Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/34352e3136302e302e302f32322d3233203d3e20323632343434.roa
File:                     34352e3136302e302e302f32322d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          MWBG8sgs75VgjUgM3EgV9kWwkZHx1IQMiswD8IYmfEk=
Subject key identifier:   7B:90:37:D6:CC:49:82:0D:88:23:77:17:61:A8:01:BD:DF:2F:4D:2C
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       690BC53AEAED19B1301D81B9E89F9406746C9E56
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/34352e3136302e302e302f32322d3233203d3e20323632343434.roa
Signing time:             Mon 12 Aug 2024 13:27:36 +0000
ROA not before:           Mon 12 Aug 2024 13:22:36 +0000
ROA not after:            Mon 11 Aug 2025 13:27:36 +0000
asID:                     262444
IP address blocks:        45.160.0.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0b:c5:3a:ea:ed:19:b1:30:1d:81:b9:e8:9f:94:06:74:6c:9e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug 12 13:22:36 2024 GMT
            Not After : Aug 11 13:27:36 2025 GMT
        Subject: CN=7B9037D6CC49820D8823771761A801BDDF2F4D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:09:7b:a7:80:ff:1d:4e:dd:87:0c:8a:35:
                    50:9d:ae:bb:0d:6d:67:96:0a:55:77:59:d5:9f:22:
                    f5:98:c4:0e:64:1b:ce:6e:99:e3:45:72:23:b1:33:
                    8d:d6:5d:9c:43:e9:69:96:ea:80:8a:fd:b5:1e:8b:
                    b0:9f:b3:da:09:f1:93:39:5b:4e:cc:4b:6b:d0:1b:
                    d4:43:dc:bf:65:9f:19:d0:d2:a2:3f:ef:d9:20:8d:
                    1d:5a:8a:43:8e:a9:5b:dc:d0:c6:e1:31:51:66:b3:
                    8b:70:9e:54:31:16:71:63:cf:6a:5a:4d:81:3c:76:
                    9f:9a:de:4d:4b:8e:8f:51:26:fb:e4:3a:4b:c6:f9:
                    a0:5e:9b:f2:49:5d:66:03:08:3b:dd:8f:36:eb:22:
                    cc:15:7b:a3:5c:65:b9:f9:8d:c4:61:99:9b:cd:af:
                    20:01:a4:53:63:dc:b1:c2:f1:b3:6d:9c:35:66:b3:
                    53:cc:7a:a4:af:97:2a:f4:0f:1b:f9:89:a6:dc:e6:
                    da:82:be:63:08:83:63:1e:67:1a:70:97:04:02:41:
                    91:43:9c:d6:06:4f:ce:a9:b1:ab:82:fa:5b:57:18:
                    9b:29:f8:b5:4c:51:bb:e9:7a:b3:8d:e0:64:8b:c8:
                    dc:99:9c:4d:4e:01:a6:5d:55:a0:b3:08:38:1e:ae:
                    c3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:90:37:D6:CC:49:82:0D:88:23:77:17:61:A8:01:BD:DF:2F:4D:2C
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/34352e3136302e302e302f32322d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:b5:34:5c:41:bd:80:d9:6c:17:d7:d4:b0:bd:06:c1:6f:15:
         c1:da:d1:61:26:5b:5f:db:89:4a:34:21:85:78:7b:53:62:3e:
         ff:86:71:12:b7:36:b3:87:2e:ed:6b:32:b3:a5:02:b1:53:80:
         32:ef:e1:e2:db:f1:5d:6a:3d:a1:2b:4b:97:f8:49:4a:54:53:
         ba:9b:af:0d:e9:e9:f3:19:af:cd:e4:c1:fd:4b:1b:58:c3:6a:
         97:45:d9:69:8c:df:c7:c0:c8:4e:63:a9:35:82:47:5e:5b:c2:
         d2:83:d3:e0:5d:70:ec:c9:a3:f7:d5:b7:61:e6:1b:9b:f4:6e:
         c9:83:6b:0e:00:1e:a4:50:a3:9f:51:bf:56:06:56:6c:98:94:
         e4:1f:9d:08:5d:12:e9:0c:03:22:4f:90:06:f6:58:71:4a:6d:
         75:0c:7e:c5:bf:31:91:67:77:d4:c2:2c:bd:93:e1:80:7d:78:
         6a:a2:3d:87:c0:19:22:de:0a:85:47:b3:6b:b9:f0:a3:31:34:
         42:d0:69:05:a2:25:f8:a0:b5:8c:6f:d7:5d:87:2d:6d:af:11:
         09:28:75:15:ef:98:be:9a:1c:1d:5c:11:06:12:04:c8:19:19:
         4e:e1:eb:3b:33:f2:0a:92:eb:98:7e:2b:e8:b5:09:5f:6a:13:
         ea:20:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:50 2024 by rpki-client on console-fra.rpki-client.org