Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136322e302f32332d3233203d3e20323637323134.roa
File:                     34352e3233302e3136322e302f32332d3233203d3e20323637323134.roa (raw, json)
Hash identifier:          LWZbmTEHUXOM9YD12EOQIWorQTR49qaUfVhJONjCDRs=
Subject key identifier:   7E:B1:9B:B9:C9:94:59:48:34:56:C6:5A:EE:C0:56:05:96:DF:2F:57
Certificate issuer:       /CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
Certificate serial:       1DBD6D74DB47D83DC91B4702FA385A852FE38C5D
Authority key identifier: B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136322e302f32332d3233203d3e20323637323134.roa
Signing time:             Wed 30 Oct 2024 14:57:41 +0000
ROA not before:           Wed 30 Oct 2024 14:52:41 +0000
ROA not after:            Wed 29 Oct 2025 14:57:41 +0000
asID:                     267214
IP address blocks:        45.230.162.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl
                          rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:bd:6d:74:db:47:d8:3d:c9:1b:47:02:fa:38:5a:85:2f:e3:8c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
        Validity
            Not Before: Oct 30 14:52:41 2024 GMT
            Not After : Oct 29 14:57:41 2025 GMT
        Subject: CN=7EB19BB9C99459483456C65AEEC0560596DF2F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:e6:11:6f:02:5f:d9:10:16:52:8d:53:55:
                    f8:e2:c6:a6:d8:85:c2:22:3a:59:6c:db:64:15:9b:
                    a8:9a:bf:26:80:cd:45:6e:cf:8e:fd:b8:44:02:f1:
                    09:91:c2:40:ba:c4:7d:16:c0:7f:af:4b:a1:98:2e:
                    d1:bf:7c:19:14:b5:4c:1f:20:70:b4:6d:ca:9c:ec:
                    45:3f:f0:15:fd:4a:9b:98:0c:e3:af:40:14:2f:f1:
                    ac:01:ac:ec:78:95:f4:84:01:a9:c5:c2:84:5c:7e:
                    6f:04:02:84:5b:38:73:ac:3b:5c:6b:12:68:3f:24:
                    a9:c0:0c:72:00:cc:9d:4e:6a:57:c1:9b:42:b9:ed:
                    e5:df:b4:06:b4:b7:52:ab:2d:6f:93:23:96:49:07:
                    56:a1:d7:62:c4:17:ba:9f:ee:ce:5e:73:f4:d5:98:
                    4d:bb:e5:92:08:f1:f6:ee:7f:5a:e2:c1:ca:cd:d7:
                    1c:a9:9c:02:eb:77:bd:2c:ef:40:f3:39:9a:62:5d:
                    28:eb:90:e7:a3:78:bb:5b:a1:aa:87:7b:77:0f:9d:
                    55:d9:cd:73:de:af:86:79:0f:e5:9f:77:1e:7e:86:
                    35:64:96:89:31:5d:f8:6d:ea:7d:70:1d:59:10:ca:
                    55:d7:4f:d1:f5:38:60:20:aa:34:5a:67:cc:ae:b3:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B1:9B:B9:C9:94:59:48:34:56:C6:5A:EE:C0:56:05:96:DF:2F:57
            X509v3 Authority Key Identifier:
                keyid:B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136322e302f32332d3233203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:95:bb:5a:00:26:03:55:99:9c:cc:95:be:45:99:22:e7:b0:
         f2:b9:58:6d:1f:fe:35:88:e5:66:54:a4:4c:58:eb:51:36:99:
         66:c5:1f:e9:0b:5d:70:b6:be:00:03:18:5b:65:85:d1:58:c9:
         8f:4d:21:be:83:be:de:f3:f5:6d:8e:66:b6:d5:5b:93:9c:4d:
         57:83:19:70:4d:24:85:5e:fe:0f:52:7c:17:3c:91:8e:02:09:
         5f:b3:bc:75:e8:00:26:56:8d:0b:3e:4b:9f:8c:b3:2a:b8:42:
         9e:16:c1:5d:f2:ce:09:d5:d7:7a:e2:80:9f:d6:0c:e3:cf:a1:
         83:11:55:5b:85:27:9b:06:ca:5c:c4:c2:03:f8:6e:58:71:2c:
         f2:35:4e:89:32:bf:e4:43:73:01:10:a4:ab:ad:ae:44:15:64:
         f2:c4:0f:54:ec:f9:e7:1f:cf:16:3d:4c:04:6a:e3:58:86:7d:
         a5:65:2b:2f:e0:15:23:61:61:81:33:f0:b3:56:44:f7:34:c5:
         41:6c:49:28:8f:64:6c:9b:04:d6:5c:de:3e:c9:a4:a1:bd:f8:
         05:8b:77:4e:19:f3:c9:0a:60:4e:d8:d8:1c:b3:c6:a2:3c:a6:
         fc:92:2d:3b:ce:7e:15:8e:09:51:4b:50:cc:78:d4:aa:b6:33:
         d0:14:70:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:14 2024 by rpki-client on console-ams.rpki-client.org