Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235342e302f32342d3234203d3e20323639363939.roa
File:                     34352e3139312e3235342e302f32342d3234203d3e20323639363939.roa (raw, json)
Hash identifier:          PkzdwBYi9mFQQyIVpRZHpRjBeMfXUZut+eLb59w4WIg=
Subject key identifier:   E9:C0:65:9B:58:00:BB:DA:F3:F3:B9:78:88:BA:D2:E3:2B:F8:27:AF
Certificate issuer:       /CN=D7277992174B249B4D551A37C49F2DD4D7AA9968
Certificate serial:       7C5CA3D21C2F4B7BE58F843F0C6A372F92603CC5
Authority key identifier: D7:27:79:92:17:4B:24:9B:4D:55:1A:37:C4:9F:2D:D4:D7:AA:99:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235342e302f32342d3234203d3e20323639363939.roa
Signing time:             Thu 04 Apr 2024 07:19:55 +0000
ROA not before:           Thu 04 Apr 2024 07:14:55 +0000
ROA not after:            Thu 03 Apr 2025 07:19:55 +0000
asID:                     269699
IP address blocks:        45.191.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.crl
                          rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5c:a3:d2:1c:2f:4b:7b:e5:8f:84:3f:0c:6a:37:2f:92:60:3c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7277992174B249B4D551A37C49F2DD4D7AA9968
        Validity
            Not Before: Apr  4 07:14:55 2024 GMT
            Not After : Apr  3 07:19:55 2025 GMT
        Subject: CN=E9C0659B5800BBDAF3F3B97888BAD2E32BF827AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:bf:d0:92:fb:18:71:90:3d:b0:a4:45:ff:
                    c5:b1:92:71:b2:f4:3b:f0:e6:42:e4:25:38:d8:21:
                    67:34:95:6e:60:e3:f9:7d:8b:a7:0a:ed:0c:01:af:
                    64:6f:7c:3f:65:14:e8:46:97:c8:7a:b9:8a:8c:c9:
                    19:ec:6f:8d:de:2c:fd:ad:5d:4c:bf:d3:14:cf:41:
                    73:6c:db:89:30:e3:6f:01:a3:a5:e1:fd:69:d8:10:
                    ae:cc:f6:ad:18:95:8d:38:78:ab:a0:b2:4e:a5:6c:
                    49:6d:10:6e:6a:9a:7f:ff:f5:d2:1e:2f:74:c2:99:
                    9e:65:7e:93:e6:37:c4:39:8a:87:26:b5:d8:62:b5:
                    11:a8:00:39:69:fe:45:d7:11:30:91:6b:46:69:b0:
                    35:a1:84:52:d2:68:38:c0:8e:64:ce:d8:4b:f1:66:
                    9e:be:a5:8b:40:72:7c:8c:c2:a6:04:02:da:0f:7b:
                    cf:c8:7a:3c:72:b1:f2:13:84:a9:2c:22:3e:e8:6a:
                    0f:78:21:78:be:8f:95:e5:1a:73:bb:01:39:b4:a7:
                    9d:e4:c1:38:7e:6b:76:5a:98:72:d3:a3:2b:f3:cd:
                    02:c1:59:a2:7b:31:12:69:17:a5:e4:13:f5:94:5c:
                    7a:ee:90:91:de:72:04:6a:f9:99:c7:cf:94:79:41:
                    83:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C0:65:9B:58:00:BB:DA:F3:F3:B9:78:88:BA:D2:E3:2B:F8:27:AF
            X509v3 Authority Key Identifier:
                keyid:D7:27:79:92:17:4B:24:9B:4D:55:1A:37:C4:9F:2D:D4:D7:AA:99:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235342e302f32342d3234203d3e20323639363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:c5:54:11:37:db:e1:2a:9b:8d:49:08:4c:29:2b:22:cd:6f:
         10:51:28:3b:be:1d:88:a0:dd:fa:d0:05:8b:01:90:6e:91:07:
         c8:36:8f:46:d8:f0:15:9a:15:f5:87:87:ca:b1:e4:a3:a2:b8:
         28:f3:76:9d:0a:a9:ca:0b:ef:ae:2d:34:cf:0f:65:98:42:1e:
         39:b3:70:ca:5d:e9:e8:73:ca:f4:22:4b:d9:e2:5d:0f:60:90:
         41:5b:67:92:48:8b:99:d9:7d:51:6c:82:3d:70:98:69:a3:64:
         3b:c1:5d:d0:76:ea:73:79:7c:5c:13:5a:fb:d7:2c:35:cd:b0:
         15:92:68:41:f7:4a:a8:87:6b:d6:11:11:61:8d:27:bc:25:ea:
         cd:a3:87:cf:08:5d:61:34:e9:e9:e8:d4:27:75:63:5b:02:02:
         71:d8:82:ac:bb:db:55:68:1d:b4:ad:ea:7e:bd:58:06:b6:1d:
         b9:42:5e:d3:9a:1d:1f:a3:20:3e:08:dd:f6:2f:d5:ef:a0:98:
         d9:21:f6:d8:7a:22:0c:b1:a8:48:80:bb:e5:81:03:a9:be:40:
         f4:48:3b:98:c1:88:97:f5:30:ec:a2:8c:d7:00:db:bb:bb:99:
         4a:91:cb:31:b4:1d:7d:2f:1a:03:de:97:de:e9:c4:c4:44:90:
         78:66:08:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:11 2024 by rpki-client on console-fra.rpki-client.org