Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/34352e3136392e3130382e302f32332d3234203d3e20323638313036.roa
File:                     34352e3136392e3130382e302f32332d3234203d3e20323638313036.roa (raw, json)
Hash identifier:          a95f19Dk0nWaJ3O/sTqKXwPoZNyzkvxCvwyesqlLpUI=
Subject key identifier:   16:1C:EA:E4:FC:55:15:F5:C3:EE:93:25:52:F5:1F:20:FF:3B:38:55
Certificate issuer:       /CN=1771F2F1D3DC9A42A40D80A53EABBA062A2A1077
Certificate serial:       1A311438B3BDB68913C6ABF2C748762AD5E0ECE7
Authority key identifier: 17:71:F2:F1:D3:DC:9A:42:A4:0D:80:A5:3E:AB:BA:06:2A:2A:10:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/34352e3136392e3130382e302f32332d3234203d3e20323638313036.roa
Signing time:             Wed 03 Apr 2024 22:15:33 +0000
ROA not before:           Wed 03 Apr 2024 22:10:33 +0000
ROA not after:            Wed 02 Apr 2025 22:15:33 +0000
asID:                     268106
IP address blocks:        45.169.108.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.crl
                          rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:31:14:38:b3:bd:b6:89:13:c6:ab:f2:c7:48:76:2a:d5:e0:ec:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1771F2F1D3DC9A42A40D80A53EABBA062A2A1077
        Validity
            Not Before: Apr  3 22:10:33 2024 GMT
            Not After : Apr  2 22:15:33 2025 GMT
        Subject: CN=161CEAE4FC5515F5C3EE932552F51F20FF3B3855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:ce:10:1b:c8:d8:d4:9a:40:48:05:eb:0d:
                    3f:b2:0a:25:0b:dd:cf:9a:89:f2:da:aa:02:d0:be:
                    72:70:15:cb:6c:4c:52:40:08:ea:75:89:46:3f:a5:
                    5b:7a:85:21:de:45:9c:c4:ba:90:5f:21:bf:50:c8:
                    7e:6c:52:82:9d:6b:3e:d2:e4:fe:a4:a9:2a:3d:eb:
                    ff:6f:a4:54:9c:3a:bf:b4:2d:1d:f5:98:9b:64:fe:
                    b7:4e:ed:9f:35:96:20:7c:5a:bc:11:8e:5a:1d:5b:
                    df:7d:1d:fd:96:10:8c:3e:c9:1a:93:74:32:de:23:
                    ab:6f:a0:ec:90:d7:61:49:9d:25:8c:d1:26:41:b1:
                    cb:0e:ce:ab:6e:5b:f2:49:67:64:0e:2e:fa:af:20:
                    c6:4f:fa:8f:24:73:2c:8f:de:ec:3b:74:4e:c5:73:
                    24:c0:9a:d4:f7:9a:49:07:94:42:11:c7:c5:e0:6e:
                    3b:14:47:63:45:17:ee:5d:ba:c2:9a:e7:23:65:e9:
                    cc:12:d8:89:bf:c9:f3:22:39:ec:2f:4d:8a:06:90:
                    67:89:94:b4:dc:e4:60:4c:f6:12:d7:6c:3b:49:af:
                    4e:5b:d7:ac:9b:3a:69:67:b0:b9:e8:14:62:1a:f8:
                    6a:bb:55:ff:d2:2d:b4:c1:31:1e:5e:c3:13:bc:d7:
                    c9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1C:EA:E4:FC:55:15:F5:C3:EE:93:25:52:F5:1F:20:FF:3B:38:55
            X509v3 Authority Key Identifier:
                keyid:17:71:F2:F1:D3:DC:9A:42:A4:0D:80:A5:3E:AB:BA:06:2A:2A:10:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/34352e3136392e3130382e302f32332d3234203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:57:b7:92:0d:bd:61:4b:ab:be:23:93:9d:d9:ba:ed:d3:03:
         2f:af:aa:b8:6a:87:0d:1b:38:e9:f9:ad:a6:40:46:c5:19:48:
         df:d7:bf:71:b2:bf:82:5c:9f:89:19:0d:c0:c0:97:3e:46:1d:
         72:cc:7a:2e:20:44:18:07:ae:ce:91:2b:01:3e:51:fc:21:33:
         13:16:06:4a:c1:2a:f2:9d:66:af:8c:ae:5e:9d:2e:96:2f:9c:
         3a:fc:8e:a8:3f:ba:8c:49:e1:b8:12:fc:79:3b:d9:da:a5:50:
         2b:52:25:f3:f4:2c:34:b8:d3:8e:ac:5d:15:b1:d8:33:eb:1f:
         9c:e6:7e:33:de:f3:4e:69:8b:7a:a4:40:e4:13:69:4f:23:aa:
         4c:f0:6b:98:33:2e:66:6c:e8:84:38:b0:ea:d3:33:80:e7:e1:
         7f:91:a6:3e:e1:59:47:8c:b0:25:2b:cd:c3:67:92:d6:06:e3:
         6d:7e:e0:4a:7f:08:aa:11:02:d4:35:16:5f:ae:f7:ee:62:a4:
         7e:82:b4:99:ff:b6:ce:98:d3:38:9f:53:4c:f5:0e:0f:97:82:
         9e:8f:e1:b2:7c:d8:23:e6:25:01:a4:01:85:24:d5:cc:d1:1c:
         42:7f:0b:fe:3a:35:f6:ce:33:fb:83:d7:8e:4a:15:0d:8b:57:
         51:0b:96:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org