Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32332d3233203d3e20323638383738.roa
File:                     34352e3137342e31362e302f32332d3233203d3e20323638383738.roa (raw, json)
Hash identifier:          z1y0SZRp4zo/7pQGV4UWY5Xthe0NgImYl1W2DNzmxSU=
Subject key identifier:   53:E5:2E:3A:AF:9D:EB:C0:FA:76:7A:0A:DB:DC:C4:B1:72:0A:2D:18
Certificate issuer:       /CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59
Certificate serial:       050C8CD3C95611FDE3B938D986AD94D0D90FF841
Authority key identifier: DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32332d3233203d3e20323638383738.roa
Signing time:             Tue 12 Nov 2024 19:10:07 +0000
ROA not before:           Tue 12 Nov 2024 19:05:07 +0000
ROA not after:            Tue 11 Nov 2025 19:10:07 +0000
asID:                     268878
IP address blocks:        45.174.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.crl
                          rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0c:8c:d3:c9:56:11:fd:e3:b9:38:d9:86:ad:94:d0:d9:0f:f8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59
        Validity
            Not Before: Nov 12 19:05:07 2024 GMT
            Not After : Nov 11 19:10:07 2025 GMT
        Subject: CN=53E52E3AAF9DEBC0FA767A0ADBDCC4B1720A2D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:de:1c:3a:4f:92:4d:79:03:bb:29:af:6c:
                    86:b2:a4:e9:d8:0e:ab:b2:7e:f8:8a:78:1f:38:a1:
                    2b:9f:c6:c3:37:d6:47:72:02:8a:69:51:38:ac:cb:
                    d0:ef:55:20:ce:99:b8:76:23:f4:ba:65:58:96:6a:
                    fd:d7:c6:7b:96:2e:a1:80:c9:bf:36:81:0e:09:5e:
                    63:b4:d4:62:48:ac:5e:b9:20:39:82:e2:46:c6:59:
                    2e:cc:ab:b9:05:0f:81:e8:9e:d5:75:19:18:e6:90:
                    19:af:c6:f7:2d:2b:66:dc:c8:d7:90:f8:a7:08:0d:
                    bf:92:e5:c3:c7:6e:f0:d3:37:80:31:60:df:16:bf:
                    c4:35:2f:f6:bf:a2:8c:05:98:d1:dc:93:ef:28:b5:
                    94:21:46:75:4f:92:2c:32:fc:97:42:fc:6d:34:f4:
                    fa:2b:c3:32:51:74:df:9a:ab:24:a0:8b:41:74:a5:
                    ec:6a:28:b7:95:1b:38:66:38:6c:7a:6e:0b:af:a9:
                    bc:3c:d0:82:5a:41:4a:3c:30:f2:71:da:a6:22:13:
                    c3:eb:a1:1c:78:13:d9:26:2b:4e:47:a1:f6:04:db:
                    7a:96:75:fa:fb:43:d0:9d:cb:5b:31:64:12:c6:22:
                    d2:f2:62:37:49:74:fe:96:51:19:dc:d1:05:d6:36:
                    05:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E5:2E:3A:AF:9D:EB:C0:FA:76:7A:0A:DB:DC:C4:B1:72:0A:2D:18
            X509v3 Authority Key Identifier:
                keyid:DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32332d3233203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:90:c8:cc:b0:60:86:41:e6:a1:fc:cd:fa:f8:ed:bf:3e:5d:
         45:9f:80:da:cd:8d:e7:69:e5:3d:e8:80:3c:39:ad:4d:75:e5:
         ee:2a:6d:f9:30:e3:4a:cc:08:a2:a9:63:16:1e:0c:02:00:2d:
         d0:30:ee:cb:01:5d:b2:69:cf:9c:91:a9:18:5b:c1:ca:c9:88:
         2c:b7:75:e3:76:ee:47:21:0d:77:ed:bb:f2:d2:8a:f1:40:f4:
         e6:7b:ab:2d:dd:66:ed:c3:bb:a9:f0:b3:be:f6:12:c3:ef:e5:
         3e:90:57:98:63:70:9c:53:07:9f:ff:be:6c:8c:35:74:34:f6:
         cd:f9:93:aa:36:ff:94:fd:3d:2e:be:30:6f:cf:fe:df:ab:8d:
         c8:e8:d4:d2:6c:eb:64:c0:3a:23:83:59:29:87:8f:45:db:28:
         eb:27:33:c9:6a:de:88:0a:e0:dc:2d:91:30:1a:78:b6:70:52:
         92:02:fe:8d:07:91:e4:05:cb:0f:97:39:96:10:44:81:1c:71:
         b8:15:5d:8c:6d:de:d5:39:5c:11:8e:05:cb:6d:db:1a:41:8b:
         c7:d4:d1:33:75:af:56:28:2d:29:5f:15:4a:6d:ad:21:dc:f2:
         6a:f7:84:99:86:7c:78:6d:04:e0:b4:cf:e6:df:88:19:3e:af:
         27:74:e0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:52 2024 by rpki-client on console-fra.rpki-client.org