Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135342e302f32332d3233203d3e20323633333437.roa
File:                     34352e3136322e3135342e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          KkLd0PumWKD3uWfgCHT6+/92T6d4BZfHu9wEI2+Z3uI=
Subject key identifier:   4B:5C:31:2D:B8:E8:16:2F:4D:F6:18:46:25:79:AE:57:3B:99:FB:C1
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       301925A62F6FAF85CE02030EEDEB2278F801AE54
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135342e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 04 Apr 2024 17:40:28 +0000
ROA not before:           Thu 04 Apr 2024 17:35:28 +0000
ROA not after:            Thu 03 Apr 2025 17:40:28 +0000
asID:                     263347
IP address blocks:        45.162.154.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:19:25:a6:2f:6f:af:85:ce:02:03:0e:ed:eb:22:78:f8:01:ae:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Apr  4 17:35:28 2024 GMT
            Not After : Apr  3 17:40:28 2025 GMT
        Subject: CN=4B5C312DB8E8162F4DF618462579AE573B99FBC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d0:f1:4b:b5:01:76:f1:cf:3d:24:ed:2e:42:
                    9a:c5:f4:a4:35:1f:c2:f3:bd:12:08:ae:f7:4c:f3:
                    eb:e9:ec:27:46:9d:67:b7:7c:21:48:0e:c6:db:3f:
                    f2:f4:b9:62:ff:39:06:ec:bd:1f:9c:6c:5b:da:bc:
                    95:1f:44:bc:7d:c3:1e:e3:26:53:cb:4a:2c:02:21:
                    a2:01:03:b1:4e:c3:55:fe:56:73:e9:df:e3:e6:7b:
                    3f:91:72:e5:74:19:c9:1b:67:d7:24:25:c3:e1:05:
                    36:73:f7:30:a7:1c:d4:17:01:95:12:b9:0c:d1:55:
                    e6:c7:3e:73:e0:ba:c1:f6:21:0d:0d:f2:06:68:19:
                    f0:ee:b9:41:28:2a:70:3d:1f:dc:80:cf:bb:ba:67:
                    1a:b2:84:c5:a7:1c:c4:9d:f6:82:6b:8e:d3:c7:19:
                    d4:ed:aa:4c:58:1d:3e:57:5b:e4:37:c9:ff:09:07:
                    22:57:c3:09:6a:0e:85:8f:2f:ea:22:46:c1:f4:75:
                    41:08:39:a0:fb:bc:70:ac:a8:35:b2:57:32:4c:96:
                    c4:a7:05:95:53:8e:b9:74:93:cd:4d:cd:e4:33:41:
                    09:4d:2b:30:6d:5c:ab:7f:8e:08:a3:fb:d3:e1:6a:
                    db:b2:0a:fc:e7:7a:b6:37:82:fb:aa:d5:44:33:ff:
                    28:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5C:31:2D:B8:E8:16:2F:4D:F6:18:46:25:79:AE:57:3B:99:FB:C1
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135342e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:62:f6:74:9e:60:38:86:23:fc:4e:d9:54:dd:de:cc:7c:f4:
         91:22:4b:cd:3b:27:6b:68:67:90:74:54:c5:25:06:ba:e5:b9:
         03:19:80:bd:65:2c:a8:03:95:8e:f9:26:8b:46:c2:7f:2c:23:
         25:5f:7a:91:15:37:53:c5:ff:60:b6:5a:23:44:86:8f:1e:1b:
         0e:83:e9:10:26:0c:40:e5:43:e1:c1:8b:87:8c:3e:64:0d:fa:
         cf:df:db:72:5f:27:db:36:51:23:1e:3d:7b:15:33:47:86:37:
         61:25:48:a4:5e:97:59:f0:9d:38:d5:0f:0c:8e:ea:86:e2:20:
         11:dd:cd:1f:ce:e2:9c:10:b7:4e:65:ef:a9:75:f3:06:54:54:
         2c:86:b7:dc:f1:96:93:2d:3e:14:8a:00:2f:f4:bc:b8:37:e7:
         c5:45:7b:4d:b6:51:10:98:af:48:6c:43:2f:7f:12:f9:f4:83:
         ac:e7:46:b5:f3:6e:8c:3b:cd:5d:a2:54:24:43:da:46:7e:d4:
         94:de:79:bb:80:bf:45:ce:4a:81:de:aa:c0:d5:6f:0d:4d:18:
         2c:b5:29:a2:85:7a:02:79:9d:6d:36:10:4c:ee:ab:10:74:a6:
         14:96:6a:65:9e:9c:8c:be:5b:79:56:82:87:ef:17:4d:4e:0b:
         a6:5d:38:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org