Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31362e302f32342d3234203d3e20323637313931.roa
File:                     34352e3233312e31362e302f32342d3234203d3e20323637313931.roa (raw, json)
Hash identifier:          yEKhJQU6gjNR7/IDZPTn+uqmsh1mr7gudUueuP0KS4I=
Subject key identifier:   29:C7:95:44:E4:24:00:4D:67:43:45:06:14:83:2D:17:57:8F:17:DF
Certificate issuer:       /CN=60A5A0FCAC82AF800163FDA056041F5925116D3D
Certificate serial:       0D475289CE8EB700199CA85B492F8390BE996570
Authority key identifier: 60:A5:A0:FC:AC:82:AF:80:01:63:FD:A0:56:04:1F:59:25:11:6D:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31362e302f32342d3234203d3e20323637313931.roa
Signing time:             Thu 04 Apr 2024 11:50:50 +0000
ROA not before:           Thu 04 Apr 2024 11:45:50 +0000
ROA not after:            Thu 03 Apr 2025 11:50:50 +0000
asID:                     267191
IP address blocks:        45.231.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.crl
                          rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 14:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:47:52:89:ce:8e:b7:00:19:9c:a8:5b:49:2f:83:90:be:99:65:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A5A0FCAC82AF800163FDA056041F5925116D3D
        Validity
            Not Before: Apr  4 11:45:50 2024 GMT
            Not After : Apr  3 11:50:50 2025 GMT
        Subject: CN=29C79544E424004D6743450614832D17578F17DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fd:9a:f5:16:b2:e1:dc:af:28:ef:7e:fb:ee:
                    0e:46:cf:93:f7:b2:73:7f:b1:f9:7a:ad:5d:7e:ef:
                    b6:14:57:cf:84:83:19:d3:65:bf:90:bd:72:0a:f5:
                    84:60:c9:8f:95:2e:89:e3:9b:72:81:f6:1b:a8:ac:
                    2a:10:9b:9e:b9:29:9f:b7:f8:31:25:a8:18:a9:23:
                    7f:75:41:95:aa:a1:e6:6a:80:97:ea:d4:45:26:83:
                    3a:f2:ea:02:e8:b7:8b:3d:fc:86:47:87:d6:d3:2f:
                    e1:13:95:4d:56:b9:2d:cf:2b:95:f0:1a:47:22:70:
                    a1:71:2d:33:66:b8:11:e4:c6:f9:5d:75:e3:a7:80:
                    26:d0:46:e6:78:1b:af:bc:5b:6f:e3:5c:ce:5d:df:
                    85:3d:f0:dd:6f:79:0d:bf:c8:2c:16:2b:9c:44:ca:
                    c8:16:bd:8f:30:bc:6d:80:55:15:49:e3:b6:3e:e3:
                    d7:9b:6b:09:db:40:98:29:32:c5:dd:96:11:f9:d6:
                    93:ce:a7:64:2d:69:5c:b3:54:d9:1d:cb:99:4a:10:
                    99:c9:13:56:9e:8f:f0:20:44:da:51:c3:da:b0:11:
                    e9:26:60:46:bc:bb:2e:42:25:5b:35:d0:af:0c:b6:
                    35:ab:f3:52:44:d5:48:15:94:4e:f3:87:9a:24:0d:
                    36:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C7:95:44:E4:24:00:4D:67:43:45:06:14:83:2D:17:57:8F:17:DF
            X509v3 Authority Key Identifier:
                keyid:60:A5:A0:FC:AC:82:AF:80:01:63:FD:A0:56:04:1F:59:25:11:6D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31362e302f32342d3234203d3e20323637313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:e6:3a:d7:e6:06:6c:50:6a:87:31:0a:29:3e:0c:d7:ad:6c:
         38:d3:ce:0c:ac:94:1a:00:e8:65:d2:ce:c8:61:84:92:92:53:
         eb:62:a9:8e:36:68:2f:39:eb:34:39:4d:ee:d6:3e:36:14:a6:
         83:09:3e:8b:52:cb:19:b3:1e:2d:57:01:f3:56:71:b8:b4:46:
         ab:07:2e:35:ce:5c:ae:b3:2a:6f:98:a1:0f:cb:42:59:d6:fd:
         62:b8:7f:e8:0d:a6:ba:f5:1c:24:05:d3:75:e4:23:2b:b5:1d:
         d2:0c:e6:5d:e2:b5:15:68:fc:50:d9:85:17:2b:08:89:b3:de:
         6c:8e:77:d5:32:4a:10:2b:07:b7:c3:f6:20:2a:3c:86:d3:62:
         02:9a:2d:40:d3:c4:ab:c7:76:91:ea:08:d4:a3:03:e1:48:36:
         d0:ce:09:fc:b1:22:f8:3e:e1:1a:d2:06:5a:24:37:40:81:ff:
         77:3d:03:23:dd:d5:e1:05:bd:73:dd:e3:6e:bf:67:0c:e9:c4:
         e9:4c:ea:42:4f:a2:45:cb:84:17:60:d1:83:7a:39:d9:53:3b:
         1b:03:9e:88:01:f9:e3:a1:c9:e0:d9:51:d4:e4:61:0f:c5:3c:
         05:85:88:f3:95:b9:fe:86:0d:32:a3:a0:eb:f3:66:32:03:72:
         59:06:aa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 14:46:34 2024 by rpki-client on console-fra.rpki-client.org