Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa
File:                     34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa (raw, json)
Hash identifier:          ojUgY41RTCUfX4nrz5/1eISLntBiZG4aHbby/avwdbY=
Subject key identifier:   D5:BF:38:DC:F9:76:1A:40:64:FF:52:5B:F1:97:C5:81:8E:07:E3:72
Certificate issuer:       /CN=450D2460BB579B573599E83A5DA3018696A0F8F6
Certificate serial:       2F372B7C01902581B6953E756C4CEA9E2BB4AE2E
Authority key identifier: 45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa
Signing time:             Thu 04 Apr 2024 17:08:24 +0000
ROA not before:           Thu 04 Apr 2024 17:03:24 +0000
ROA not after:            Thu 03 Apr 2025 17:08:24 +0000
asID:                     271632
IP address blocks:        45.172.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl
                          rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:37:2b:7c:01:90:25:81:b6:95:3e:75:6c:4c:ea:9e:2b:b4:ae:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D2460BB579B573599E83A5DA3018696A0F8F6
        Validity
            Not Before: Apr  4 17:03:24 2024 GMT
            Not After : Apr  3 17:08:24 2025 GMT
        Subject: CN=D5BF38DCF9761A4064FF525BF197C5818E07E372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:29:65:4d:ce:22:92:2c:51:95:56:77:07:c5:
                    87:2b:63:13:65:48:e4:1f:1c:01:68:f3:52:2f:51:
                    89:08:20:ec:1b:38:b4:da:c9:2c:aa:ec:36:8a:d8:
                    a2:1e:e5:fe:30:72:7f:48:89:f1:6f:40:61:8b:8d:
                    0c:d5:50:fd:2d:28:0a:8d:7a:29:8e:12:3e:c0:fa:
                    ea:73:e7:64:f6:3f:d8:0f:05:ec:8a:86:69:b4:db:
                    01:ae:4f:77:dc:da:79:06:33:c6:fd:f0:88:e8:b0:
                    0e:48:26:cf:fa:79:42:51:6d:fe:a3:71:7a:ee:dd:
                    95:a4:58:c2:ef:52:1e:f9:6f:c4:a8:60:b4:3c:33:
                    f7:e4:e4:99:8c:be:08:49:e2:25:73:87:5a:30:53:
                    d6:99:24:e4:6d:79:cc:1e:21:67:62:c8:94:1f:df:
                    86:64:3a:fd:f7:4a:d6:f5:7e:ba:24:4a:e8:ab:22:
                    a8:0c:d7:57:23:fb:7f:b7:9e:fd:a5:b7:93:fc:e2:
                    a1:33:4a:08:10:83:30:ed:41:87:16:dc:3a:05:0f:
                    70:27:96:b5:61:ce:8e:b7:14:ab:c8:01:da:d6:3e:
                    59:93:4a:6d:f3:46:07:b2:f8:0e:1a:9b:7e:1e:eb:
                    bc:b5:95:b4:e1:fb:13:0f:67:7f:46:2e:6e:52:5f:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BF:38:DC:F9:76:1A:40:64:FF:52:5B:F1:97:C5:81:8E:07:E3:72
            X509v3 Authority Key Identifier:
                keyid:45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:b4:60:0b:99:4c:94:8d:f2:31:0e:4e:c6:c5:9c:99:32:f2:
         65:bc:10:c7:f1:fb:bc:cb:69:72:73:ee:da:4f:39:32:b1:4e:
         25:8c:a4:ae:61:c8:c1:ef:98:68:36:4f:51:78:8c:e5:bb:ac:
         f5:20:87:ab:09:18:68:bb:4e:ea:4a:57:4d:a6:8c:50:38:52:
         a4:6e:78:50:fd:f3:66:fd:40:80:28:a7:91:cd:d5:60:42:7a:
         45:f9:b9:e4:fd:82:92:ee:58:0d:5d:a7:9f:38:3f:7b:7b:d1:
         89:1c:41:f6:86:a6:3e:9a:1a:66:3d:1f:b7:81:b4:d2:f2:08:
         d5:07:d8:84:ca:c3:9d:9c:52:6c:8e:ec:ec:6a:64:81:4d:7c:
         f0:5d:6a:b0:7b:d6:8d:63:a6:20:17:79:a7:4f:f5:83:92:21:
         d0:01:6e:be:58:01:54:53:e9:d4:15:7f:50:d9:e5:c6:b4:b3:
         01:00:86:26:06:24:41:4d:1c:21:14:a0:95:0b:f6:20:32:04:
         60:18:7a:34:04:cb:0a:5c:1c:39:79:81:c3:2d:a8:d6:f8:5d:
         cc:1a:09:cf:09:99:25:a0:2e:b7:b4:34:0d:b5:10:0c:b3:0a:
         6e:1a:13:87:62:82:5c:de:04:0e:57:40:3a:cd:51:94:1c:1f:
         5f:a7:30:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:43 2024 by rpki-client on console-fra.rpki-client.org