Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37332e302f32342d3234203d3e20323639353137.roa
File:                     34352e3138382e37332e302f32342d3234203d3e20323639353137.roa (raw, json)
Hash identifier:          alZl+pgQ2fanw8Zr5KAHBVRx7vtHMWiOQA2hgh+gWdM=
Subject key identifier:   11:D0:C1:55:8F:48:14:80:04:A1:E9:C0:F6:10:AF:80:E4:99:A3:1F
Certificate issuer:       /CN=C47A0E8B419D9A48CB19E98AFC4DE74B767C9441
Certificate serial:       30635BDF55D574B8DAC73B9E7BF48CA0EEED283F
Authority key identifier: C4:7A:0E:8B:41:9D:9A:48:CB:19:E9:8A:FC:4D:E7:4B:76:7C:94:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37332e302f32342d3234203d3e20323639353137.roa
Signing time:             Sun 03 Nov 2024 18:49:44 +0000
ROA not before:           Sun 03 Nov 2024 18:44:44 +0000
ROA not after:            Sun 02 Nov 2025 18:49:44 +0000
asID:                     269517
IP address blocks:        45.188.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.crl
                          rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:63:5b:df:55:d5:74:b8:da:c7:3b:9e:7b:f4:8c:a0:ee:ed:28:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47A0E8B419D9A48CB19E98AFC4DE74B767C9441
        Validity
            Not Before: Nov  3 18:44:44 2024 GMT
            Not After : Nov  2 18:49:44 2025 GMT
        Subject: CN=11D0C1558F48148004A1E9C0F610AF80E499A31F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:77:8a:fc:55:48:05:b0:af:3c:e4:eb:89:
                    2f:e1:3a:02:2e:3b:5a:42:80:4c:8c:dc:46:3b:a3:
                    86:ea:d1:cf:11:78:93:ab:2e:8b:45:9e:26:19:9e:
                    4d:bc:3d:36:e0:77:0e:fb:25:f9:32:e4:de:3f:2d:
                    46:7d:34:08:df:1e:d8:19:81:7b:45:f0:0d:8b:4c:
                    94:54:97:79:3f:a1:46:d3:23:9c:c5:15:a8:e8:c0:
                    3b:20:0a:8d:39:98:dc:db:d6:46:71:7d:31:79:2b:
                    94:8c:20:a3:98:e3:81:10:05:fa:37:06:c7:a9:5b:
                    fc:89:12:fd:c2:65:0a:57:05:a8:d0:33:04:0b:b7:
                    c1:92:46:1e:65:6b:e6:5b:68:5d:2e:b3:1c:f2:29:
                    65:c8:5a:65:4a:99:98:2f:c2:1f:6c:61:c9:c4:c9:
                    14:df:4d:95:47:8c:8a:12:f0:19:2e:e4:5c:ae:59:
                    8d:9c:6b:33:16:85:83:5d:26:26:61:bb:03:43:ce:
                    7b:77:61:9f:4d:bd:ca:2f:84:bd:da:12:45:af:43:
                    d2:a4:fd:0b:d3:77:ba:78:29:36:93:46:b1:7f:3a:
                    54:73:e8:e1:f8:71:36:87:d8:39:d5:76:d9:0b:49:
                    08:2b:a8:72:f2:ba:f9:b4:7c:34:24:1c:9b:7d:d0:
                    3a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D0:C1:55:8F:48:14:80:04:A1:E9:C0:F6:10:AF:80:E4:99:A3:1F
            X509v3 Authority Key Identifier:
                keyid:C4:7A:0E:8B:41:9D:9A:48:CB:19:E9:8A:FC:4D:E7:4B:76:7C:94:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47A0E8B419D9A48CB19E98AFC4DE74B767C9441.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37332e302f32342d3234203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:94:d3:61:6f:09:16:6c:fa:df:cc:7e:bb:ca:ad:eb:e3:77:
         2c:d3:39:a7:62:04:0c:6e:f0:38:28:a2:ce:35:75:92:ee:4a:
         e5:ef:0a:b5:1e:e6:0f:2e:2e:f3:ef:33:82:9a:2d:88:c9:0e:
         cb:d9:99:82:58:b4:c5:c1:4f:92:06:6d:79:05:d5:2f:35:af:
         ea:25:06:07:30:b6:da:cb:fc:a9:20:b6:2c:8f:cd:2b:c1:51:
         63:8c:c3:08:d4:95:ec:ad:9d:7d:fd:e1:b2:4c:f7:58:8c:7b:
         30:8e:07:5d:ac:ed:75:ad:15:4a:fe:40:47:19:a8:4d:9c:87:
         91:1c:cd:01:8d:ea:b0:33:41:82:25:f2:76:d5:c6:2a:e4:c1:
         e6:44:dc:b9:30:ff:f2:e4:b7:37:c6:74:f6:12:e3:e9:5d:aa:
         7d:2d:2c:02:3f:5c:f0:0c:f9:6b:a9:66:39:4a:f9:73:da:d1:
         ed:83:57:88:13:01:d9:c5:d6:73:bc:63:dd:a4:12:49:96:8e:
         4a:8d:ab:91:bd:d6:2a:d2:be:f8:e7:d2:8b:5b:21:8d:5b:46:
         a5:cc:a0:97:bc:b6:29:fe:5c:15:0c:43:d9:22:2f:a2:aa:09:
         14:34:ca:26:33:d8:2c:bc:2d:1d:50:92:0d:28:03:bd:95:78:
         6f:ae:1e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:42 2024 by rpki-client on console-ams.rpki-client.org