Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31362e302f32332d3233203d3e20323638303837.roa
File:                     34352e3136392e31362e302f32332d3233203d3e20323638303837.roa (raw, json)
Hash identifier:          sgz0tBWP/AMTu00LB0TLAIzVVhzIcl3PxXaDMrE6IGI=
Subject key identifier:   90:A2:9C:04:71:FA:F6:EE:92:76:48:40:07:B1:B2:FD:0D:70:E9:60
Certificate issuer:       /CN=45934B0CAE85DBAD4DE018223B107DAECCEB18C6
Certificate serial:       47D6A8B0894A56E51251A976D04226827289551A
Authority key identifier: 45:93:4B:0C:AE:85:DB:AD:4D:E0:18:22:3B:10:7D:AE:CC:EB:18:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31362e302f32332d3233203d3e20323638303837.roa
Signing time:             Tue 16 Apr 2024 13:53:28 +0000
ROA not before:           Tue 16 Apr 2024 13:48:28 +0000
ROA not after:            Tue 15 Apr 2025 13:53:28 +0000
asID:                     268087
IP address blocks:        45.169.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.crl
                          rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d6:a8:b0:89:4a:56:e5:12:51:a9:76:d0:42:26:82:72:89:55:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45934B0CAE85DBAD4DE018223B107DAECCEB18C6
        Validity
            Not Before: Apr 16 13:48:28 2024 GMT
            Not After : Apr 15 13:53:28 2025 GMT
        Subject: CN=90A29C0471FAF6EE9276484007B1B2FD0D70E960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:ea:61:ba:2d:76:6c:e7:f9:e4:17:12:21:
                    7f:d5:35:87:d4:87:41:bd:b3:9d:b6:54:53:6d:af:
                    51:7d:8c:89:07:d1:05:c5:ac:ea:65:f6:28:73:20:
                    46:fc:3d:b3:2f:1a:00:c6:6a:15:8d:69:b2:dd:fb:
                    4e:cb:e0:5d:18:7d:43:ee:25:ed:1e:f8:f7:86:4d:
                    ca:d1:33:a4:db:03:11:d5:df:45:e5:8c:a8:87:a6:
                    bf:64:1a:7a:ef:f2:09:94:65:35:44:b5:9a:08:7e:
                    48:7e:f0:ac:24:76:60:e4:71:ad:37:30:8c:38:01:
                    83:d5:39:c0:e7:a2:c9:3a:b9:bd:7f:03:31:01:fa:
                    21:e6:02:e7:3c:37:4b:c1:93:ce:c4:57:63:a0:4b:
                    65:d4:07:a8:8c:39:2f:fe:7f:46:10:2f:dc:c0:08:
                    8c:24:39:a2:30:f6:7c:39:24:37:f2:85:d0:54:f9:
                    f4:7f:ee:1c:50:b0:55:e5:a2:44:fb:b3:a8:6d:75:
                    e2:ea:08:56:eb:56:6f:2e:d5:36:26:84:04:c2:24:
                    7f:3d:9f:23:13:d3:81:4a:ef:46:8c:bd:02:eb:58:
                    a6:75:e5:5e:71:4f:51:fd:7e:98:c5:46:8c:9b:fb:
                    d6:59:9a:3f:ee:7a:03:86:02:18:5a:9a:aa:62:27:
                    9e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A2:9C:04:71:FA:F6:EE:92:76:48:40:07:B1:B2:FD:0D:70:E9:60
            X509v3 Authority Key Identifier:
                keyid:45:93:4B:0C:AE:85:DB:AD:4D:E0:18:22:3B:10:7D:AE:CC:EB:18:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31362e302f32332d3233203d3e20323638303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:af:cb:a7:8f:c9:ed:94:ad:c2:d0:70:c7:22:8a:5d:8b:01:
         03:8d:94:dc:44:7b:3e:43:db:75:f2:9f:2a:2b:c9:ac:10:ef:
         63:e8:de:24:38:23:72:98:84:61:19:8e:57:56:0a:a9:c9:13:
         2c:d6:93:ed:e7:24:79:e3:6c:67:b5:26:34:64:bb:6f:6b:ea:
         a4:d2:a1:99:0f:10:40:a8:02:89:2a:67:28:93:29:73:19:b3:
         29:e5:02:6d:dd:30:9a:70:24:43:5b:bf:6a:cf:d8:d7:56:94:
         7f:dc:92:c2:30:35:97:63:86:a4:29:3d:43:76:20:a7:40:e4:
         29:ff:b5:cc:49:2a:72:b1:1d:ff:2f:ec:2c:e7:5c:14:2b:f6:
         d4:9c:d1:26:d6:f6:46:38:06:4a:d4:8b:79:56:a6:db:db:36:
         e1:d0:ef:2b:72:d1:a8:30:61:6d:ba:66:f7:f0:30:bb:6b:53:
         7f:28:6b:45:db:18:11:70:d0:9f:32:24:e9:0f:fa:e3:da:0b:
         3e:75:80:fd:df:0d:b9:59:83:74:3f:86:be:0e:26:b3:47:12:
         6e:46:9e:17:b7:de:ab:5b:fe:9e:7a:b5:65:1d:74:7a:a4:36:
         96:c4:20:7d:d1:42:b0:2f:dc:3a:a9:3b:8d:a6:f2:fe:6f:06:
         01:c7:48:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:48 2024 by rpki-client on console-fra.rpki-client.org