Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/34352e3138302e31362e302f32322d3234203d3e20323731323533.roa
File:                     34352e3138302e31362e302f32322d3234203d3e20323731323533.roa (raw, json)
Hash identifier:          o6NfLUXcVtphcRiRaKJq4WeBwV4ug+mFbCOAran+nXM=
Subject key identifier:   33:6E:6E:B5:F6:A7:75:A0:C2:C2:A2:B6:3F:7A:FE:8E:85:BB:C7:86
Certificate issuer:       /CN=16F623F7E404FC45279199F873CB67B24D28DD2E
Certificate serial:       75A73BDD25565852056CF331B71D53C37B1F737B
Authority key identifier: 16:F6:23:F7:E4:04:FC:45:27:91:99:F8:73:CB:67:B2:4D:28:DD:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/34352e3138302e31362e302f32322d3234203d3e20323731323533.roa
Signing time:             Thu 11 Jul 2024 17:48:04 +0000
ROA not before:           Thu 11 Jul 2024 17:43:04 +0000
ROA not after:            Thu 10 Jul 2025 17:48:04 +0000
asID:                     271253
IP address blocks:        45.180.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a7:3b:dd:25:56:58:52:05:6c:f3:31:b7:1d:53:c3:7b:1f:73:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F623F7E404FC45279199F873CB67B24D28DD2E
        Validity
            Not Before: Jul 11 17:43:04 2024 GMT
            Not After : Jul 10 17:48:04 2025 GMT
        Subject: CN=336E6EB5F6A775A0C2C2A2B63F7AFE8E85BBC786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:a5:d8:a6:65:12:35:9f:0a:81:31:30:6b:
                    a5:90:fb:84:a6:a4:ae:2a:13:ba:3c:10:3f:90:74:
                    3f:ef:5b:1c:9a:fe:50:80:c3:ee:32:06:db:ab:3a:
                    52:5b:53:23:10:07:12:83:42:00:c4:4c:c5:72:2c:
                    02:44:af:6a:9b:02:02:da:4f:1d:1b:96:6f:c2:bb:
                    b4:5f:3e:2d:3c:22:e7:b8:31:77:66:11:12:5e:7f:
                    f1:4e:c1:74:45:38:ea:6f:37:85:b3:af:4c:8f:f7:
                    f8:bb:86:16:21:d1:cb:23:6e:bc:e8:c4:07:e1:05:
                    ba:e2:ae:48:bc:03:18:6d:47:b5:d1:19:d1:35:6f:
                    de:ef:62:74:8a:c4:23:a7:0b:17:9e:95:df:1e:48:
                    be:d2:f1:df:57:ec:34:4f:a0:2c:a6:55:fb:33:03:
                    b0:e2:a7:64:22:a2:e9:49:a1:cc:ac:c5:70:0a:d3:
                    77:29:8c:7c:bc:a9:4b:b9:52:fb:54:4c:6e:da:78:
                    67:27:1e:cc:6f:17:cf:56:e9:22:d1:e3:a1:3b:9d:
                    8b:86:a6:c7:08:4c:35:dc:40:9e:93:a4:47:70:8c:
                    c3:b5:c5:bf:82:f0:cf:49:fd:cc:32:43:47:c0:ae:
                    b4:92:ca:71:c2:68:9d:91:11:31:2e:98:6c:e5:47:
                    d0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6E:6E:B5:F6:A7:75:A0:C2:C2:A2:B6:3F:7A:FE:8E:85:BB:C7:86
            X509v3 Authority Key Identifier:
                keyid:16:F6:23:F7:E4:04:FC:45:27:91:99:F8:73:CB:67:B2:4D:28:DD:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/34352e3138302e31362e302f32322d3234203d3e20323731323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:2f:e7:7c:74:e4:e3:59:65:e0:e2:b1:49:f1:7d:0f:b6:95:
         2c:b3:a9:4f:2e:89:cf:c0:ce:a0:ae:d7:20:a7:3a:3b:ea:9c:
         d6:5b:2b:83:4d:0c:60:00:90:ff:80:e7:45:8d:9c:7c:51:0c:
         54:e3:c4:4a:52:db:46:0e:7b:1a:9a:a4:53:6c:a3:1a:be:ff:
         fc:f4:59:ff:90:94:16:1d:d4:1f:c1:2d:cd:a0:53:cb:69:b0:
         16:d4:aa:78:ad:a9:70:4f:a9:5d:15:2b:cf:83:9b:ec:7c:3e:
         0d:09:10:16:74:1d:ed:f8:24:ef:92:57:c5:96:56:ae:37:23:
         a9:1a:ed:f5:e7:76:7a:df:98:4c:e3:f1:d9:08:c1:07:e9:7e:
         a2:08:02:3e:e5:80:b7:48:bc:74:6a:25:08:05:43:1e:d4:b7:
         8b:7a:3b:26:27:ba:3c:ae:d8:d6:90:08:2b:36:ff:f3:0f:a6:
         47:eb:e1:40:2d:41:be:b8:f4:ac:f8:79:93:01:62:3e:ff:3c:
         ce:6e:0f:84:11:ab:65:a9:08:cb:bb:22:28:dc:50:d6:8f:aa:
         32:a0:c6:29:70:68:de:23:6d:ef:d5:af:6f:11:e2:38:3b:5c:
         7b:01:83:5b:54:6a:4c:82:1b:db:0f:1a:c6:35:0b:4e:96:e7:
         b8:e8:71:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:22 2024 by rpki-client on console-fra.rpki-client.org