Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/34352e3137352e38302e302f32322d3234203d3e203533303830.roa
File:                     34352e3137352e38302e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier:          tE8zBHTeGXG4Wte0bfu0Zs6wawG/ODOfSfbrY9xuVlk=
Subject key identifier:   D9:43:74:2F:BA:95:08:5B:AD:B9:7D:C0:A1:99:53:8B:4B:08:F2:88
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       36C8D61424819C0BE947F9F9974D14AB11C50D5C
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/34352e3137352e38302e302f32322d3234203d3e203533303830.roa
Signing time:             Mon 25 Nov 2024 17:03:51 +0000
ROA not before:           Mon 25 Nov 2024 16:58:51 +0000
ROA not after:            Mon 24 Nov 2025 17:03:51 +0000
asID:                     53080
IP address blocks:        45.175.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c8:d6:14:24:81:9c:0b:e9:47:f9:f9:97:4d:14:ab:11:c5:0d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:58:51 2024 GMT
            Not After : Nov 24 17:03:51 2025 GMT
        Subject: CN=D943742FBA95085BADB97DC0A199538B4B08F288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0c:c6:c0:a5:56:b7:90:64:d1:7f:45:46:0f:
                    c7:8a:2f:01:22:c3:17:43:de:66:63:76:56:ff:50:
                    75:d9:b3:6c:f0:3a:eb:3c:09:24:2d:9f:f7:84:0a:
                    dd:6a:ea:db:df:50:c4:80:8c:d1:08:4e:9e:df:50:
                    1a:bd:25:ac:20:f7:93:b3:e9:7a:3a:a5:d9:13:70:
                    6b:07:d7:87:bd:59:fc:89:96:5c:34:66:ba:b9:2c:
                    85:7c:cb:f1:4e:52:d9:18:37:6e:2f:c2:60:56:68:
                    34:d4:0a:72:a8:ab:0f:1c:38:04:40:ad:ef:5e:c7:
                    ce:6e:e1:01:27:dd:cd:f8:27:8a:90:7d:38:8c:88:
                    99:be:c5:a6:9b:de:b3:99:15:6c:ff:f8:ac:77:b7:
                    e4:e1:72:21:5b:95:fa:4a:2b:b8:39:18:a5:f1:b4:
                    b1:2c:07:15:35:46:87:99:fc:a1:5d:90:53:09:68:
                    5f:10:8e:50:95:1e:42:e0:44:b7:5a:bc:9c:90:ca:
                    46:e6:c3:06:06:71:0e:f3:19:5e:f0:67:9f:6c:75:
                    35:0b:f8:c9:d2:42:44:1d:4a:f8:73:36:0f:8d:2a:
                    a6:52:2c:ae:79:70:0c:a4:7f:18:c4:8e:ef:29:0c:
                    e4:37:b7:d1:38:db:fb:40:ed:4c:19:f0:53:21:a1:
                    93:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:43:74:2F:BA:95:08:5B:AD:B9:7D:C0:A1:99:53:8B:4B:08:F2:88
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/34352e3137352e38302e302f32322d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:54:cf:c6:96:99:97:72:8e:86:b5:e2:f9:01:a9:5f:77:74:
         06:18:4a:8a:95:73:86:4f:a9:dd:dc:da:a6:5e:30:ff:07:57:
         87:a1:0e:e4:f3:a4:a6:3c:4f:3f:f5:d0:a1:4d:e8:77:ef:a3:
         2d:49:0f:bf:66:96:c0:ff:87:dc:47:fb:e9:c9:0b:09:47:b1:
         d9:36:fb:d3:c4:d5:66:30:87:a9:87:20:dd:8b:e0:9b:33:a2:
         19:e3:9d:e8:ce:24:97:53:9e:21:e6:0c:17:d6:7e:39:d9:28:
         30:14:d8:b7:f0:48:6f:c8:30:04:e6:2f:b5:2d:d8:51:12:6b:
         7e:b8:27:6d:23:7c:66:a2:9c:73:3a:e9:26:9d:af:d1:0c:7a:
         55:0d:08:cb:75:da:98:cb:24:1c:9e:d3:a4:9c:75:3d:ff:98:
         6a:c3:06:51:20:48:aa:66:92:54:37:47:d0:98:e4:fc:16:72:
         8b:ec:b4:c6:74:e1:2e:ac:b0:2d:3e:c9:8c:86:95:25:5b:8f:
         fd:12:b5:72:d2:33:b0:c9:6d:0a:a4:13:09:42:f1:7f:27:40:
         d8:56:ae:fa:ad:0b:c4:27:73:ef:55:43:8c:2d:80:e1:08:70:
         15:17:52:9b:a2:45:27:6c:43:d0:96:44:c5:08:15:21:db:48:
         c6:17:d5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org