Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/34352e3137362e35362e302f32322d3232203d3e20323638393639.roa
File:                     34352e3137362e35362e302f32322d3232203d3e20323638393639.roa (raw, json)
Hash identifier:          XmXnZbGvyaMpSleCKAc8DsYZdxvGAfeOv65lKtYH4ow=
Subject key identifier:   0F:D9:67:5E:0F:CB:35:22:64:1A:27:89:32:8D:55:CC:03:7F:71:45
Certificate issuer:       /CN=E5121D713C732A6B45D5702FCDFD545FD0E1B866
Certificate serial:       454C4A93D9416E5492F99DB49DA9D899BE3D533D
Authority key identifier: E5:12:1D:71:3C:73:2A:6B:45:D5:70:2F:CD:FD:54:5F:D0:E1:B8:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/34352e3137362e35362e302f32322d3232203d3e20323638393639.roa
Signing time:             Thu 04 Apr 2024 05:10:59 +0000
ROA not before:           Thu 04 Apr 2024 05:05:59 +0000
ROA not after:            Thu 03 Apr 2025 05:10:59 +0000
asID:                     268969
IP address blocks:        45.176.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.crl
                          rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4c:4a:93:d9:41:6e:54:92:f9:9d:b4:9d:a9:d8:99:be:3d:53:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5121D713C732A6B45D5702FCDFD545FD0E1B866
        Validity
            Not Before: Apr  4 05:05:59 2024 GMT
            Not After : Apr  3 05:10:59 2025 GMT
        Subject: CN=0FD9675E0FCB3522641A2789328D55CC037F7145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:7c:35:67:bc:55:4f:81:70:51:07:5f:d7:
                    d5:09:2e:f6:91:2f:fc:b7:6c:42:bc:20:78:28:0f:
                    0b:bb:8a:8c:e9:ea:a7:e4:b5:7f:3c:b7:a9:ff:fb:
                    60:2c:b4:d8:51:80:ee:e6:93:6e:e6:fb:48:03:a4:
                    96:4b:0e:f2:53:a6:43:fd:5d:7c:28:40:69:e2:c5:
                    ae:e8:9b:f2:3f:ab:4b:f1:0a:4f:5d:4c:e7:27:9c:
                    77:51:78:e0:4e:60:ab:e3:ba:e3:1f:7f:dd:eb:75:
                    26:9e:31:64:e1:86:d1:3b:8d:ad:29:99:47:40:fd:
                    15:02:b7:19:77:07:2b:73:09:94:06:73:b6:38:12:
                    64:23:14:3b:67:ab:d0:82:8f:2f:ba:08:ba:ab:b7:
                    cb:85:63:50:00:d9:a2:8b:60:44:2b:07:26:12:5f:
                    6d:13:a4:9d:93:26:a5:d6:ac:68:05:fb:32:15:60:
                    15:74:82:91:6e:df:b9:83:cc:28:ee:68:cc:2e:eb:
                    f6:c9:46:4e:ea:78:30:9e:8b:7c:43:4b:2a:09:b9:
                    6c:3f:d4:2c:f4:85:01:ea:56:37:69:83:87:0d:a2:
                    7c:1a:75:0b:41:0f:45:bf:e7:35:d8:60:d3:8c:fb:
                    f7:6f:66:03:73:44:f3:78:fc:2d:b9:88:00:c9:97:
                    c6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D9:67:5E:0F:CB:35:22:64:1A:27:89:32:8D:55:CC:03:7F:71:45
            X509v3 Authority Key Identifier:
                keyid:E5:12:1D:71:3C:73:2A:6B:45:D5:70:2F:CD:FD:54:5F:D0:E1:B8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/34352e3137362e35362e302f32322d3232203d3e20323638393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:d3:d8:98:2a:a0:2a:fe:8d:10:82:46:d4:23:36:53:9f:5b:
         f0:35:57:51:ec:a1:ef:c4:bd:c5:12:b3:14:90:cb:36:82:c7:
         ae:fb:19:34:80:ea:e2:47:62:c5:de:68:cc:9b:59:00:1f:4f:
         f3:31:7b:4f:29:82:ce:21:a3:52:fd:f5:a7:a3:a2:be:2a:98:
         6a:f8:55:4d:1e:5a:71:16:d6:56:9a:45:67:24:0f:13:c7:78:
         02:bc:9a:a6:78:eb:7a:0e:3f:d4:ce:3f:52:0c:6a:e0:ba:0e:
         44:b4:6a:ad:a8:4f:67:4e:0c:12:0d:96:c2:84:f1:4b:c9:96:
         ab:20:e5:6a:02:45:59:3b:04:19:6f:a6:5f:aa:1d:38:35:2d:
         02:8c:5f:57:98:41:2e:22:79:03:40:46:e5:86:b7:79:0c:45:
         7b:f9:6f:c2:43:48:0e:ea:51:0d:bb:5f:6a:37:cb:61:79:a9:
         26:ce:ce:35:61:ca:1f:97:f8:7b:e0:57:23:18:e9:dd:19:d0:
         05:1c:85:0f:04:e8:a0:00:00:54:c2:aa:0e:70:20:40:84:f9:
         60:be:cb:e3:a1:f1:dd:fa:43:78:3f:89:5d:04:0a:c5:e1:e6:
         a9:88:75:b4:da:35:e7:08:07:8a:05:c4:bf:b2:46:e3:b5:26:
         31:22:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:54 2024 by rpki-client on console-fra.rpki-client.org