Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/34352e3136302e3231362e302f32342d3332203d3e203631353934.roa
File:                     34352e3136302e3231362e302f32342d3332203d3e203631353934.roa (raw, json)
Hash identifier:          2dxdeckebN6RaU0sA8czVtqWKlT9oJyFrVSkobi0+P4=
Subject key identifier:   D8:40:D5:F3:A9:C7:41:FD:E9:72:F9:36:E6:CC:11:27:6C:FF:C1:34
Certificate issuer:       /CN=8F22D0F09007A0AB362AFC115EFAF686F131E2E3
Certificate serial:       164E943E5B60C8986CB7BE328CC0EB535ACA87C7
Authority key identifier: 8F:22:D0:F0:90:07:A0:AB:36:2A:FC:11:5E:FA:F6:86:F1:31:E2:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/34352e3136302e3231362e302f32342d3332203d3e203631353934.roa
Signing time:             Thu 04 Apr 2024 01:48:24 +0000
ROA not before:           Thu 04 Apr 2024 01:43:24 +0000
ROA not after:            Thu 03 Apr 2025 01:48:24 +0000
asID:                     61594
IP address blocks:        45.160.216.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.crl
                          rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4e:94:3e:5b:60:c8:98:6c:b7:be:32:8c:c0:eb:53:5a:ca:87:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F22D0F09007A0AB362AFC115EFAF686F131E2E3
        Validity
            Not Before: Apr  4 01:43:24 2024 GMT
            Not After : Apr  3 01:48:24 2025 GMT
        Subject: CN=D840D5F3A9C741FDE972F936E6CC11276CFFC134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e9:19:86:de:0f:af:84:98:05:36:69:5f:d2:
                    7c:7c:fe:7e:bc:db:2d:40:69:f6:51:c5:0c:0c:cd:
                    5c:ff:0f:7c:93:e3:2f:e3:b2:1c:9a:98:45:2f:d1:
                    06:16:90:9e:c4:c9:9c:0c:98:76:8e:52:06:4b:e4:
                    83:24:16:b8:e7:3e:ab:a5:36:c8:6b:fc:2f:7b:3b:
                    6e:e5:66:bb:83:76:ba:57:3e:08:83:ff:96:1e:fe:
                    f3:1e:8f:a7:7e:c9:de:e2:10:32:ee:1c:57:41:cd:
                    19:9b:19:07:f5:b3:ad:7e:08:f5:08:b7:58:63:ef:
                    c5:38:ee:ac:37:16:2a:a0:48:5b:bc:80:09:53:38:
                    7a:1d:ce:9e:d7:94:54:32:74:6f:5d:7b:ce:55:2f:
                    67:8b:ca:6c:9d:4c:91:f6:84:2e:11:8d:11:83:18:
                    4d:fd:32:02:ef:59:a2:71:56:9c:30:d9:5d:82:e1:
                    0a:23:29:aa:c1:d9:e6:3e:f5:a6:e2:d2:5c:dc:5c:
                    e1:b6:21:9a:1e:b7:16:5c:66:5c:8c:06:0b:03:2e:
                    f4:15:a2:91:7e:9b:7e:3c:e5:ea:4c:90:8c:a4:8a:
                    6e:7e:5b:01:5e:54:b8:7b:7e:60:fe:71:62:b1:72:
                    fe:0c:02:98:10:76:72:7f:57:eb:8d:ec:56:ed:58:
                    8c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:40:D5:F3:A9:C7:41:FD:E9:72:F9:36:E6:CC:11:27:6C:FF:C1:34
            X509v3 Authority Key Identifier:
                keyid:8F:22:D0:F0:90:07:A0:AB:36:2A:FC:11:5E:FA:F6:86:F1:31:E2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/34352e3136302e3231362e302f32342d3332203d3e203631353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:53:5c:28:35:52:46:89:8a:d5:ca:1f:10:69:63:79:a0:af:
         e1:b6:a1:d2:55:61:b4:df:21:9f:ff:30:68:87:4c:35:de:2c:
         68:4c:13:4b:9a:0e:df:0c:32:53:75:c0:cd:10:62:18:9b:84:
         ae:55:fa:c1:65:f4:00:af:d6:ce:82:94:0f:0b:22:ec:a7:a5:
         92:39:40:91:18:f7:29:d9:89:9d:e6:6e:94:ca:7d:63:7c:39:
         05:ed:c2:b3:df:2f:d8:4e:79:87:e3:b9:da:1c:ff:f7:e1:d1:
         cc:8c:05:9a:02:6e:3c:54:5c:70:ae:36:1c:86:40:86:09:99:
         13:6d:9a:67:5c:77:74:ea:9c:b5:dd:9e:8d:4a:0c:36:34:e8:
         fe:62:c5:dc:65:6b:ad:62:dd:6d:3a:fb:bf:b6:85:dd:fe:ef:
         fc:14:62:75:36:52:ff:64:29:65:ec:65:c3:43:03:b9:c9:59:
         ef:22:48:8b:ce:8d:da:c5:1d:f5:39:32:cd:cb:a6:b2:b6:05:
         22:5e:20:cc:ca:6e:84:7a:ba:0a:ac:da:37:16:1b:1f:b2:e0:
         20:8e:c0:79:ae:cd:63:ee:31:ff:21:a0:b6:0a:d7:25:8e:b2:
         ff:44:d1:8b:86:38:f9:6c:94:ef:11:86:e7:3b:ae:7b:6f:1c:
         66:51:32:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:03 2024 by rpki-client on console-fra.rpki-client.org