Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa
File:                     34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa (raw, json)
Hash identifier:          jf175E7nvM6Owwr5Xa1fMGcL3p1f+HtkvPJ8ZA69Uuw=
Subject key identifier:   CA:88:3C:0D:64:71:EB:89:72:E3:7F:3E:E1:1F:16:A9:9B:35:52:CE
Certificate issuer:       /CN=861E87488AE3835CA52A40FC3F26AB08171FAFDD
Certificate serial:       122DA3EA7E9D77718BB4418E221DD7CD757D6C18
Authority key identifier: 86:1E:87:48:8A:E3:83:5C:A5:2A:40:FC:3F:26:AB:08:17:1F:AF:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa
Signing time:             Thu 04 Apr 2024 00:34:11 +0000
ROA not before:           Thu 04 Apr 2024 00:29:11 +0000
ROA not after:            Thu 03 Apr 2025 00:34:11 +0000
asID:                     268727
IP address blocks:        45.171.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.crl
                          rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2d:a3:ea:7e:9d:77:71:8b:b4:41:8e:22:1d:d7:cd:75:7d:6c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=861E87488AE3835CA52A40FC3F26AB08171FAFDD
        Validity
            Not Before: Apr  4 00:29:11 2024 GMT
            Not After : Apr  3 00:34:11 2025 GMT
        Subject: CN=CA883C0D6471EB8972E37F3EE11F16A99B3552CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:a7:97:c5:ef:c3:29:96:d3:e1:db:5e:f0:
                    08:4f:d9:73:5f:9e:87:65:bf:09:ab:e9:8e:9e:da:
                    54:84:26:c3:33:56:f6:98:de:cc:cf:58:61:7e:70:
                    4d:2d:27:b1:1a:38:75:bf:7e:97:f0:ed:70:17:3c:
                    5f:fe:20:ac:b0:10:91:06:1a:8f:5c:27:57:e2:04:
                    bb:4a:00:eb:2b:e7:59:da:df:9f:3c:ca:e6:3f:6f:
                    f8:a0:dd:e9:1b:ba:5c:92:75:27:80:08:c1:69:88:
                    7e:e7:37:ed:e6:af:c0:1a:99:65:ff:47:28:af:10:
                    26:42:8a:0d:30:8a:b1:c8:b9:c2:bf:88:38:47:f4:
                    24:5a:46:b7:22:34:a0:4b:72:fa:1d:4f:6f:f9:82:
                    27:00:fa:0a:0f:57:a7:30:e7:e9:39:bd:09:20:de:
                    00:17:d0:2f:17:ee:a6:f3:02:7b:ba:00:86:aa:60:
                    6f:4d:5e:ca:08:e2:e4:b3:ad:ea:ca:42:35:d9:52:
                    b8:9b:da:db:b1:af:0d:5a:c8:67:24:aa:8d:85:16:
                    71:81:03:aa:af:45:d2:f0:2f:4d:0b:64:36:9c:2a:
                    72:32:e5:0d:c0:50:da:dc:d4:73:a9:ef:5f:db:97:
                    19:95:89:2a:bf:e6:4e:f1:a6:cc:2c:50:6f:4e:0e:
                    d4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:88:3C:0D:64:71:EB:89:72:E3:7F:3E:E1:1F:16:A9:9B:35:52:CE
            X509v3 Authority Key Identifier:
                keyid:86:1E:87:48:8A:E3:83:5C:A5:2A:40:FC:3F:26:AB:08:17:1F:AF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:ca:77:8f:1d:a0:7a:e3:12:4b:10:4c:ce:97:87:a9:1f:5f:
         ed:40:09:cf:5d:0a:b1:98:0d:65:61:8a:16:01:e7:f8:d6:da:
         81:5b:46:80:2d:9c:e6:44:b5:0a:92:74:b2:80:1d:3e:c6:3d:
         19:b2:7f:b9:16:6b:b7:de:28:65:8d:5b:86:72:c8:cf:97:33:
         ab:33:7b:ea:b1:17:57:e6:6b:18:50:58:70:63:71:64:1c:5a:
         52:00:d1:c5:90:d6:0c:7f:b7:f1:c0:b7:38:7c:5b:f1:fe:09:
         aa:b4:24:bb:7b:9c:05:df:1c:63:5e:ee:ea:9a:ca:ae:c8:7c:
         1d:6d:be:5c:80:39:71:db:db:2d:e0:53:b3:a4:31:c6:16:76:
         83:41:04:34:69:01:b6:f0:1c:ef:39:0b:a8:6a:00:ec:a7:57:
         6e:c8:48:a9:fd:ce:c1:82:5f:15:31:9b:f8:0a:9b:70:46:01:
         ed:09:8e:b5:c0:6d:88:11:a7:da:a4:76:a4:0c:55:b0:b8:66:
         08:5d:67:43:05:33:45:e3:38:51:96:f1:4f:42:9b:54:b4:69:
         75:a5:4b:30:f7:ff:b0:8b:c1:d0:7e:38:16:f1:1d:d2:dd:57:
         19:5a:06:78:a7:97:8a:c2:f2:ec:9f:e4:dd:e4:31:fd:a7:d3:
         5d:b6:bf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:47 2024 by rpki-client on console-fra.rpki-client.org