Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa
File:                     34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa (raw, json)
Hash identifier:          /HX2daACqr+ZDUaKpm/AycqMhmKMzUO7G7oaCFhNKag=
Subject key identifier:   A9:CA:69:78:6F:6B:9D:07:CD:A4:04:82:E6:F2:9B:69:CC:2A:60:0E
Certificate issuer:       /CN=E16D74041965C3729D5552BEFB00E767BB091F4E
Certificate serial:       68EA328909E73976E1AE1F44038C2352FF1F6315
Authority key identifier: E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa
Signing time:             Thu 04 Apr 2024 07:20:51 +0000
ROA not before:           Thu 04 Apr 2024 07:15:51 +0000
ROA not after:            Thu 03 Apr 2025 07:20:51 +0000
asID:                     268678
IP address blocks:        45.165.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/E16D74041965C3729D5552BEFB00E767BB091F4E.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/E16D74041965C3729D5552BEFB00E767BB091F4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ea:32:89:09:e7:39:76:e1:ae:1f:44:03:8c:23:52:ff:1f:63:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E16D74041965C3729D5552BEFB00E767BB091F4E
        Validity
            Not Before: Apr  4 07:15:51 2024 GMT
            Not After : Apr  3 07:20:51 2025 GMT
        Subject: CN=A9CA69786F6B9D07CDA40482E6F29B69CC2A600E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:ba:f3:0b:02:f7:39:94:85:d1:28:32:9d:
                    8b:c7:d9:b7:44:d1:47:d6:8e:17:2d:ad:c7:67:6b:
                    d3:58:34:17:1b:e4:7b:ed:47:85:52:b2:4f:ee:23:
                    53:cb:ae:5f:1a:d1:1d:4d:ca:13:b4:9d:3e:1f:d0:
                    a2:3b:10:27:e8:8c:6a:06:e4:0b:15:a5:bb:2c:d0:
                    ad:4d:11:5b:79:51:9f:d0:07:f9:79:e5:57:a1:bb:
                    a3:fe:3d:a6:c9:b1:e1:05:3b:57:ac:f7:a0:2f:c8:
                    e4:01:7a:87:07:21:53:34:ce:04:7f:6a:1a:b4:b2:
                    7a:e1:8f:f6:87:10:86:b0:4f:2e:17:40:c5:96:e9:
                    11:3a:02:25:fa:10:ee:38:0d:37:e0:70:c0:7e:ad:
                    63:6f:77:c5:54:65:01:9d:c8:eb:73:3c:82:59:3a:
                    a4:df:89:20:8f:14:97:2b:ce:79:31:22:1d:ab:ae:
                    da:52:8a:5f:97:22:ed:f4:19:2c:ed:ff:92:31:74:
                    52:94:83:e9:ec:e5:ff:a5:9e:f7:8e:98:da:3d:38:
                    c4:11:39:de:40:be:89:ad:93:92:e0:36:12:31:03:
                    93:33:ba:07:15:46:cf:09:0b:3e:97:19:62:2b:55:
                    ee:25:37:2d:ee:5c:2d:78:cf:18:2b:6a:13:26:4e:
                    aa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CA:69:78:6F:6B:9D:07:CD:A4:04:82:E6:F2:9B:69:CC:2A:60:0E
            X509v3 Authority Key Identifier:
                keyid:E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/E16D74041965C3729D5552BEFB00E767BB091F4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:f2:dd:f4:3c:b9:d4:b0:4d:2f:58:48:e8:21:46:40:16:fd:
         5b:59:d0:c6:49:18:c4:78:ec:04:52:f6:9a:7c:07:6c:53:71:
         1d:08:3a:c2:35:28:de:b7:2d:26:0a:0a:6f:24:51:bf:19:94:
         11:82:03:29:ee:dc:7d:c8:86:ea:50:de:99:fd:1a:75:97:3b:
         79:ff:e6:72:0d:9b:af:20:be:71:d0:94:ad:f9:4f:bc:82:a7:
         3e:37:92:98:8e:f9:0c:e5:14:85:87:f2:bc:0d:05:6b:df:9a:
         7f:0d:ab:00:76:17:61:9f:e0:11:cd:a2:d5:ad:4e:c8:1d:d8:
         94:19:12:cd:99:9b:17:a6:e2:67:44:de:a5:11:99:b3:6c:2b:
         7f:9e:ab:73:54:91:95:43:0d:64:9f:6d:72:cb:0b:ea:a5:75:
         0f:ee:bf:2f:b2:2a:44:2a:9f:70:0b:89:c7:46:35:e4:69:df:
         8f:a1:ef:30:47:02:6e:36:1a:34:13:56:20:fd:8c:9b:66:e5:
         af:53:60:21:55:6b:3f:73:98:c0:5c:ec:eb:7a:66:a1:c3:4b:
         57:c9:08:b0:ad:23:64:54:01:21:2c:3f:f0:ed:94:94:6a:4c:
         af:f8:49:9b:00:3d:70:e7:5d:85:62:f4:f9:34:bd:60:e7:cc:
         f4:12:b5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:06 2024 by rpki-client on console-ams.rpki-client.org