Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235352e302f32342d3234203d3e20323639363939.roa
File:                     34352e3139312e3235352e302f32342d3234203d3e20323639363939.roa (raw, json)
Hash identifier:          4L/5MtN5jeiGBii2778zcvKJU5mjlA9WUvgPp7+fk9w=
Subject key identifier:   89:4C:60:08:71:73:76:89:84:96:5C:96:29:85:5D:DE:87:1B:06:6A
Certificate issuer:       /CN=D7277992174B249B4D551A37C49F2DD4D7AA9968
Certificate serial:       4E8276C4421BF9CAC5368401B4C69E6571B072A3
Authority key identifier: D7:27:79:92:17:4B:24:9B:4D:55:1A:37:C4:9F:2D:D4:D7:AA:99:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235352e302f32342d3234203d3e20323639363939.roa
Signing time:             Thu 04 Apr 2024 07:19:54 +0000
ROA not before:           Thu 04 Apr 2024 07:14:54 +0000
ROA not after:            Thu 03 Apr 2025 07:19:54 +0000
asID:                     269699
IP address blocks:        45.191.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.crl
                          rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:82:76:c4:42:1b:f9:ca:c5:36:84:01:b4:c6:9e:65:71:b0:72:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7277992174B249B4D551A37C49F2DD4D7AA9968
        Validity
            Not Before: Apr  4 07:14:54 2024 GMT
            Not After : Apr  3 07:19:54 2025 GMT
        Subject: CN=894C60087173768984965C9629855DDE871B066A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:4d:01:95:e7:c3:8d:3b:e8:0b:e9:9d:35:
                    c9:ed:ab:ef:23:0d:d4:2e:5f:24:1b:55:28:21:4c:
                    10:a6:e5:2b:ce:14:d1:39:d7:96:90:d7:7b:b8:70:
                    76:e7:b4:a5:ef:3c:ee:55:25:54:a2:14:67:61:7c:
                    9d:4b:02:14:5b:cf:92:2b:d8:46:aa:61:e3:04:0c:
                    bd:a7:8f:a4:96:c1:f1:45:d3:d0:a9:be:a7:76:e7:
                    d0:cd:4b:c7:e6:0e:d8:6f:26:c2:15:5b:d0:6d:d7:
                    7c:fd:56:33:1a:40:f3:ac:3d:5c:c4:86:ec:69:8b:
                    d6:47:e7:a5:e2:ca:65:0a:1f:39:f0:63:3f:30:f1:
                    8c:73:c9:76:32:1e:75:05:df:d3:a8:a3:a8:7d:3a:
                    78:49:42:c5:a8:b2:77:8a:ee:81:57:cd:ce:84:d1:
                    54:38:76:1d:4b:55:8b:4e:cd:8a:39:e1:72:4d:eb:
                    8e:45:be:58:a3:be:89:cd:a1:50:e9:f6:7c:8e:6f:
                    2b:47:5c:eb:74:e7:66:f7:fb:d9:05:16:3d:67:17:
                    34:4e:8b:1d:d9:38:2d:73:e3:4e:c9:ca:4e:3d:fd:
                    20:b2:d7:8c:62:91:bd:b6:f8:5d:2c:68:9b:ca:20:
                    cf:c9:61:bb:ca:38:3d:32:32:c9:70:77:2e:f3:2f:
                    e0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4C:60:08:71:73:76:89:84:96:5C:96:29:85:5D:DE:87:1B:06:6A
            X509v3 Authority Key Identifier:
                keyid:D7:27:79:92:17:4B:24:9B:4D:55:1A:37:C4:9F:2D:D4:D7:AA:99:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235352e302f32342d3234203d3e20323639363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:37:35:9c:bf:ec:6e:16:93:6a:7e:84:c1:c3:5d:dd:92:8d:
         82:dc:a1:b3:ef:a1:09:e1:79:38:d6:fa:64:dc:01:e0:36:5f:
         fa:ac:ea:cf:37:2d:e1:71:7f:23:b2:0c:26:b4:bf:27:f8:fe:
         95:54:ee:73:b5:97:62:e4:39:82:e0:f4:e1:8d:8d:76:04:6a:
         7d:0b:71:26:fc:be:dc:ee:f7:65:08:90:a6:7b:6a:87:ad:56:
         c9:5a:22:a3:98:ef:6b:77:76:4c:55:59:81:ff:db:e2:6c:3f:
         b8:21:3e:3f:1a:f3:a8:98:ee:90:47:b7:6a:f9:a0:64:c1:59:
         b3:e4:87:4a:d8:2f:ef:71:56:da:b0:8a:c8:6f:72:11:5d:c5:
         56:c4:4f:93:dc:61:cb:dc:f0:0c:db:cb:a6:9a:92:25:2c:56:
         b0:01:f0:17:f1:1f:f8:d2:ad:08:90:20:38:b5:ec:d6:73:19:
         c9:41:27:24:4f:ad:4f:10:52:fd:39:a1:40:ba:84:de:26:06:
         cd:77:57:b6:b8:7a:d8:ed:0a:e7:04:8a:85:42:d7:a3:be:94:
         50:19:12:3f:3a:34:5a:3a:bb:f0:19:64:af:d3:b9:26:41:3f:
         ab:f2:80:92:c9:93:25:4f:f8:fa:f6:1d:09:1c:5f:69:41:a5:
         73:69:10:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:24 2024 by rpki-client on console-ams.rpki-client.org