Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/34352e3138392e3136382e302f32322d3234203d3e20323634313639.roa
File:                     34352e3138392e3136382e302f32322d3234203d3e20323634313639.roa (raw, json)
Hash identifier:          MSjpX/4D8m1RgIODxDRHXV7CdYLTQ5w1aciGfFCu7VY=
Subject key identifier:   F0:3D:F3:84:64:5A:C5:82:67:35:61:E7:56:82:CE:37:2F:8A:D9:E6
Certificate issuer:       /CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0
Certificate serial:       156AB82C9D8F8558AC0F48D3EE05928AF712D7BE
Authority key identifier: 5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/34352e3138392e3136382e302f32322d3234203d3e20323634313639.roa
Signing time:             Mon 17 Jun 2024 18:26:32 +0000
ROA not before:           Mon 17 Jun 2024 18:21:32 +0000
ROA not after:            Mon 16 Jun 2025 18:26:32 +0000
asID:                     264169
IP address blocks:        45.189.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.crl
                          rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6a:b8:2c:9d:8f:85:58:ac:0f:48:d3:ee:05:92:8a:f7:12:d7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0
        Validity
            Not Before: Jun 17 18:21:32 2024 GMT
            Not After : Jun 16 18:26:32 2025 GMT
        Subject: CN=F03DF384645AC582673561E75682CE372F8AD9E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:de:c7:0c:74:d9:6c:35:80:39:da:a9:6a:
                    0c:f8:35:23:04:5c:30:9d:85:01:d4:89:f9:07:58:
                    51:3c:39:69:1a:09:7b:e0:20:eb:f6:29:b5:42:06:
                    f2:45:d7:1e:58:f0:d4:c9:76:b5:4f:5f:e0:b1:5c:
                    aa:fc:00:3a:52:57:78:59:0e:b2:33:9d:8e:6a:5c:
                    09:e6:e5:dc:0c:53:d5:77:29:17:6d:32:46:73:97:
                    3a:fd:86:23:f9:14:1c:d1:54:54:c5:a8:c5:a6:c9:
                    6f:5d:24:b1:b6:c7:4f:ed:7d:cc:5b:a5:bf:fc:df:
                    4d:75:b0:03:fb:eb:5b:9a:b1:60:f4:f4:52:a0:c1:
                    99:b4:89:07:99:9c:bd:7f:b9:4d:fa:02:ec:f0:1a:
                    78:e4:27:11:db:64:3a:7a:1e:60:42:b7:9c:1a:c1:
                    86:4f:b3:aa:5b:99:6f:57:70:1e:8d:2c:e6:b8:19:
                    b1:0a:4b:ea:c8:fc:74:e8:0f:26:ef:da:38:5e:ff:
                    fb:4c:33:89:71:f3:4e:7f:e6:f2:76:5a:ba:89:f7:
                    46:8c:d5:c7:c1:29:d2:9f:da:cb:6b:4b:45:7a:a5:
                    35:7a:eb:d7:a9:0f:e1:cd:b3:c8:56:99:f7:89:d0:
                    3a:f5:75:52:3e:bc:9b:09:a3:3c:4c:67:ff:ff:05:
                    72:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3D:F3:84:64:5A:C5:82:67:35:61:E7:56:82:CE:37:2F:8A:D9:E6
            X509v3 Authority Key Identifier:
                keyid:5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/34352e3138392e3136382e302f32322d3234203d3e20323634313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:30:97:4e:68:bc:80:b8:1b:57:a4:16:d2:fa:f9:fa:d3:ce:
         02:67:46:ef:1a:91:6f:d8:20:47:d5:e1:09:e7:83:01:e0:3f:
         0e:38:8c:06:50:41:91:02:a1:8e:1b:b2:b9:bd:34:3c:65:c9:
         15:6c:92:ec:67:37:29:64:63:4e:84:1c:73:70:63:f2:97:89:
         6f:7f:6f:f2:aa:b7:19:2c:d1:8e:cf:81:d6:53:91:f2:d8:38:
         aa:f6:13:51:e6:45:b4:bd:11:36:a7:bf:51:7c:64:7a:46:e1:
         c2:d3:63:90:03:65:0b:b0:cb:7b:89:9d:4d:2f:ff:6d:53:77:
         eb:6f:20:b4:f6:5b:f5:2f:18:41:15:7a:08:85:bf:7a:c6:39:
         5a:1f:dc:91:60:62:19:cc:1d:ed:7b:de:22:e8:c7:8c:a2:50:
         14:e7:09:0f:46:63:0e:e1:98:1d:ef:ee:67:03:c7:9a:06:55:
         6b:48:96:a3:06:7e:2b:1f:14:4c:40:61:22:2e:97:db:6e:2b:
         0c:a9:b7:c3:07:e7:49:61:8e:b0:0e:dd:4c:f7:60:5e:1e:ad:
         bf:74:19:67:15:5b:da:b9:d7:53:6e:f1:fa:20:a5:53:09:e7:
         55:7b:e3:f9:3b:65:25:e9:88:f2:71:e0:a5:85:75:fe:d9:ee:
         9c:0f:86:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:32 2024 by rpki-client on console-ams.rpki-client.org