Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/34352e3137312e3138362e302f32342d3234203d3e20323638373236.roa
File:                     34352e3137312e3138362e302f32342d3234203d3e20323638373236.roa (raw, json)
Hash identifier:          A02x8SzKnNwvOtVVofjL9DeAaWRTwbaBnCZ7+zak+jI=
Subject key identifier:   83:58:FD:C4:67:E0:30:7D:81:CC:00:94:BF:F3:99:80:99:E8:09:D7
Certificate issuer:       /CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
Certificate serial:       7E98001EB707BE5910301B94973A81CF81DD714E
Authority key identifier: 16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/34352e3137312e3138362e302f32342d3234203d3e20323638373236.roa
Signing time:             Thu 04 Apr 2024 16:01:59 +0000
ROA not before:           Thu 04 Apr 2024 15:56:59 +0000
ROA not after:            Thu 03 Apr 2025 16:01:59 +0000
asID:                     268726
IP address blocks:        45.171.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 21:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:98:00:1e:b7:07:be:59:10:30:1b:94:97:3a:81:cf:81:dd:71:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
        Validity
            Not Before: Apr  4 15:56:59 2024 GMT
            Not After : Apr  3 16:01:59 2025 GMT
        Subject: CN=8358FDC467E0307D81CC0094BFF3998099E809D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:20:04:fb:cf:d1:ce:ce:25:a9:15:d2:17:0b:
                    9a:e6:d7:b3:bb:36:0a:9a:bc:e6:bc:47:b8:47:8c:
                    af:db:c0:f6:2f:fb:80:38:85:ba:55:94:6e:c5:54:
                    96:e3:03:7c:ff:1f:a5:21:79:01:a3:46:27:7b:7d:
                    a2:47:cb:60:ae:c2:65:79:87:cb:20:0f:21:bd:cb:
                    48:b6:e6:15:de:08:d1:01:f0:63:92:5c:ec:57:b9:
                    bc:03:a6:92:1b:24:5a:e8:9f:0f:70:c9:b5:c0:5e:
                    50:bf:5b:66:14:3a:4b:4b:f8:94:57:da:07:ee:b0:
                    de:e2:dc:fa:75:e4:7f:52:1c:ee:ea:3d:3a:5c:63:
                    19:79:5d:0b:34:5f:a1:62:65:74:fd:1b:5a:64:0b:
                    06:4b:2a:3f:cb:32:41:db:35:6e:9b:8f:34:fa:e5:
                    74:d8:a8:5d:cd:1b:70:3e:65:8e:0b:4d:a6:d0:8c:
                    f4:9d:a3:ed:00:19:dc:b7:49:ea:02:03:a2:71:c6:
                    0f:a9:e8:e0:9a:c7:d3:b0:ae:12:1e:64:b7:43:dd:
                    19:4c:4a:05:6f:78:63:e2:98:3b:f8:ed:8c:7f:f3:
                    80:98:f0:d3:6f:cc:93:76:30:8e:67:be:0f:cc:38:
                    a5:de:f8:3a:ff:46:3f:5f:d2:4b:c4:17:8e:f8:8b:
                    62:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:58:FD:C4:67:E0:30:7D:81:CC:00:94:BF:F3:99:80:99:E8:09:D7
            X509v3 Authority Key Identifier:
                keyid:16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/34352e3137312e3138362e302f32342d3234203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:3a:b3:d1:45:e2:90:60:6c:a0:dd:f7:74:66:1a:6b:30:d4:
         66:28:d5:ad:2c:77:80:29:6a:ba:ed:dc:8d:74:d5:fd:0f:fe:
         57:82:54:69:a7:24:4e:a3:52:28:88:30:cf:69:08:49:94:a9:
         ba:57:8e:f0:c4:80:99:ca:10:25:5c:bc:69:18:87:dc:db:45:
         46:1e:f5:86:78:be:8d:49:a7:d0:4a:67:75:b6:67:34:b6:ea:
         af:f9:82:03:95:62:63:51:ec:6d:fd:54:f3:5a:6c:4a:8e:50:
         f8:bc:8f:c3:07:78:9a:3b:7c:49:1f:15:07:8b:10:ad:b8:28:
         0f:da:09:8d:ce:54:5b:82:87:78:23:0f:cd:60:66:3d:63:f5:
         5a:ca:07:1b:60:78:67:9f:23:e8:aa:9f:66:ca:f7:b7:9e:49:
         8b:ea:00:5b:1e:9f:9f:ee:7a:4d:c6:3c:0d:fd:6f:8c:0d:76:
         c2:4b:e6:84:13:88:aa:dc:a7:81:58:1d:79:88:e9:1a:f4:14:
         db:43:b2:8c:6d:b5:c6:6c:df:c5:66:1c:a6:68:bc:1d:bb:78:
         e1:84:22:16:15:f5:60:66:fc:3e:c5:5f:f6:69:f3:3e:79:cc:
         17:2b:d3:89:a9:b4:8c:1f:fe:33:00:f9:53:77:e5:58:1c:96:
         68:c3:ec:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 21:50:23 2024 by rpki-client on console-ams.rpki-client.org