Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/34352e352e3135362e302f32322d3332203d3e20323636313134.roa
File:                     34352e352e3135362e302f32322d3332203d3e20323636313134.roa (raw, json)
Hash identifier:          uwcl5s2Hhe/0Y1nsYUTuIDI5jD0RdigAitRA5N0etyM=
Subject key identifier:   D0:CA:28:4B:5E:78:B9:FA:B1:90:7D:CA:8F:A7:54:5B:FE:B2:06:41
Certificate issuer:       /CN=0F51DA084EA152AC0D23405E731E3D22F4386AC4
Certificate serial:       161D45E4ECA54A55293811438E8D827C3E6BF3F2
Authority key identifier: 0F:51:DA:08:4E:A1:52:AC:0D:23:40:5E:73:1E:3D:22:F4:38:6A:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F51DA084EA152AC0D23405E731E3D22F4386AC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/34352e352e3135362e302f32322d3332203d3e20323636313134.roa
Signing time:             Fri 25 Oct 2024 20:35:38 +0000
ROA not before:           Fri 25 Oct 2024 20:30:38 +0000
ROA not after:            Fri 24 Oct 2025 20:35:38 +0000
asID:                     266114
IP address blocks:        45.5.156.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/0F51DA084EA152AC0D23405E731E3D22F4386AC4.crl
                          rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/0F51DA084EA152AC0D23405E731E3D22F4386AC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F51DA084EA152AC0D23405E731E3D22F4386AC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1d:45:e4:ec:a5:4a:55:29:38:11:43:8e:8d:82:7c:3e:6b:f3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F51DA084EA152AC0D23405E731E3D22F4386AC4
        Validity
            Not Before: Oct 25 20:30:38 2024 GMT
            Not After : Oct 24 20:35:38 2025 GMT
        Subject: CN=D0CA284B5E78B9FAB1907DCA8FA7545BFEB20641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:9b:60:9a:d1:c0:17:56:41:fb:77:05:ff:
                    87:b9:89:b0:27:46:e5:78:c8:76:6b:43:56:71:a4:
                    0b:94:f8:5a:3e:58:62:de:59:8b:df:ea:72:5c:a4:
                    32:75:f5:62:ae:16:a7:94:f3:77:48:3b:fa:2e:c6:
                    c2:2c:c4:03:d5:47:b1:53:cd:d9:69:af:29:bf:4c:
                    0b:d6:53:2b:5b:64:17:ba:99:b6:12:b5:b2:c9:e3:
                    26:d5:cc:4e:10:27:db:82:8f:a7:6e:e5:ca:b5:0b:
                    17:ec:de:7e:43:22:f1:50:4a:f6:cb:9f:b9:94:49:
                    3d:3e:62:44:28:56:6a:1a:b4:44:b1:d5:9d:ce:04:
                    37:66:94:5f:0d:bd:7b:aa:de:a0:78:7a:4f:6e:d6:
                    8d:fe:23:3a:4d:25:21:67:9c:f4:4c:49:1a:d5:e0:
                    fa:e1:80:28:29:15:28:dd:1c:33:34:91:28:17:89:
                    1c:e7:ee:fe:c7:6f:6c:29:c1:bc:a3:e1:57:5c:08:
                    fc:f0:6e:b0:a7:ba:50:74:ff:89:56:1b:27:d0:26:
                    cb:00:97:13:30:3a:ba:6e:9a:6b:a0:4e:2a:d9:e6:
                    1c:ad:4b:02:03:bc:1f:81:52:24:24:fc:70:83:ec:
                    46:ca:b2:c3:6d:5b:76:f9:26:40:0f:88:f2:4f:27:
                    de:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CA:28:4B:5E:78:B9:FA:B1:90:7D:CA:8F:A7:54:5B:FE:B2:06:41
            X509v3 Authority Key Identifier:
                keyid:0F:51:DA:08:4E:A1:52:AC:0D:23:40:5E:73:1E:3D:22:F4:38:6A:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/0F51DA084EA152AC0D23405E731E3D22F4386AC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F51DA084EA152AC0D23405E731E3D22F4386AC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/34352e352e3135362e302f32322d3332203d3e20323636313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:61:3a:e4:65:70:40:27:19:45:bb:2f:17:a0:85:23:2b:bf:
         cb:87:8b:d5:48:9a:e6:34:e1:dc:f8:28:45:c8:98:d9:27:95:
         ec:5b:29:ab:fe:4a:30:54:5e:c6:0c:ee:3e:a1:be:e9:4b:bb:
         4e:44:7c:ea:65:b6:c0:b8:07:b5:f6:ca:1d:2b:f1:fc:28:80:
         d6:b7:09:3a:42:6e:a2:24:d7:df:d1:c3:1b:bc:a7:31:06:07:
         e0:09:3d:76:15:c2:ee:32:43:d3:3d:7c:6f:36:3e:21:2c:fe:
         a7:eb:42:71:a0:e6:60:59:18:8a:59:94:50:14:aa:7c:2a:a9:
         7f:e0:a8:06:00:cb:3c:01:fb:93:c0:59:43:f8:66:0b:d0:d9:
         a0:db:77:44:6b:27:fb:63:49:ee:5c:ca:54:ff:28:3c:d0:02:
         99:ed:f5:00:b4:46:f5:45:aa:3b:36:10:fa:82:7d:ac:59:e6:
         1a:00:95:c6:9d:9f:7c:75:34:90:31:0b:b7:2c:b4:0e:ee:f3:
         61:1c:ca:00:fa:9c:75:71:6e:a9:87:cc:59:86:61:03:ed:25:
         e0:a3:49:b8:eb:d6:93:a0:c7:d1:48:08:95:f0:5a:2c:bd:6d:
         51:4a:83:ab:86:98:a5:9e:00:f4:4c:f3:dc:2f:0a:c8:19:6a:
         83:c5:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:57 2024 by rpki-client on console-ams.rpki-client.org