Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32342d3234203d3e20323633333437.roa
File:                     34352e3136322e3135322e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          sml+i2AlemXZw3jXA/JXA7wlIdNl8AAddrG1Yf8E9h0=
Subject key identifier:   E7:A1:A7:77:32:37:7D:C4:FB:11:9D:D5:38:F2:AF:4D:AA:A1:8B:D1
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       5549D54A29238837E06D76E0B69C071B682AEA4D
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32342d3234203d3e20323633333437.roa
Signing time:             Sat 09 Nov 2024 13:49:23 +0000
ROA not before:           Sat 09 Nov 2024 13:44:23 +0000
ROA not after:            Sat 08 Nov 2025 13:49:23 +0000
asID:                     263347
IP address blocks:        45.162.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:49:d5:4a:29:23:88:37:e0:6d:76:e0:b6:9c:07:1b:68:2a:ea:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  9 13:44:23 2024 GMT
            Not After : Nov  8 13:49:23 2025 GMT
        Subject: CN=E7A1A77732377DC4FB119DD538F2AF4DAAA18BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:93:13:09:d9:22:7c:07:e5:09:3c:9a:d0:37:
                    85:1a:53:54:44:db:87:79:8f:32:1a:84:63:14:c9:
                    29:cf:6c:33:e0:76:e1:6c:d5:21:bb:9e:20:71:92:
                    f7:11:4e:23:92:f9:a9:03:80:45:e7:de:ce:fd:6f:
                    43:0d:8d:db:c4:d5:ab:da:ff:a1:02:27:c2:b5:76:
                    94:c8:c5:65:17:42:97:88:ea:29:5b:d8:d9:bc:63:
                    0e:97:a6:74:39:7a:bc:b8:02:39:83:be:6f:61:2d:
                    a1:02:b3:bf:18:8c:33:62:e6:d5:ed:18:12:4f:dd:
                    27:16:58:94:53:f0:28:4c:b2:da:3f:ee:4d:74:c8:
                    30:41:bd:25:9a:e3:ea:3a:84:ba:55:94:ef:20:2f:
                    6b:37:21:6a:eb:52:24:9f:2f:56:32:85:3b:54:78:
                    ae:87:c3:be:85:d8:6f:24:fb:e9:b4:28:c0:e7:9e:
                    25:2e:7a:e2:01:16:98:c5:02:d6:75:49:6d:54:28:
                    d5:76:6d:5a:89:29:00:0b:8f:dd:34:8f:6b:da:84:
                    d6:7b:dd:1f:fd:1b:c1:25:e3:33:f9:cd:f4:7f:d1:
                    49:c5:14:ae:b0:5a:3d:d9:17:2b:86:b9:8e:fc:01:
                    90:50:8e:0b:05:5d:dc:a7:a6:8a:7f:fb:cc:1a:04:
                    6d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A1:A7:77:32:37:7D:C4:FB:11:9D:D5:38:F2:AF:4D:AA:A1:8B:D1
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:4f:c2:d5:2b:26:b5:b6:ff:9c:cf:d9:a2:ac:90:75:1b:a3:
         28:3e:4d:30:f4:28:66:f6:ae:58:ba:91:b7:17:74:4c:cf:06:
         5d:40:fc:f8:6b:66:ea:3e:7f:c9:41:2b:8d:69:64:22:af:74:
         3d:d1:47:ee:e0:fb:21:7f:9a:7c:e3:c4:6d:bc:9b:fb:fe:db:
         96:3f:58:08:5c:ae:e6:73:ac:72:58:02:54:7d:54:08:4f:bc:
         f9:d1:72:32:f5:39:2a:99:c3:69:75:87:61:f8:06:bd:b5:c7:
         c9:c7:e7:03:6c:a2:5e:19:22:f0:dc:45:0c:2f:bb:b4:83:7d:
         32:70:b6:19:66:ff:43:f9:16:ec:e8:68:00:50:c4:07:46:59:
         13:10:77:54:57:a8:03:f1:92:1c:e1:f6:bd:e9:cd:ad:7b:af:
         21:8a:c8:c9:14:b6:34:45:4e:30:c0:af:75:cd:3d:10:20:ea:
         b8:6f:0c:fe:b1:e3:dc:cf:64:31:46:4e:5e:f2:10:2e:93:bb:
         c6:31:89:02:32:10:bd:f1:d5:c5:eb:13:aa:bd:22:15:be:60:
         62:bb:8c:82:ce:29:c4:4e:32:58:fd:7e:a4:b1:04:23:e9:f1:
         67:58:41:7a:79:99:fa:6b:dd:cb:1f:95:77:95:97:19:da:9b:
         c3:6c:5b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:26 2024 by rpki-client on console-fra.rpki-client.org