Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32322d3232203d3e20323638383738.roa
File:                     34352e3137342e31362e302f32322d3232203d3e20323638383738.roa (raw, json)
Hash identifier:          4XQINE36INvPLxi/wmnP9V6UCZdBBfVuiXD7OZOzsPo=
Subject key identifier:   C3:7E:7C:29:4B:D4:21:B6:AE:15:27:0B:18:51:E5:9F:46:29:76:F1
Certificate issuer:       /CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59
Certificate serial:       1A75CE49E60C29846A60A0BAF1A2DDE16AA8DCF3
Authority key identifier: DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32322d3232203d3e20323638383738.roa
Signing time:             Tue 12 Nov 2024 19:10:08 +0000
ROA not before:           Tue 12 Nov 2024 19:05:08 +0000
ROA not after:            Tue 11 Nov 2025 19:10:08 +0000
asID:                     268878
IP address blocks:        45.174.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.crl
                          rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:75:ce:49:e6:0c:29:84:6a:60:a0:ba:f1:a2:dd:e1:6a:a8:dc:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59
        Validity
            Not Before: Nov 12 19:05:08 2024 GMT
            Not After : Nov 11 19:10:08 2025 GMT
        Subject: CN=C37E7C294BD421B6AE15270B1851E59F462976F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c5:13:fb:7b:a0:ba:29:89:04:60:6d:b9:9a:
                    f3:a6:29:21:e7:5e:0e:f4:b7:e1:59:a8:f9:19:f8:
                    cf:9f:be:75:b5:ce:4b:eb:27:3c:30:21:cf:ea:7f:
                    b9:85:05:9c:6c:b3:ed:38:c8:77:29:49:e4:19:8e:
                    5d:b7:4d:0f:dc:80:64:d0:69:0a:c2:63:5b:18:d0:
                    81:bb:4f:0a:d1:8f:f7:b6:51:9a:38:66:aa:99:ae:
                    ec:bb:06:56:07:1f:93:fc:d0:d6:83:fb:4c:99:4e:
                    00:e4:a0:68:65:8d:bf:f8:36:bd:09:35:39:94:2e:
                    9f:bb:c1:77:f5:79:1e:4b:e5:e9:59:89:04:9f:6b:
                    04:dc:f2:ff:a4:72:e7:75:9f:2d:1b:2f:ae:79:26:
                    e7:b5:5e:20:54:ff:ab:94:0c:f0:ba:22:90:76:8b:
                    cb:de:96:4f:a5:38:7d:57:1a:b9:25:0c:93:de:dc:
                    d0:83:9e:76:a5:03:04:73:13:a0:47:3e:ea:c1:3a:
                    90:3e:95:ad:22:69:05:68:c5:1f:f7:30:aa:ee:33:
                    8b:a8:f8:b7:fd:b7:85:bc:03:89:39:cb:a2:ce:76:
                    80:7a:77:b9:16:aa:f7:33:4e:88:8e:dd:e5:00:5c:
                    70:90:5a:f7:b2:27:a2:20:db:14:03:31:57:87:3e:
                    4a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7E:7C:29:4B:D4:21:B6:AE:15:27:0B:18:51:E5:9F:46:29:76:F1
            X509v3 Authority Key Identifier:
                keyid:DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32322d3232203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:51:71:1c:42:ca:e8:e0:d6:66:40:d0:33:25:eb:77:0a:e1:
         24:bc:d7:8f:7b:27:ad:d5:58:a1:83:c4:62:0b:75:b6:3d:d2:
         2f:18:f3:0e:05:4d:9b:75:ab:e3:43:f3:e6:f0:8c:fa:6a:e6:
         1e:98:29:61:eb:3d:b9:40:bc:63:2b:5d:c3:53:e8:17:31:3f:
         17:63:20:df:10:99:73:11:fd:a3:b6:24:63:af:5c:e4:0f:91:
         ff:5d:93:97:3d:fa:84:e0:25:dc:18:c1:ae:66:a6:f3:c6:d8:
         b3:a6:72:12:77:60:9c:fc:45:95:83:d3:32:19:2c:0c:39:4b:
         0b:f1:bf:5f:17:20:40:d3:1c:34:ec:f4:17:16:3a:e3:da:ca:
         3d:86:89:ac:79:1e:2d:7f:f9:06:e9:bc:ad:0c:b7:86:00:b8:
         d6:bb:0a:c2:04:7c:11:0e:e4:f5:72:84:6f:9b:74:12:3b:ca:
         6c:7d:2f:a5:61:74:68:9b:8f:d9:de:63:07:c0:3a:4a:6d:96:
         2e:a6:c6:50:0c:16:b5:d4:6f:84:cd:22:3d:78:ab:b6:34:d4:
         c3:ab:28:a3:31:d5:94:ae:af:bf:ce:df:30:76:42:4f:70:49:
         55:c9:93:ee:7c:07:66:4b:4c:af:47:da:d8:f4:e3:db:51:d0:
         19:51:74:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:13 2024 by rpki-client on console-ams.rpki-client.org