Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/34352e3136352e38312e302f32342d3234203d3e203533343237.roa
File:                     34352e3136352e38312e302f32342d3234203d3e203533343237.roa (raw, json)
Hash identifier:          51EWIGuYdrSgMmEQzTRoWW27oNTV3qcs89B/PFwuKI0=
Subject key identifier:   38:43:4C:F3:55:D5:33:9D:64:CF:48:00:31:9D:61:4E:76:30:BC:E1
Certificate issuer:       /CN=43B7A209600FE5F501BA3EDE0E72CB7CA35D8743
Certificate serial:       3D35BFE1B81D2AEFFC1F087F218AAF5256CE9A21
Authority key identifier: 43:B7:A2:09:60:0F:E5:F5:01:BA:3E:DE:0E:72:CB:7C:A3:5D:87:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/34352e3136352e38312e302f32342d3234203d3e203533343237.roa
Signing time:             Wed 02 Oct 2024 10:47:53 +0000
ROA not before:           Wed 02 Oct 2024 10:42:53 +0000
ROA not after:            Wed 01 Oct 2025 10:47:53 +0000
asID:                     53427
IP address blocks:        45.165.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.crl
                          rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 01 Nov 2024 15:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:35:bf:e1:b8:1d:2a:ef:fc:1f:08:7f:21:8a:af:52:56:ce:9a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43B7A209600FE5F501BA3EDE0E72CB7CA35D8743
        Validity
            Not Before: Oct  2 10:42:53 2024 GMT
            Not After : Oct  1 10:47:53 2025 GMT
        Subject: CN=38434CF355D5339D64CF4800319D614E7630BCE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:84:fd:33:7b:c0:5c:4c:1c:5e:ea:b0:f3:
                    e2:91:b6:a3:5f:d3:78:f4:98:af:ef:3b:1c:f1:92:
                    b7:51:cf:be:57:19:c4:c0:80:27:bd:7a:b4:c3:1d:
                    c4:62:d2:3f:d1:bd:f2:51:6c:ad:e2:ef:a1:fa:cc:
                    20:04:c3:f0:63:b0:05:61:10:00:ba:3b:b3:86:0e:
                    81:c1:d7:a3:68:e1:96:1a:94:1b:ad:a7:6e:da:4c:
                    ec:64:9d:94:c6:cc:3f:87:42:6e:85:5c:87:6e:64:
                    2b:a0:9d:d5:d0:2a:e3:60:01:77:8f:7d:15:36:eb:
                    e5:54:a6:04:f3:df:3e:49:99:67:23:fc:ba:52:7e:
                    69:68:36:7c:85:3d:20:f9:d3:31:49:ba:84:27:94:
                    2f:90:b4:8d:84:4e:53:29:e4:fd:71:d4:f4:1b:e5:
                    e2:3c:de:e6:f0:24:f4:25:be:3c:6a:7f:00:7f:d5:
                    40:68:0c:6a:ee:9a:3c:24:10:9b:ab:93:d0:8f:8c:
                    db:87:18:68:a4:60:a0:63:cf:1c:6c:02:28:6c:bd:
                    d1:25:4f:c6:63:dc:20:07:d4:d8:dd:57:f6:a2:32:
                    bf:cc:eb:3a:fc:c3:f2:95:cc:dd:93:83:f7:9b:45:
                    60:33:65:9d:c1:9c:a7:f6:cd:ce:cd:f8:b4:38:2d:
                    5e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:43:4C:F3:55:D5:33:9D:64:CF:48:00:31:9D:61:4E:76:30:BC:E1
            X509v3 Authority Key Identifier:
                keyid:43:B7:A2:09:60:0F:E5:F5:01:BA:3E:DE:0E:72:CB:7C:A3:5D:87:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/34352e3136352e38312e302f32342d3234203d3e203533343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:b8:05:36:6d:62:25:0c:78:23:9e:dd:38:4f:22:43:39:da:
         1e:2f:8a:95:b3:2e:d2:4c:13:66:fe:97:b8:f6:2b:94:1c:12:
         0e:c0:55:22:51:28:a1:da:20:4c:4e:0a:51:9b:28:ef:b8:5b:
         a0:b4:3c:ad:55:23:dc:53:e2:74:fb:e5:4a:d5:bf:e5:12:5d:
         4f:4b:70:31:c2:34:48:a2:7e:6e:9d:40:2f:dc:bf:ac:0e:c9:
         f9:83:a1:cf:13:7c:df:f3:bb:1d:42:c8:4c:b0:19:39:51:ee:
         4b:c0:c8:61:f4:8d:1f:30:f0:a3:40:34:01:95:86:9e:90:9e:
         d0:8c:6d:6d:98:d5:fe:cd:6f:f5:d6:7f:95:89:1a:67:2a:06:
         c8:f6:8a:f6:d3:08:4a:6c:cf:2f:e4:57:ac:16:1f:24:b5:ba:
         a4:11:b1:b7:86:22:7f:f5:ed:e8:9a:70:fa:13:45:30:54:c8:
         f5:ce:27:65:19:27:be:3a:94:a5:3c:f8:58:7e:4a:67:0a:2a:
         ab:b6:58:10:5f:b5:9d:2e:d9:2b:4b:a9:01:21:84:e1:15:7f:
         a2:9d:8c:4b:fa:ee:f8:27:2b:54:09:08:3c:84:81:5e:dc:a4:
         55:54:fa:45:ed:f2:82:d3:9b:47:e8:e7:99:5b:ed:38:9e:92:
         54:d7:3b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 18:29:53 2024 by rpki-client on console-ams.rpki-client.org