Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa
File:                     34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa (raw, json)
Hash identifier:          5JEQ41mS93qIAQdS67rT4lBibFdkhJ+y7yw43mriUAQ=
Subject key identifier:   F4:7A:A7:C9:74:7A:7C:78:19:5E:AC:A9:72:50:0B:F5:12:19:D5:EB
Certificate issuer:       /CN=9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685
Certificate serial:       73BCAF4DDE2A52250549F89724561C511577DD03
Authority key identifier: 9A:CF:8E:0B:C0:F7:B2:EA:16:F1:57:84:D8:D7:BB:6D:81:E7:C6:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa
Signing time:             Fri 03 May 2024 23:15:58 +0000
ROA not before:           Fri 03 May 2024 23:10:58 +0000
ROA not after:            Fri 02 May 2025 23:15:58 +0000
asID:                     262899
IP address blocks:        45.165.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.crl
                          rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 23:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:bc:af:4d:de:2a:52:25:05:49:f8:97:24:56:1c:51:15:77:dd:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685
        Validity
            Not Before: May  3 23:10:58 2024 GMT
            Not After : May  2 23:15:58 2025 GMT
        Subject: CN=F47AA7C9747A7C78195EACA972500BF51219D5EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1d:d4:77:10:66:a1:22:2f:fa:9c:2e:74:70:
                    47:85:c9:5e:42:19:ad:5f:fe:ac:23:9b:e2:97:56:
                    20:76:f1:c2:01:db:79:9f:2a:96:8f:9f:86:1e:c8:
                    d4:25:62:42:5b:64:f4:26:73:e2:62:01:86:33:1a:
                    c5:a3:dc:1f:8a:56:55:aa:c0:85:6b:13:69:86:96:
                    30:08:3c:cc:61:51:fa:4e:5a:50:f4:36:35:1a:5f:
                    49:db:1a:69:95:3c:26:cd:bf:94:9a:05:97:84:9a:
                    a8:7f:69:ad:dc:5e:aa:38:f2:fe:72:a5:ca:b3:b1:
                    90:0d:64:8a:54:25:29:72:5c:a0:38:6b:c2:c7:16:
                    a1:4c:0e:0f:1c:b9:a4:da:a9:96:0b:f6:a8:ce:8f:
                    42:ef:16:4f:e6:eb:a1:63:6b:47:8a:62:00:07:f3:
                    2b:20:0a:be:0d:55:c9:d9:41:79:96:98:aa:f1:da:
                    29:1f:f5:1f:f6:55:d5:d7:64:bc:4d:86:3b:cd:4e:
                    bd:6e:19:26:1d:96:bd:d8:67:e1:7c:74:c8:15:f3:
                    77:b0:f5:5c:03:95:21:fb:84:5c:3f:fd:4e:ef:b2:
                    b1:67:dd:17:4a:b3:10:f6:85:d4:01:93:a1:4c:4e:
                    ae:4c:66:03:6f:43:7b:c6:3d:1b:0a:c6:eb:9d:c6:
                    77:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7A:A7:C9:74:7A:7C:78:19:5E:AC:A9:72:50:0B:F5:12:19:D5:EB
            X509v3 Authority Key Identifier:
                keyid:9A:CF:8E:0B:C0:F7:B2:EA:16:F1:57:84:D8:D7:BB:6D:81:E7:C6:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:25:e7:db:70:83:b7:cc:44:fe:22:0b:87:68:01:da:03:cf:
         37:39:a7:ac:48:72:f9:84:b0:80:4f:4c:03:d9:61:80:2d:d9:
         d4:29:c6:bf:3b:a6:59:66:3b:c1:39:d7:0c:f5:36:18:d5:45:
         46:76:2a:97:04:87:74:29:8a:1f:7e:4d:c7:cc:6b:ca:12:d4:
         47:ca:27:42:61:f5:10:8a:9c:71:00:70:69:8d:6a:09:69:2e:
         c4:de:8f:bd:5c:0c:67:50:80:e5:a9:c1:9c:a9:ff:e0:ae:93:
         73:2c:6e:9b:ea:c9:fe:da:7d:cf:19:1a:b1:2f:d3:00:2e:18:
         ef:83:2c:b7:68:e5:a4:63:20:26:b5:8d:02:0c:a4:32:9b:02:
         e9:de:54:2e:eb:e7:bd:f9:82:c1:d5:d1:99:22:3a:29:87:69:
         b4:40:0a:63:96:be:50:e7:61:a0:ef:e8:f1:4e:86:9f:78:e0:
         f2:c7:25:99:3b:e3:84:56:02:52:87:66:bd:82:4e:8e:03:27:
         6c:ed:3d:c5:6b:99:08:31:20:72:22:9f:cc:7d:ab:68:ff:c3:
         3d:0e:40:2f:c1:6e:b4:fc:c0:14:07:7d:0b:f8:21:52:8c:ea:
         97:d5:35:68:22:2f:01:86:fd:a9:31:b2:e0:af:08:d5:72:51:
         30:86:5c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:06:16 2024 by rpki-client on console-ams.rpki-client.org