Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/34352e3137392e3133342e302f32342d3234203d3e20323639303739.roa
File:                     34352e3137392e3133342e302f32342d3234203d3e20323639303739.roa (raw, json)
Hash identifier:          vXrMZtQqvInzYkiUoWKggUkFJR4zUqiIBqLHBX1iBKg=
Subject key identifier:   36:89:03:71:F0:4F:EF:0A:F6:DD:C2:6E:D8:67:F1:2C:8A:ED:D7:F4
Certificate issuer:       /CN=9A72AC165710D3D2240950F90FF41932E5992CFB
Certificate serial:       10C2BE398E1CF04DC0D16249F6AF6837060BC30B
Authority key identifier: 9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/34352e3137392e3133342e302f32342d3234203d3e20323639303739.roa
Signing time:             Wed 03 Apr 2024 23:33:31 +0000
ROA not before:           Wed 03 Apr 2024 23:28:31 +0000
ROA not after:            Wed 02 Apr 2025 23:33:31 +0000
asID:                     269079
IP address blocks:        45.179.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.crl
                          rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c2:be:39:8e:1c:f0:4d:c0:d1:62:49:f6:af:68:37:06:0b:c3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A72AC165710D3D2240950F90FF41932E5992CFB
        Validity
            Not Before: Apr  3 23:28:31 2024 GMT
            Not After : Apr  2 23:33:31 2025 GMT
        Subject: CN=36890371F04FEF0AF6DDC26ED867F12C8AEDD7F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:41:9e:01:ac:0b:af:51:42:ad:7b:f2:4c:
                    63:99:97:70:5b:84:49:65:c8:d0:0f:77:ab:ad:31:
                    ec:d9:b4:2d:db:b1:b6:7a:c4:2f:1e:04:87:7a:ba:
                    ba:80:7e:70:64:ce:b8:84:dd:1d:34:cf:a9:b6:92:
                    e5:94:70:2d:84:c1:7c:f0:61:d3:8d:79:90:97:54:
                    5c:bb:14:d5:b6:b5:4f:fa:d0:fd:05:15:53:4e:88:
                    cf:0d:2e:6d:25:d1:cf:fe:bc:af:61:3a:04:fe:f4:
                    88:48:0e:6c:ab:fc:dd:2b:06:9b:47:19:a9:07:96:
                    ef:c5:7d:84:3b:aa:ef:a1:28:a8:58:e8:ab:6b:3e:
                    e5:6e:6b:6f:ed:92:50:dc:46:dd:d7:26:81:97:9f:
                    7d:2f:e2:38:2b:84:40:dd:7a:b5:d0:77:e4:8f:e2:
                    99:b5:ff:3b:1a:6a:5b:68:91:2f:34:4b:58:cc:24:
                    69:67:6c:fb:10:48:cf:2d:84:92:e1:80:70:19:0e:
                    15:a6:d6:0c:c2:c0:64:cd:72:f2:a0:90:5b:ef:5e:
                    19:50:dc:5f:fc:95:0c:ea:6b:90:7d:d8:1d:ca:70:
                    4b:74:56:a2:01:5b:a7:e1:60:18:bf:56:7e:f6:04:
                    2a:c1:dd:fb:14:05:82:04:5e:68:2f:51:3e:80:50:
                    6d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:89:03:71:F0:4F:EF:0A:F6:DD:C2:6E:D8:67:F1:2C:8A:ED:D7:F4
            X509v3 Authority Key Identifier:
                keyid:9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/34352e3137392e3133342e302f32342d3234203d3e20323639303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:d5:6e:fb:c6:8f:e2:ff:81:62:90:80:50:80:a5:22:7f:9d:
         c6:61:f6:75:e8:06:f7:62:6b:11:e8:f3:30:02:f5:3d:10:53:
         e0:db:4b:35:b7:13:77:1a:2b:a0:c2:e7:57:08:c9:a1:f1:70:
         18:fb:a2:e7:85:f2:5d:ae:07:87:e4:4c:56:ec:15:83:bc:75:
         1a:8b:39:f0:7b:f2:05:57:93:e1:25:7a:9c:a6:1a:56:8c:c6:
         a0:61:93:b3:87:0d:9f:bd:c3:f2:e3:9d:43:02:6a:ac:ee:b3:
         81:ab:54:9f:6f:0e:58:93:c8:fc:34:b4:ab:6a:1d:5a:be:54:
         b1:4f:33:8d:fd:47:55:aa:29:3d:e9:cf:d0:a8:ef:90:c2:3a:
         f6:84:03:e3:2c:5d:f2:9e:fc:a4:2d:5b:dc:61:6a:75:12:b9:
         db:12:0c:a1:a3:5e:bf:52:f9:6b:a5:da:3f:02:b5:64:55:8a:
         3b:f2:dc:7c:ab:26:da:a4:e5:1e:8b:b4:12:10:4e:73:95:90:
         ca:5e:25:6f:d4:fc:03:2a:6e:5c:12:74:89:ed:15:4d:e1:14:
         89:4b:4f:26:af:4a:3e:2d:d3:75:44:22:f6:16:49:63:a9:3d:
         19:25:26:7c:0a:14:99:3d:c8:e7:02:cf:62:10:1f:a6:5f:74:
         7b:a0:1d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:45 2024 by rpki-client on console-fra.rpki-client.org