Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/34352e3136352e39302e302f32342d3234203d3e20323634343739.roa
File:                     34352e3136352e39302e302f32342d3234203d3e20323634343739.roa (raw, json)
Hash identifier:          69UQo1I9fcd4K6NRx1Y/C+RaoH79MabBssuik6k+S60=
Subject key identifier:   2A:80:50:1D:1A:C7:8A:0A:5F:06:1B:97:54:D1:93:98:23:D9:1D:F9
Certificate issuer:       /CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
Certificate serial:       5F442EBB8EF4108ABD7F59FD43F39F4AE366B6B9
Authority key identifier: 16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/34352e3136352e39302e302f32342d3234203d3e20323634343739.roa
Signing time:             Thu 04 Apr 2024 18:26:00 +0000
ROA not before:           Thu 04 Apr 2024 18:21:00 +0000
ROA not after:            Thu 03 Apr 2025 18:26:00 +0000
asID:                     264479
IP address blocks:        45.165.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:44:2e:bb:8e:f4:10:8a:bd:7f:59:fd:43:f3:9f:4a:e3:66:b6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
        Validity
            Not Before: Apr  4 18:21:00 2024 GMT
            Not After : Apr  3 18:26:00 2025 GMT
        Subject: CN=2A80501D1AC78A0A5F061B9754D1939823D91DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:da:e5:fc:57:7a:c1:a0:7a:e4:1d:5c:64:ea:
                    a9:11:cd:a1:82:d4:01:ea:77:84:4e:94:19:18:a0:
                    5d:21:1c:20:b9:15:fe:98:d0:65:68:c9:be:de:90:
                    7a:ac:4d:47:2b:99:f6:57:a0:32:a0:1f:53:61:a3:
                    98:3d:62:75:46:80:90:9c:76:de:6c:34:01:ae:58:
                    47:1c:61:76:ff:96:2e:91:ea:df:3d:9f:08:4d:52:
                    f6:d2:2b:1d:fb:b7:8d:cf:56:7b:61:3a:d2:ff:a3:
                    82:44:24:a1:ff:e5:12:a8:b6:3e:fe:cf:73:3e:8e:
                    33:4b:59:21:f2:e9:72:01:c4:80:23:5b:fb:29:69:
                    0d:de:c3:a1:26:ad:d9:cb:e2:77:52:d3:95:69:a5:
                    13:e2:e4:a3:9a:4f:0c:33:14:04:00:8d:c7:10:dd:
                    1c:55:02:8c:6c:40:ea:b4:b4:75:ee:84:28:7a:dd:
                    e6:61:75:82:68:db:1b:2b:22:74:34:71:9e:f2:f5:
                    fd:25:65:5e:2f:cd:2c:f3:b8:66:cf:c7:a4:cc:a0:
                    a4:7b:c8:f1:ec:9d:be:19:e1:62:27:d9:37:03:fc:
                    8b:76:3e:3f:43:ac:11:75:23:54:5a:d3:9c:51:4a:
                    87:6b:94:b1:52:48:71:b0:80:88:d8:17:b3:4f:61:
                    38:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:80:50:1D:1A:C7:8A:0A:5F:06:1B:97:54:D1:93:98:23:D9:1D:F9
            X509v3 Authority Key Identifier:
                keyid:16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/34352e3136352e39302e302f32342d3234203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:32:58:5f:5f:43:69:95:64:c0:59:ce:90:7e:f5:b1:97:2c:
         bd:53:c9:d6:3a:a1:af:69:96:60:72:06:a5:d1:22:c5:ae:70:
         95:17:a5:de:67:2d:36:1b:cc:07:bb:78:0e:20:09:94:b0:93:
         62:94:48:3f:45:b7:c8:91:30:97:6a:b6:c0:ee:a3:14:45:d0:
         58:a4:bd:06:13:b6:75:2f:59:44:7d:0f:c8:3b:63:aa:09:7d:
         cf:69:43:7a:80:1a:4b:24:2f:ab:e4:5e:b0:d4:0e:62:c9:cc:
         62:ec:a4:cb:e4:5d:4d:24:b0:2d:61:3c:23:a2:44:7a:48:97:
         f5:de:4b:e2:d7:2a:5a:a1:bf:09:6e:16:eb:f2:ac:85:ec:99:
         0a:84:44:2e:f1:5c:f0:8f:70:7b:24:94:e0:51:38:2c:70:f3:
         8b:40:0e:41:54:7c:0d:fb:c3:d0:4e:cb:7e:83:ee:9f:9d:93:
         3e:df:04:59:98:39:81:47:91:da:d1:e5:4c:0f:2b:19:6e:55:
         51:c3:fd:d4:77:1e:9c:44:f7:74:9b:41:0a:e9:b2:b4:fe:1a:
         f2:bd:e9:90:8a:0c:f6:ec:39:80:a0:e7:12:d2:96:4c:35:b2:
         a6:6b:87:f9:91:d5:4f:a6:a5:5d:1b:8e:fe:d4:0d:c9:ff:e6:
         6b:cf:4d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:13 2024 by rpki-client on console-fra.rpki-client.org