Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/34352e3136352e39312e302f32342d3234203d3e20323634343739.roa
File:                     34352e3136352e39312e302f32342d3234203d3e20323634343739.roa (raw, json)
Hash identifier:          237IxMyneF/492F6sEOoQTNBkwaV7IB6VT7c94ZiK1s=
Subject key identifier:   50:ED:A0:68:A8:AD:91:8D:9A:00:3B:4B:E2:71:12:2F:03:C9:91:74
Certificate issuer:       /CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
Certificate serial:       299FAF89F8E6630CC809AF77367C19E4742B9175
Authority key identifier: 16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/34352e3136352e39312e302f32342d3234203d3e20323634343739.roa
Signing time:             Thu 04 Apr 2024 18:26:03 +0000
ROA not before:           Thu 04 Apr 2024 18:21:03 +0000
ROA not after:            Thu 03 Apr 2025 18:26:03 +0000
asID:                     264479
IP address blocks:        45.165.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9f:af:89:f8:e6:63:0c:c8:09:af:77:36:7c:19:e4:74:2b:91:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
        Validity
            Not Before: Apr  4 18:21:03 2024 GMT
            Not After : Apr  3 18:26:03 2025 GMT
        Subject: CN=50EDA068A8AD918D9A003B4BE271122F03C99174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c4:77:e9:7f:4a:97:6a:4d:94:b6:4c:cd:05:
                    ba:c4:03:91:fc:29:11:16:db:94:cb:95:49:eb:ee:
                    35:31:9a:94:d5:44:a3:9c:ef:80:ee:23:4a:17:b9:
                    50:6e:46:c6:ba:fa:64:16:4f:49:37:27:d6:76:1b:
                    a2:05:cc:85:6f:cd:8a:36:98:ed:d0:cb:d0:56:bf:
                    81:ec:3f:ba:db:40:cb:e6:44:1e:6b:2e:4c:0f:f3:
                    38:48:2d:61:04:3a:3c:3b:c9:f0:cc:d9:f8:90:b4:
                    f2:02:69:48:5b:f6:15:e6:44:58:c0:74:42:11:4b:
                    6e:bb:fb:9f:da:d7:92:a4:ef:09:46:5b:dd:6e:07:
                    33:c1:34:88:d9:b0:df:31:86:dc:30:3c:1e:2b:f1:
                    b7:81:ba:16:68:78:62:cf:73:37:71:a9:92:e5:f3:
                    cc:4a:ee:83:7b:af:37:95:ec:e3:23:6f:13:c1:cd:
                    ac:37:5e:89:45:7c:aa:6c:c3:02:b4:0f:42:66:e2:
                    5c:f0:8e:8c:51:51:56:3b:cd:b0:4b:ba:d7:b5:fb:
                    34:13:9b:44:d9:aa:4c:c0:c8:dd:3f:4e:fc:57:7b:
                    25:dc:6a:b9:d0:ed:6f:4d:a9:77:77:c0:36:77:83:
                    4a:d3:d2:94:f8:72:a0:64:ed:b8:95:c7:e6:b3:56:
                    7a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:ED:A0:68:A8:AD:91:8D:9A:00:3B:4B:E2:71:12:2F:03:C9:91:74
            X509v3 Authority Key Identifier:
                keyid:16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/34352e3136352e39312e302f32342d3234203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:f8:89:20:84:bc:16:53:e8:c0:b0:da:5c:b1:12:23:c3:67:
         77:ba:24:7c:3a:16:e7:f4:a5:7e:58:ff:44:8b:f9:c6:d5:df:
         7c:cb:aa:01:0e:1b:33:fd:8c:9c:3e:7b:ad:c4:3b:d8:3e:e8:
         35:a4:e5:01:75:6f:41:03:f3:8c:f7:47:fd:01:44:11:95:ba:
         d1:72:24:c1:ae:f4:73:8d:51:4b:e9:fb:e4:0b:ae:04:61:cc:
         b0:82:6c:34:c0:51:50:4a:ce:6e:69:11:89:d3:6a:e3:e6:13:
         23:c1:28:14:10:f1:1c:bc:f2:6c:81:6e:f5:cf:cf:5c:89:b0:
         37:17:44:a4:6d:c5:95:24:9b:76:f2:31:b2:dc:9c:b0:33:d8:
         48:00:03:06:62:2d:78:d5:d7:34:68:a3:82:40:31:19:d2:4d:
         2a:0c:4b:95:45:b7:4c:c0:37:16:3b:a6:29:b1:87:bf:3d:84:
         c2:9a:f6:1a:f2:b4:65:f2:66:8e:0c:ad:d2:af:9b:99:1a:a2:
         9a:b7:3d:a4:5a:bf:f0:3d:65:3e:ca:86:58:bc:24:38:79:6d:
         a7:4e:54:b6:6f:fb:23:b9:20:ba:c5:2a:2e:85:bb:d1:1a:2f:
         12:72:dd:2a:91:1a:18:ee:4b:66:f5:ea:5b:62:b7:af:6a:b1:
         3d:e3:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:58 2024 by rpki-client on console-ams.rpki-client.org