Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32332d3233203d3e20323633333437.roa
File:                     34352e3136322e3135322e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          cmb1XfjpL3U/XX9dgpYD4lMmzkYaCbDuGcQMI7wakbU=
Subject key identifier:   DD:2B:CC:0C:64:E7:99:5C:F1:4E:DA:5B:D1:20:91:30:8E:03:23:A9
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       58130296F939191A43386E57751FD77EBDC3C762
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 04 Apr 2024 17:40:28 +0000
ROA not before:           Thu 04 Apr 2024 17:35:28 +0000
ROA not after:            Thu 03 Apr 2025 17:40:28 +0000
asID:                     263347
IP address blocks:        45.162.152.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:13:02:96:f9:39:19:1a:43:38:6e:57:75:1f:d7:7e:bd:c3:c7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Apr  4 17:35:28 2024 GMT
            Not After : Apr  3 17:40:28 2025 GMT
        Subject: CN=DD2BCC0C64E7995CF14EDA5BD12091308E0323A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:d7:cd:e9:54:2c:56:ad:2f:d6:0a:0f:b8:
                    c6:f6:ea:3c:db:4e:e0:fd:59:11:cc:c5:08:83:ab:
                    8a:f1:ec:e4:98:da:0b:7a:9c:aa:42:1e:f9:a9:ca:
                    e9:fc:03:9c:cc:e2:fe:1f:fe:19:c2:8d:e3:21:55:
                    9f:3c:6a:a0:0e:d5:26:61:de:86:4c:d5:21:96:55:
                    82:55:b0:ee:23:dd:c3:99:ae:cf:7e:73:52:ca:1b:
                    67:0d:22:92:ac:9d:61:d1:bc:2e:c5:bd:f3:8b:70:
                    d6:74:ec:c7:e9:7f:3e:a5:df:54:33:2a:fa:b8:61:
                    9b:84:4b:d7:ba:c8:21:4a:41:55:9a:42:79:08:ca:
                    90:71:fa:c1:a9:8f:a9:a3:11:0e:b1:ad:71:6c:37:
                    df:71:5a:e5:1a:64:3d:94:f0:47:da:2d:91:77:1f:
                    60:46:92:54:d3:68:84:88:7a:fb:17:81:0e:e9:b2:
                    86:61:d4:81:10:99:a0:db:06:18:91:80:72:5a:2d:
                    c9:34:c4:1b:47:a2:6e:29:6b:c5:f3:7c:4b:4b:42:
                    a2:52:ff:b0:b1:de:70:23:5e:e5:dd:22:c7:7a:87:
                    4a:2f:83:13:09:f5:cc:4d:69:9c:08:31:fe:cb:dd:
                    ed:49:d9:df:ab:d2:ba:ba:3c:be:3f:10:66:f4:d9:
                    2b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2B:CC:0C:64:E7:99:5C:F1:4E:DA:5B:D1:20:91:30:8E:03:23:A9
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:20:4d:83:61:c0:cb:c9:97:29:b1:d2:de:e8:58:d6:99:08:
         8f:f4:41:23:61:cd:af:26:19:57:7f:5e:3f:0c:49:5e:08:1f:
         24:89:41:09:15:70:a6:a0:80:15:78:7e:56:a3:b4:1c:48:97:
         dc:a2:0f:d6:1d:50:f0:ed:13:fc:f2:69:02:90:31:3e:b4:34:
         39:65:08:ba:f6:78:d2:00:c3:32:ef:7a:04:40:65:08:8b:bd:
         a2:70:12:c4:98:47:ad:f8:95:9c:16:a4:6d:05:5f:1d:1a:66:
         03:dd:45:84:56:45:56:e5:b4:18:50:64:b0:09:38:78:1a:b1:
         42:4c:86:20:1f:74:b0:d0:4a:78:6a:bd:d6:2c:11:23:d4:f3:
         0d:6b:2c:d6:d9:e8:48:1c:39:30:94:87:d7:31:6c:02:36:ed:
         7e:de:88:cd:ec:75:1f:02:9b:8a:64:6a:59:3f:a4:31:42:e6:
         6e:3e:1b:a9:9f:d2:18:f9:5a:49:c9:b2:47:b4:1e:c1:05:0a:
         da:17:90:63:4f:a5:e5:10:58:a8:c2:04:7a:d0:a4:fa:dd:10:
         27:c3:50:7c:97:c6:07:94:25:95:44:d2:3d:8e:3d:d8:22:46:
         96:20:58:08:30:7f:81:0a:27:24:30:7a:38:ca:53:29:04:8d:
         b1:a3:c3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:26 2024 by rpki-client on console-fra.rpki-client.org