Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/34352e3136302e3138302e302f32322d3234203d3e20323638343133.roa
File:                     34352e3136302e3138302e302f32322d3234203d3e20323638343133.roa (raw, json)
Hash identifier:          Rve40BqP0Zb5eKbrlXYXZHjYx362BOVQLax5WhnObuI=
Subject key identifier:   12:67:E7:74:18:19:84:C7:A0:67:A6:D8:02:F4:BD:B7:10:B0:AA:96
Certificate issuer:       /CN=89E716714E2913BC93A153D5DC34AEF510481495
Certificate serial:       3E998008639163D7DBE0BE684904A6A0BC60E0D0
Authority key identifier: 89:E7:16:71:4E:29:13:BC:93:A1:53:D5:DC:34:AE:F5:10:48:14:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89E716714E2913BC93A153D5DC34AEF510481495.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/34352e3136302e3138302e302f32322d3234203d3e20323638343133.roa
Signing time:             Fri 03 May 2024 13:57:53 +0000
ROA not before:           Fri 03 May 2024 13:52:53 +0000
ROA not after:            Fri 02 May 2025 13:57:53 +0000
asID:                     268413
IP address blocks:        45.160.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/89E716714E2913BC93A153D5DC34AEF510481495.crl
                          rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/89E716714E2913BC93A153D5DC34AEF510481495.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89E716714E2913BC93A153D5DC34AEF510481495.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 22:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:99:80:08:63:91:63:d7:db:e0:be:68:49:04:a6:a0:bc:60:e0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89E716714E2913BC93A153D5DC34AEF510481495
        Validity
            Not Before: May  3 13:52:53 2024 GMT
            Not After : May  2 13:57:53 2025 GMT
        Subject: CN=1267E774181984C7A067A6D802F4BDB710B0AA96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d4:a8:ec:5f:16:2a:bc:d0:8e:6f:d8:65:65:
                    e5:47:8d:fd:fd:6e:6c:24:7c:ee:a3:d2:86:1d:6b:
                    43:a3:03:82:58:1a:f0:56:d6:95:f6:88:d2:90:17:
                    55:a8:25:04:48:93:ae:7b:6a:32:78:f1:be:8f:66:
                    ea:06:ee:a8:18:8f:74:2a:34:fc:f1:a4:62:b9:1b:
                    a1:3c:f2:25:01:46:f1:d8:e8:ef:47:f1:b8:bf:82:
                    d7:15:24:e0:c5:9d:0a:74:f1:33:1c:60:bd:4c:12:
                    5f:b6:18:23:bd:f1:af:d2:a7:c7:27:3a:fd:ba:54:
                    a4:54:16:d1:26:e5:66:91:72:4b:37:2c:90:55:57:
                    1c:33:19:c0:5e:a0:f4:10:9e:36:fe:3a:e6:d0:9c:
                    84:b3:d5:1e:56:03:60:54:41:99:be:3e:50:73:04:
                    0d:e3:f6:9a:0d:bb:d0:94:80:56:d8:29:1e:7b:b3:
                    94:16:51:19:29:0e:d6:f6:81:50:03:4f:28:13:e2:
                    e6:56:8b:b0:ed:1a:94:97:0b:d8:ee:e8:bf:80:a6:
                    f6:93:11:07:75:e7:5c:e8:2f:55:4a:94:9e:d4:98:
                    e9:73:85:c0:34:f7:bf:bc:7d:46:d0:67:0a:a6:ef:
                    92:fe:1a:2d:78:00:38:01:e6:0e:2d:31:d9:3e:5c:
                    9d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:67:E7:74:18:19:84:C7:A0:67:A6:D8:02:F4:BD:B7:10:B0:AA:96
            X509v3 Authority Key Identifier:
                keyid:89:E7:16:71:4E:29:13:BC:93:A1:53:D5:DC:34:AE:F5:10:48:14:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/89E716714E2913BC93A153D5DC34AEF510481495.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89E716714E2913BC93A153D5DC34AEF510481495.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/34352e3136302e3138302e302f32322d3234203d3e20323638343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:74:bd:c3:47:e2:58:53:57:6b:5c:79:f2:d2:60:8d:77:d4:
         e7:84:5b:dc:0d:a3:c8:2c:db:b1:ce:c9:6c:19:f9:11:92:62:
         03:66:dc:97:22:18:37:ea:d8:9f:8e:ec:74:2c:01:52:50:2f:
         18:87:ae:06:3c:d3:06:ef:96:04:07:a1:dc:44:c7:9b:9b:6c:
         36:fa:f6:36:db:98:75:46:a2:29:ba:1f:56:0f:16:8b:cf:9e:
         1e:52:22:7a:e8:84:15:b7:e3:6f:91:d7:ff:d3:81:97:cc:4b:
         40:c8:97:d0:96:c3:68:02:f0:7e:c7:58:0b:da:86:d6:1d:06:
         b2:b2:03:3a:6b:b6:f0:f0:35:b5:8b:65:d0:fc:e6:f5:fa:ec:
         d9:91:0c:3f:eb:23:4b:3f:73:fb:15:30:78:40:f9:be:57:b6:
         6f:af:39:88:05:7e:e9:f3:83:23:4f:be:0a:c6:6a:a2:2d:5b:
         31:2a:8a:79:e1:f0:35:a6:ba:08:1b:85:6c:99:18:ee:25:51:
         90:d3:fa:59:cf:fa:a3:78:65:9c:3c:b6:3c:67:0d:83:9e:9d:
         57:e2:54:f7:fa:43:b6:2a:ca:19:4f:68:06:29:45:2b:15:23:
         55:1a:c7:47:56:46:d8:a5:a1:e4:f1:2c:82:31:e9:85:59:38:
         26:78:d2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:12 2024 by rpki-client on console-ams.rpki-client.org