Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135312e3138342f32392d3239203d3e20323639303036.roa
File:                     34352e3137362e3135312e3138342f32392d3239203d3e20323639303036.roa (raw, json)
Hash identifier:          in7ixcFUya5yR0XVDfNlmXQy6w5FZ4fl7pq+4wNgGRM=
Subject key identifier:   A8:74:2C:1B:79:98:09:27:8E:47:32:A3:A9:DE:87:54:94:62:C9:A7
Certificate issuer:       /CN=ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085
Certificate serial:       5D8D89BA899570360027B7EDCE1500752C8A1135
Authority key identifier: AD:F8:D0:C1:FF:4B:05:CA:AD:19:DC:EC:62:B3:47:81:BA:5D:90:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135312e3138342f32392d3239203d3e20323639303036.roa
Signing time:             Wed 30 Oct 2024 18:16:18 +0000
ROA not before:           Wed 30 Oct 2024 18:11:18 +0000
ROA not after:            Wed 29 Oct 2025 18:16:18 +0000
asID:                     269006
IP address blocks:        45.176.151.184/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.crl
                          rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8d:89:ba:89:95:70:36:00:27:b7:ed:ce:15:00:75:2c:8a:11:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085
        Validity
            Not Before: Oct 30 18:11:18 2024 GMT
            Not After : Oct 29 18:16:18 2025 GMT
        Subject: CN=A8742C1B799809278E4732A3A9DE87549462C9A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:f9:5b:d3:9b:a6:cb:e3:1b:30:4d:4c:e3:
                    b5:99:12:e0:eb:a0:5f:cb:46:9b:8d:1b:0d:ad:55:
                    c9:0a:3b:d5:3f:52:ed:1a:83:af:2f:38:88:b9:8d:
                    84:09:9d:4c:e2:6a:7d:63:56:77:e1:8d:65:4a:9f:
                    c2:b4:09:97:e4:21:69:9c:55:4f:b5:21:66:04:7d:
                    0c:85:2c:52:67:0f:06:84:13:91:cd:df:09:c5:70:
                    0b:70:16:f7:2a:89:49:c7:ef:14:80:de:85:61:6f:
                    03:3a:17:b0:bf:01:19:f4:ec:db:8c:8d:ae:72:5e:
                    6d:09:de:ef:6b:a2:7e:4f:12:b9:44:61:99:cc:cb:
                    a3:2a:ba:c3:01:3f:9c:1b:a5:1a:92:c1:84:b0:21:
                    2a:eb:2d:cc:ab:41:b8:fa:6c:db:1c:f3:d4:f5:85:
                    9c:76:c0:88:81:93:84:d6:9a:1d:d5:e3:d8:74:b3:
                    76:0c:4b:bd:13:ff:75:68:49:5e:1b:48:0d:ed:fd:
                    52:6b:fb:80:c8:4b:af:17:9c:e6:69:ba:4a:f4:82:
                    c8:87:72:e5:d4:c6:ba:eb:a7:d1:4c:d2:4e:ab:23:
                    28:58:34:a6:c7:e3:1b:ec:d5:2e:ff:de:65:62:d1:
                    94:8d:32:be:70:fd:89:9f:90:a4:a0:31:79:04:bf:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:74:2C:1B:79:98:09:27:8E:47:32:A3:A9:DE:87:54:94:62:C9:A7
            X509v3 Authority Key Identifier:
                keyid:AD:F8:D0:C1:FF:4B:05:CA:AD:19:DC:EC:62:B3:47:81:BA:5D:90:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF8D0C1FF4B05CAAD19DCEC62B34781BA5D9085.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135312e3138342f32392d3239203d3e20323639303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.151.184/29

    Signature Algorithm: sha256WithRSAEncryption
         2b:3b:7b:b8:7c:1c:d7:9f:7f:c4:75:5c:a2:57:54:09:09:1b:
         5d:1c:23:f2:37:fb:dd:a0:c4:f4:fd:62:02:31:29:0c:ac:6f:
         69:74:77:3c:42:c8:45:4a:be:4c:ff:28:b2:83:7e:3d:e9:11:
         12:47:f8:d4:a9:e9:7d:8f:b0:c9:bf:a7:e1:8f:23:3d:93:7a:
         e1:fe:63:9d:74:ee:22:f5:47:9b:cb:e4:e3:f6:99:32:50:23:
         9f:21:ed:96:ab:d7:ec:91:03:be:c6:b9:87:5b:cc:35:bf:a4:
         c5:29:ae:04:d6:fc:fb:87:87:41:d6:52:67:02:22:69:db:72:
         11:e8:04:11:af:4a:c8:02:24:21:df:18:a0:f2:ba:f5:5a:e9:
         b0:d2:49:9c:a4:93:ee:0e:a8:45:2e:9e:13:ee:9e:67:f7:92:
         c1:34:87:20:dc:8e:68:6b:65:3f:14:25:55:5c:ea:0d:5e:d3:
         a8:8d:0b:76:5d:69:9b:56:8f:e1:99:e9:fa:58:b5:ed:0e:b0:
         34:55:c7:a4:41:17:72:3e:e8:ef:9e:03:06:3b:b9:be:d2:f5:
         cb:bf:d8:19:5a:2e:75:5b:9a:3a:13:dc:29:ee:78:67:2e:12:
         e2:18:4e:4f:07:09:c2:67:16:af:b5:b0:e8:24:59:48:6a:a5:
         e4:e7:35:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:04 2024 by rpki-client on console-fra.rpki-client.org