3:d1:bc:ac:e6:52:a6:97:11:70:3d:42:
         ff:8c:7d:26:64:9f:ba:15:dd:c4:1f:88:19:29:73:d2:64:c5:
         d2:88:b9:07:32:51:db:86:d7:0b:bb:22:c0:1e:31:b2:b8:73:
         c8:6e:93:d5:d3:ad:96:da:2d:fe:70:4f:83:9c:e5:1b:88:a9:
         0f:59:0e:18:e5:0b:b1:ee:21:34:01:5d:7a:08:a4:aa:66:fe:
         9b:0c:4e:27:c6:b4:d9:a9:6a:83:1a:8c:ef:37:52:d0:3f:05:
         63:5e:b4:da:8a:05:8f:96:9d:cc:b8:9f:2a:46:e8:a1:3d:d5:
         d9:7e:45:fb:1a:70:38:8f:29:49:0d:65:ef:df:cb:55:a3:ed:
         1e:1b:e8:d6:8d:db:dd:8a:68:5e:96:54:9f:10:8e:c9:3f:b8:
         86:11:47:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:36 2024 by rpki-client on console-fra.rpki-client.org