Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32322d3232203d3e20323633333437.roa
File:                     34352e3136322e3135322e302f32322d3232203d3e20323633333437.roa (raw, json)
Hash identifier:          tah+WnV3EhBnN9QxEz4OJjbFiGDn+uO1/2Zoj3RbQ1c=
Subject key identifier:   94:DF:A5:5D:9E:F8:65:62:12:5D:AA:55:D1:4B:3B:85:01:9E:2A:AA
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       6D907CE7CDD865DF8BD15384E0DB6BDE700221CB
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32322d3232203d3e20323633333437.roa
Signing time:             Thu 04 Apr 2024 17:40:25 +0000
ROA not before:           Thu 04 Apr 2024 17:35:25 +0000
ROA not after:            Thu 03 Apr 2025 17:40:25 +0000
asID:                     263347
IP address blocks:        45.162.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:90:7c:e7:cd:d8:65:df:8b:d1:53:84:e0:db:6b:de:70:02:21:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Apr  4 17:35:25 2024 GMT
            Not After : Apr  3 17:40:25 2025 GMT
        Subject: CN=94DFA55D9EF86562125DAA55D14B3B85019E2AAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:7d:49:f0:9b:22:ca:af:bd:8a:ca:4e:36:
                    95:85:a4:11:a6:ac:19:d6:87:ea:c2:fc:7d:93:2f:
                    9a:f9:75:16:1c:61:07:9b:fa:f9:5f:bd:92:29:68:
                    3c:a9:8f:9a:34:ff:16:4d:be:97:38:dd:5c:2b:32:
                    4f:dc:77:81:24:64:f3:a2:0f:ec:0c:d0:76:91:68:
                    db:e9:b1:77:77:51:d8:e5:7e:6f:10:c5:25:da:4d:
                    11:14:ac:6c:73:cc:9c:6f:8b:33:51:0f:84:07:c2:
                    0f:db:38:b4:7f:ca:d6:2f:21:fd:94:ec:d9:00:63:
                    17:15:9f:53:7a:24:94:d4:e0:fb:b4:df:d4:65:75:
                    08:b1:bd:38:22:1b:20:8c:c9:d2:87:28:3b:5d:2e:
                    08:85:e5:a7:74:23:37:fc:46:e3:99:a9:d5:f5:46:
                    51:86:90:d4:7e:52:77:14:94:2f:28:3c:13:28:7d:
                    4e:e2:1c:26:d6:3c:da:37:1c:70:66:1f:f0:55:66:
                    a6:02:36:b0:1b:af:59:73:6c:df:2e:f9:ec:e5:ee:
                    ee:3e:a8:e9:5a:4f:21:a8:36:62:19:e4:80:68:07:
                    19:02:d4:24:ed:6e:c7:31:78:23:25:c4:f6:06:05:
                    01:33:ad:64:74:60:b4:75:86:c6:96:0f:da:61:1a:
                    3d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DF:A5:5D:9E:F8:65:62:12:5D:AA:55:D1:4B:3B:85:01:9E:2A:AA
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32322d3232203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:88:d7:48:ea:78:05:e2:aa:16:0b:36:eb:66:6d:20:0d:38:
         d8:4f:17:25:69:cc:e2:9e:39:e5:16:da:df:a2:2c:7f:5a:8e:
         93:fd:b8:89:e1:33:dd:7c:d0:3b:0c:33:cf:9b:2d:20:85:da:
         4a:a7:a8:75:ae:ef:a0:f6:73:44:a0:15:d0:24:0c:90:68:23:
         c3:b1:30:d3:25:5d:44:c3:7b:45:0f:2e:c6:0f:84:7a:1c:89:
         bd:ab:f9:04:98:13:5d:bb:21:1e:24:fc:69:70:9e:e6:8c:8a:
         ce:ce:10:2d:37:e6:5b:90:ea:38:34:fb:fa:3d:48:a0:27:c1:
         17:59:e1:b5:d4:48:32:86:f3:8b:51:1d:cc:01:dc:20:41:3b:
         0c:9d:c3:3a:7a:7f:ae:60:4f:67:1c:8d:bb:06:ed:17:62:8f:
         98:c7:dd:18:bb:83:d0:5f:cc:66:a9:e8:2e:77:43:5a:88:4e:
         23:5a:21:02:46:e4:1e:5f:6e:39:c1:ea:ac:d1:43:0c:b7:10:
         9e:2f:df:7d:53:76:81:fe:e5:30:a8:1b:e2:f1:49:f1:2b:c5:
         53:94:bd:f5:aa:02:42:6c:d3:dc:c6:bb:75:01:96:65:e9:d1:
         53:72:bd:2f:b7:1b:40:4c:9a:62:41:87:14:6e:bf:bc:b4:2f:
         4d:55:55:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:26 2024 by rpki-client on console-fra.rpki-client.org