Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/34352e3136312e34302e302f32322d3234203d3e20323638343433.roa
File:                     34352e3136312e34302e302f32322d3234203d3e20323638343433.roa (raw, json)
Hash identifier:          XImbIjWQQBmqGohLiBWnsXF+oph8PwOm4IC1/ERrjzw=
Subject key identifier:   D2:00:90:E4:8B:ED:FE:3F:74:51:C3:19:C6:B7:8D:34:65:92:F7:15
Certificate issuer:       /CN=5EA0A0802D5FBA076B06703D21D6D32026825F6D
Certificate serial:       051F8AD252E08A6179F1C73CD6F7FF8F09FCA718
Authority key identifier: 5E:A0:A0:80:2D:5F:BA:07:6B:06:70:3D:21:D6:D3:20:26:82:5F:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/34352e3136312e34302e302f32322d3234203d3e20323638343433.roa
Signing time:             Wed 03 Apr 2024 18:31:52 +0000
ROA not before:           Wed 03 Apr 2024 18:26:52 +0000
ROA not after:            Wed 02 Apr 2025 18:31:52 +0000
asID:                     268443
IP address blocks:        45.161.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.crl
                          rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 23:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1f:8a:d2:52:e0:8a:61:79:f1:c7:3c:d6:f7:ff:8f:09:fc:a7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EA0A0802D5FBA076B06703D21D6D32026825F6D
        Validity
            Not Before: Apr  3 18:26:52 2024 GMT
            Not After : Apr  2 18:31:52 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:59:50:c7:58:8a:7e:79:cb:fe:2a:9c:e6:
                    50:46:28:be:84:7d:13:18:dd:a1:ca:4d:f2:4f:dd:
                    12:ad:4e:e2:ad:07:58:c1:86:8c:c5:10:af:58:8b:
                    21:c5:1a:a5:76:9b:0c:2a:1b:04:34:9a:0a:33:6d:
                    d4:d4:76:41:67:f0:5e:31:ed:4a:d0:2c:1e:7e:ed:
                    b7:d5:20:dc:16:9e:1b:e4:96:a5:d7:0f:1d:3f:ee:
                    42:c5:12:ba:bb:34:f1:0b:b7:37:c0:cf:5a:82:19:
                    4f:fa:21:2f:ea:f6:1f:8c:ad:8d:35:eb:c0:f8:9b:
                    3d:bf:34:84:d0:15:6a:35:cb:6e:1a:a7:ce:32:fc:
                    5f:41:83:fa:8c:e1:33:e3:55:aa:e7:d9:17:56:7f:
                    64:3a:4e:6d:55:7d:fe:38:d1:d2:8f:db:ad:f1:c3:
                    ae:fd:1a:23:9f:d9:c6:b4:94:82:2d:d5:ee:28:0c:
                    71:4c:5d:f4:e8:d9:43:95:d3:34:0d:de:95:c1:d4:
                    88:cb:40:56:1a:cc:16:9e:86:05:e9:c1:ed:a5:24:
                    2e:41:10:d1:6d:ae:8a:26:52:28:d1:27:9e:4c:c4:
                    52:3e:88:54:94:40:ae:7f:91:7d:7f:3b:ee:dc:87:
                    3e:54:ef:fd:6c:93:df:b7:53:8f:58:63:9f:fc:7f:
                    5a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:00:90:E4:8B:ED:FE:3F:74:51:C3:19:C6:B7:8D:34:65:92:F7:15
            X509v3 Authority Key Identifier:
                keyid:5E:A0:A0:80:2D:5F:BA:07:6B:06:70:3D:21:D6:D3:20:26:82:5F:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/34352e3136312e34302e302f32322d3234203d3e20323638343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:0d:bd:22:bf:a1:e5:8a:5e:38:e4:81:f3:4c:f7:4f:8d:ec:
         13:84:be:2a:aa:76:9c:54:29:6b:2e:5f:86:d8:c5:73:b1:2c:
         75:0e:37:27:bc:4d:8f:5a:8c:b2:68:80:81:ac:46:d9:be:04:
         ea:84:d1:1d:b4:97:74:25:4d:8c:f1:be:90:12:96:4e:b2:0a:
         b0:53:47:3c:78:1b:cd:bf:80:ba:60:0b:93:d2:b9:a0:68:39:
         b7:3d:bf:dd:d9:f0:a2:11:dc:0f:a5:75:40:c2:1d:5b:6b:21:
         fc:63:4a:fb:28:54:19:66:06:0f:4c:39:cd:92:5a:f1:39:49:
         91:8f:34:49:e8:5b:b2:8e:2a:1b:4b:25:16:92:93:3b:c7:d7:
         6c:4d:fd:2c:b7:47:65:ac:82:a5:ae:0b:19:78:be:8b:09:d5:
         15:17:9f:31:74:81:f9:0c:f3:f0:cd:fa:bb:61:c6:6f:c5:50:
         39:81:eb:d8:9f:12:2c:3b:a8:19:d9:98:d5:5d:84:2e:04:59:
         59:69:ca:20:79:fc:13:32:c1:32:ba:fc:12:e0:99:00:ff:06:
         c4:fc:5d:f2:0f:58:af:2f:5f:69:1f:20:fd:3f:a3:b6:59:0f:
         7c:fd:54:d1:99:73:49:9b:88:ad:d4:c3:8e:31:11:37:e6:73:
         fc:02:88:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:55 2024 by rpki-client on console-fra.rpki-client.org