Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235322e302f32332d3233203d3e20323639363939.roa
File:                     34352e3139312e3235322e302f32332d3233203d3e20323639363939.roa (raw, json)
Hash identifier:          OIJkM8d/cnwFeSEBOXfnsT0g0BNmTiaMVw2KNN9gg2I=
Subject key identifier:   F5:C6:0B:8A:11:15:7B:25:B5:23:A3:C0:91:A0:55:42:17:09:1F:80
Certificate issuer:       /CN=D7277992174B249B4D551A37C49F2DD4D7AA9968
Certificate serial:       5658622C4328C434FF9D92323985176209274831
Authority key identifier: D7:27:79:92:17:4B:24:9B:4D:55:1A:37:C4:9F:2D:D4:D7:AA:99:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235322e302f32332d3233203d3e20323639363939.roa
Signing time:             Thu 04 Apr 2024 07:19:54 +0000
ROA not before:           Thu 04 Apr 2024 07:14:54 +0000
ROA not after:            Thu 03 Apr 2025 07:19:54 +0000
asID:                     269699
IP address blocks:        45.191.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.crl
                          rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:58:62:2c:43:28:c4:34:ff:9d:92:32:39:85:17:62:09:27:48:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7277992174B249B4D551A37C49F2DD4D7AA9968
        Validity
            Not Before: Apr  4 07:14:54 2024 GMT
            Not After : Apr  3 07:19:54 2025 GMT
        Subject: CN=F5C60B8A11157B25B523A3C091A0554217091F80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:63:3b:8f:d6:5b:d5:8d:64:f4:67:fd:d5:3a:
                    ba:d4:8e:a6:f4:2c:af:1d:f3:b4:77:0c:94:66:76:
                    f4:95:ae:2e:1c:ac:c1:ab:9f:6d:21:a6:21:18:55:
                    ed:a0:8d:c5:56:73:7c:23:50:ed:47:1f:3f:55:4a:
                    a5:b4:38:72:07:74:d3:0c:36:6b:c5:6f:95:25:49:
                    3e:79:21:f5:05:1c:48:d4:27:ee:27:fd:9e:9b:3a:
                    60:21:4c:01:d7:7a:e1:e3:43:4f:90:66:c6:c6:de:
                    d1:29:85:20:86:2c:07:ea:67:69:2a:90:c6:83:58:
                    50:82:42:b5:dd:c2:f8:ef:9f:c5:d4:10:a1:f8:ae:
                    7e:e9:dc:ad:fe:87:ee:fb:86:2c:0b:d6:a3:af:7a:
                    5d:52:ac:a6:e0:c5:1f:b8:bc:a2:1c:b1:37:2e:19:
                    b3:aa:1d:1c:47:86:58:51:fc:a9:2f:53:bb:5a:2f:
                    67:70:65:04:11:ca:76:95:64:d8:62:5e:9c:23:5c:
                    df:d0:61:96:ba:42:dc:7e:54:37:4c:33:b7:40:51:
                    de:2f:7f:c5:c3:b3:26:c9:f3:9d:5f:13:bc:be:07:
                    b2:2a:68:b5:bf:13:c2:5b:c8:2f:c8:84:39:67:e9:
                    36:00:70:82:c2:0a:5a:e4:6e:1e:51:01:85:59:ee:
                    33:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C6:0B:8A:11:15:7B:25:B5:23:A3:C0:91:A0:55:42:17:09:1F:80
            X509v3 Authority Key Identifier:
                keyid:D7:27:79:92:17:4B:24:9B:4D:55:1A:37:C4:9F:2D:D4:D7:AA:99:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235322e302f32332d3233203d3e20323639363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:d3:05:50:23:e9:c7:d4:f7:bb:8e:61:a9:c6:b7:0f:3e:93:
         6b:1d:61:46:a3:26:d9:81:b9:7f:ee:3b:67:92:54:aa:5c:f0:
         6c:8b:fb:58:37:a6:fe:36:5c:0e:89:36:1d:ec:15:16:da:f9:
         81:4c:dd:ab:ab:2c:0e:83:06:71:9f:40:83:c6:48:c2:2e:f7:
         f5:4f:28:41:c2:50:2c:ef:56:dc:b2:c8:ff:d3:8e:05:e5:9d:
         f7:17:6b:5f:9d:ae:27:73:e3:8d:13:d2:ac:c2:49:48:c5:cf:
         0a:5a:de:67:e4:4c:70:07:05:53:31:d8:37:8e:7b:cb:9c:69:
         33:c3:d2:57:16:d9:3b:72:55:f1:c9:1e:a1:ed:db:dc:73:ad:
         ca:d9:70:a8:6c:59:06:e7:29:6b:3b:f9:2b:e8:d7:08:df:a7:
         e2:6e:c7:21:e2:99:69:04:ef:dc:ae:ec:c8:2e:dd:2f:bc:03:
         aa:74:cf:16:2c:16:b4:ab:6b:32:47:80:c6:05:e4:a0:ad:3c:
         84:74:2a:a0:4f:c3:cf:42:e4:5a:05:e0:3b:ba:a8:da:50:97:
         a0:59:b9:54:4c:bf:75:c8:cb:ce:70:78:6e:b8:9e:e4:fa:41:
         0f:f7:74:dc:6e:82:dc:17:78:a8:6c:90:ae:f6:8c:c7:fd:b1:
         1a:74:bf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:11 2024 by rpki-client on console-fra.rpki-client.org