Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/34352e3137392e35322e302f32332d3233203d3e20323639303533.roa
File:                     34352e3137392e35322e302f32332d3233203d3e20323639303533.roa (raw, json)
Hash identifier:          foY/66hYJO8UKrT6NFER/Md/HrwBUM2JJlBarS7vkNc=
Subject key identifier:   9C:EA:8F:6B:24:2C:44:24:55:D2:88:2F:8B:1C:D0:14:2A:88:AA:57
Certificate issuer:       /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
Certificate serial:       5EEA8445D2A5E105813A54DDA9C78B71A9DD2383
Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/34352e3137392e35322e302f32332d3233203d3e20323639303533.roa
Signing time:             Mon 05 Aug 2024 10:50:50 +0000
ROA not before:           Mon 05 Aug 2024 10:45:50 +0000
ROA not after:            Mon 04 Aug 2025 10:50:50 +0000
asID:                     269053
IP address blocks:        45.179.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl
                          rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ea:84:45:d2:a5:e1:05:81:3a:54:dd:a9:c7:8b:71:a9:dd:23:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
        Validity
            Not Before: Aug  5 10:45:50 2024 GMT
            Not After : Aug  4 10:50:50 2025 GMT
        Subject: CN=9CEA8F6B242C442455D2882F8B1CD0142A88AA57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:ad:49:bb:e0:53:d9:17:41:81:24:89:19:
                    a1:f5:8b:09:3b:fb:6d:be:4e:4c:fb:c0:68:f9:25:
                    0d:7a:57:02:4f:97:76:8d:7c:ed:ed:4c:3c:f9:c8:
                    82:9b:5e:cb:6e:a0:58:60:95:4e:fd:43:fa:1a:74:
                    ca:fc:3f:5f:00:01:80:91:b9:d5:b3:96:25:26:06:
                    5b:8e:30:9a:2b:86:69:bb:ce:5f:04:ac:d4:94:c0:
                    40:28:f3:83:57:9d:a8:e2:a3:6d:cd:90:d6:35:f6:
                    16:f8:d5:99:dd:23:45:e6:4f:2e:71:20:b5:3c:dc:
                    f8:57:15:4e:78:04:dc:0b:a6:61:d2:2f:33:60:d0:
                    4b:b3:0f:b4:d9:1f:2d:33:77:41:ed:27:3c:bc:f7:
                    f2:48:be:2e:91:49:30:19:cf:de:23:cb:3c:95:9f:
                    b1:6f:f2:b7:43:67:f1:6b:78:fe:05:23:66:61:10:
                    6a:be:12:63:04:9b:67:fe:5b:44:87:90:c5:5b:13:
                    da:16:d9:e4:86:f8:fc:16:40:89:e1:b3:f2:0a:2a:
                    00:9a:e0:9a:2a:82:57:5f:1e:ee:10:a2:39:c8:a6:
                    ef:37:38:65:51:3f:d2:83:16:01:bc:74:57:ae:11:
                    d0:d7:08:28:e4:66:c7:5a:cb:f1:09:ba:9b:7c:e7:
                    39:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EA:8F:6B:24:2C:44:24:55:D2:88:2F:8B:1C:D0:14:2A:88:AA:57
            X509v3 Authority Key Identifier:
                keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/34352e3137392e35322e302f32332d3233203d3e20323639303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:b4:8d:b1:e4:91:44:1c:09:07:52:3d:8f:14:29:19:16:3c:
         1c:3e:a6:33:e3:88:e7:d6:f1:a9:ae:27:a8:c7:db:ab:9d:c2:
         f6:c5:d9:96:1d:61:83:b4:b0:17:50:73:4c:59:e4:cb:37:78:
         d7:cc:8e:b7:f4:41:5f:57:c5:be:fe:aa:a2:db:fc:d5:ee:17:
         c8:4a:ad:34:98:2e:7f:f6:9e:ec:96:fa:cd:8b:f9:1e:73:e2:
         6a:ca:28:e3:7f:8a:3f:11:16:1c:da:cb:a1:df:88:63:db:e8:
         e6:80:14:d0:46:73:21:29:bd:2b:05:3c:82:69:57:a4:2a:0c:
         34:02:0a:ab:38:5f:c9:09:47:49:77:c5:bd:56:4b:3d:73:ea:
         88:9a:52:cf:3d:55:1c:ea:06:e5:3d:34:ff:64:d3:b2:c4:a7:
         45:05:47:c7:a6:1e:64:3a:3d:13:08:88:93:5a:ea:a9:45:b5:
         a7:cc:e5:44:bb:10:00:26:7c:e9:36:d6:6d:28:f8:31:33:1e:
         16:ed:24:42:6a:5c:fc:2f:c8:27:18:4f:01:c5:15:5e:e9:c4:
         04:2a:47:cc:31:1e:e8:e5:e5:af:ff:76:ca:61:a8:77:46:48:
         05:22:77:e0:be:27:67:74:5e:c7:07:7f:f6:82:20:62:15:d0:
         00:3d:25:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:21 2024 by rpki-client on console-ams.rpki-client.org