Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136322e302f32342d3234203d3e20323637323134.roa
File:                     34352e3233302e3136322e302f32342d3234203d3e20323637323134.roa (raw, json)
Hash identifier:          p9gnZ1FwDbeeitIbPTPoEmVPJD5xexiToxCtpDlp57Q=
Subject key identifier:   ED:E3:00:D9:9E:E4:76:7D:D7:AA:D4:08:30:E2:58:98:C1:F1:F2:FD
Certificate issuer:       /CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
Certificate serial:       111530C4F7E56A0318BF4B7BAEF1F05C5A8B9C9A
Authority key identifier: B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136322e302f32342d3234203d3e20323637323134.roa
Signing time:             Wed 30 Oct 2024 14:59:30 +0000
ROA not before:           Wed 30 Oct 2024 14:54:30 +0000
ROA not after:            Wed 29 Oct 2025 14:59:30 +0000
asID:                     267214
IP address blocks:        45.230.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl
                          rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:15:30:c4:f7:e5:6a:03:18:bf:4b:7b:ae:f1:f0:5c:5a:8b:9c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
        Validity
            Not Before: Oct 30 14:54:30 2024 GMT
            Not After : Oct 29 14:59:30 2025 GMT
        Subject: CN=EDE300D99EE4767DD7AAD40830E25898C1F1F2FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5a:1f:ca:91:b8:42:d7:e6:82:8e:e4:18:ec:
                    66:ed:6d:5d:4a:6a:99:27:48:4c:20:a5:56:78:19:
                    f1:91:4f:54:0b:a9:88:11:a3:4f:06:4e:0c:07:36:
                    4b:28:b2:5b:59:3e:0a:62:c3:f0:cb:77:27:df:1f:
                    d3:af:0d:31:54:bc:49:39:a2:e5:eb:a9:1c:28:45:
                    95:e4:5e:73:81:2a:9a:18:5c:03:2d:8f:11:12:2a:
                    99:63:dd:74:1f:00:f7:23:6e:20:10:bf:1d:ed:b8:
                    a3:90:71:2b:0d:de:2d:b0:68:b3:f0:e1:a1:3a:96:
                    8e:fb:1b:13:63:ca:ee:ee:b3:78:b0:a6:00:38:e2:
                    f8:29:ec:25:99:fc:8b:16:21:6e:54:b7:6f:14:79:
                    bd:aa:42:58:76:64:9e:30:e6:c7:01:1d:42:5f:b1:
                    bc:aa:e1:d9:7a:61:4e:25:c5:23:08:a0:41:23:4e:
                    e6:82:0e:f7:14:d1:f1:1e:e7:61:25:99:f9:d4:00:
                    c4:c5:d8:8b:f8:03:ce:bc:ac:ed:61:e0:45:42:cf:
                    1a:33:80:35:d6:86:67:5d:72:10:e6:7e:ff:17:47:
                    b2:e2:0b:d2:ea:da:15:3a:d5:1f:31:a2:be:43:ba:
                    ab:4b:89:60:13:d6:ab:4b:b7:8f:f5:84:14:4a:2b:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E3:00:D9:9E:E4:76:7D:D7:AA:D4:08:30:E2:58:98:C1:F1:F2:FD
            X509v3 Authority Key Identifier:
                keyid:B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136322e302f32342d3234203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:e9:e3:32:1d:54:86:63:30:ba:4d:30:72:7b:55:08:95:37:
         07:a0:b7:20:25:3d:17:86:76:05:f3:de:14:da:05:28:b5:9a:
         24:bf:a8:3c:e9:11:dc:e0:7b:37:bd:51:95:af:e1:23:e9:5a:
         f5:b8:05:c5:5d:da:73:d8:68:cd:96:a7:5a:de:d8:d8:d4:da:
         39:79:31:29:16:af:00:f2:1b:86:9e:3c:34:a6:68:88:9a:40:
         84:71:47:22:32:2f:d0:6a:19:35:4c:5e:7b:99:4f:fd:0b:6a:
         2b:9d:d9:ab:9f:d4:02:58:9c:48:96:62:7d:97:61:87:d6:64:
         f6:b5:5f:83:52:e9:82:a2:97:a4:74:22:af:e1:de:ac:5f:26:
         20:4a:cb:25:07:ef:35:55:de:86:6a:f2:13:0a:d2:b7:17:77:
         04:05:48:38:a6:de:fc:ef:e7:44:b8:9c:0c:2e:27:17:60:50:
         d5:43:7c:f0:a1:5d:12:84:33:c1:bb:dc:03:be:5d:da:b4:49:
         3c:e4:66:be:33:04:c4:1f:ca:4b:f3:f8:85:5c:6d:d7:15:91:
         18:c8:76:c6:71:57:c7:b8:27:7c:95:1e:3a:c5:7f:bb:0a:f2:
         08:71:27:5c:1f:f0:a5:fe:b4:2f:44:98:64:05:25:ca:16:07:
         ab:26:08:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:08 2024 by rpki-client on console-fra.rpki-client.org