Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136302e302f32332d3233203d3e20323637323134.roa
File:                     34352e3233302e3136302e302f32332d3233203d3e20323637323134.roa (raw, json)
Hash identifier:          /QAvNR1THEByX/OL+uK86D3kXaGh+kE+to5jBNC5RGM=
Subject key identifier:   28:34:95:B0:D4:01:E7:20:E8:A6:63:7D:72:9F:54:86:DA:3F:AE:A3
Certificate issuer:       /CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
Certificate serial:       63CBB5E7C27DFC4776A199EE7BC8A20806F42959
Authority key identifier: B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136302e302f32332d3233203d3e20323637323134.roa
Signing time:             Wed 30 Oct 2024 14:57:04 +0000
ROA not before:           Wed 30 Oct 2024 14:52:04 +0000
ROA not after:            Wed 29 Oct 2025 14:57:04 +0000
asID:                     267214
IP address blocks:        45.230.160.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl
                          rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cb:b5:e7:c2:7d:fc:47:76:a1:99:ee:7b:c8:a2:08:06:f4:29:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
        Validity
            Not Before: Oct 30 14:52:04 2024 GMT
            Not After : Oct 29 14:57:04 2025 GMT
        Subject: CN=283495B0D401E720E8A6637D729F5486DA3FAEA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:9c:ab:47:d8:21:7b:82:9b:78:d6:af:d2:
                    bf:2e:bc:c2:b4:a8:5c:f7:52:2f:5a:77:89:3d:b5:
                    a5:23:be:03:77:7b:74:b7:fd:3b:5b:68:a8:b1:0c:
                    90:e3:9f:b1:6c:f2:cb:4d:c9:2d:34:5d:0f:62:a8:
                    68:cf:11:68:a0:03:9d:6e:2f:b7:cf:59:38:ff:94:
                    e1:6d:72:37:23:51:a8:5c:9b:cd:81:82:ca:c0:16:
                    9a:ad:f1:6f:e0:04:10:a5:35:af:7f:13:07:ed:ff:
                    a2:69:73:e7:b5:f3:63:35:23:48:16:6a:b0:da:8c:
                    06:94:a4:bc:fb:69:35:35:b5:86:2d:fb:35:6e:dc:
                    fa:3e:aa:fa:f1:41:b3:00:f4:f9:4a:11:a4:d5:82:
                    af:67:96:e1:d9:15:83:f0:df:ba:67:1b:c5:4b:ec:
                    88:01:c4:e5:6c:07:48:84:a4:ff:64:5c:13:17:78:
                    2e:f8:e6:df:c6:9e:e4:16:e1:bc:27:16:32:4d:26:
                    37:54:e4:b1:e6:c0:5b:15:6a:c9:38:2f:ff:d4:35:
                    ad:47:d7:35:80:7e:76:55:ec:2f:2d:a4:55:8a:ce:
                    1c:18:ce:e9:fb:6e:bc:bb:5d:e0:80:84:99:3e:51:
                    66:79:b6:62:ee:35:8f:85:eb:8a:e6:ae:d9:b6:e9:
                    be:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:34:95:B0:D4:01:E7:20:E8:A6:63:7D:72:9F:54:86:DA:3F:AE:A3
            X509v3 Authority Key Identifier:
                keyid:B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136302e302f32332d3233203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:ef:60:ba:84:28:83:2b:a3:58:8d:a8:5f:fd:54:7a:d3:9b:
         25:99:22:f0:1c:14:05:1a:43:43:4e:a7:84:0c:e8:11:e1:2d:
         23:ff:5a:c0:5f:fe:e5:c0:24:3a:6a:46:00:b0:9f:d7:c0:78:
         7c:c0:4f:38:af:98:47:41:4b:91:f0:4f:9e:46:35:c0:4c:88:
         8b:34:46:49:44:ac:40:a1:03:c0:c5:ce:5b:7d:b9:d5:22:1e:
         55:55:92:d7:94:ea:61:24:a3:ea:d9:4d:bb:03:48:4f:37:4d:
         6d:af:36:86:12:ba:38:5e:6f:bc:83:31:9f:b2:d9:f9:ab:7d:
         14:24:27:34:c7:dc:ba:bf:9c:42:1a:d8:0c:e1:ce:14:0d:1f:
         10:05:42:b0:08:a4:a9:02:b2:2d:bd:27:6d:71:77:27:cd:20:
         5e:0d:62:87:2b:1d:da:0f:3d:28:82:56:b6:ec:5d:b0:bd:65:
         6b:f9:f0:4a:94:72:f9:d0:c6:f8:f9:d2:38:e8:cf:0b:cc:b5:
         55:b0:74:c5:76:31:a0:b7:b2:8f:e8:de:75:67:66:0c:60:99:
         63:c3:df:29:7a:8a:06:0a:b3:e3:69:54:ee:69:67:22:fe:a9:
         24:82:63:95:a7:8f:6e:39:c9:cf:b3:eb:ef:f6:c4:bd:16:c1:
         fa:6f:54:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:08 2024 by rpki-client on console-fra.rpki-client.org