Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/34352e3138382e38332e302f32342d3234203d3e20323639353837.roa
File:                     34352e3138382e38332e302f32342d3234203d3e20323639353837.roa (raw, json)
Hash identifier:          zEHCUYQBGU91wB4l4ja+2BnyiN85mhVi7imziAV+pW8=
Subject key identifier:   9C:76:CA:47:E5:24:A4:BD:9E:66:77:74:43:A3:3F:6C:FF:FC:5B:3E
Certificate issuer:       /CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E
Certificate serial:       5BDE586D4E20A47D323092A368001A996681B894
Authority key identifier: DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/34352e3138382e38332e302f32342d3234203d3e20323639353837.roa
Signing time:             Mon 29 Apr 2024 19:04:14 +0000
ROA not before:           Mon 29 Apr 2024 18:59:14 +0000
ROA not after:            Mon 28 Apr 2025 19:04:14 +0000
asID:                     269587
IP address blocks:        45.188.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl
                          rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:de:58:6d:4e:20:a4:7d:32:30:92:a3:68:00:1a:99:66:81:b8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E
        Validity
            Not Before: Apr 29 18:59:14 2024 GMT
            Not After : Apr 28 19:04:14 2025 GMT
        Subject: CN=9C76CA47E524A4BD9E66777443A33F6CFFFC5B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:d4:eb:86:d6:dd:47:ed:f4:7e:7c:31:4a:
                    ce:c6:c1:76:80:c4:a7:a5:a1:d7:fc:e9:bf:e2:8a:
                    a2:0e:36:23:24:21:05:49:08:20:76:8c:05:5a:82:
                    a8:ba:94:43:e7:cc:a3:d9:ad:5e:c8:dd:4d:01:71:
                    59:75:52:0e:e0:fe:11:e0:e0:9c:52:42:c4:d4:a2:
                    30:6f:91:10:e8:82:cd:34:f6:41:04:25:0d:8d:24:
                    8b:b9:88:ae:58:a5:71:7e:f5:96:2e:ff:73:49:7a:
                    e9:1d:8e:67:24:1a:a6:ed:5e:d0:6d:12:e2:d0:16:
                    c5:18:bc:cf:b7:09:96:15:13:92:b5:be:e5:2b:e3:
                    8d:43:14:d7:68:98:9c:4b:6c:8f:e4:6e:a1:65:e5:
                    7e:68:57:15:3a:c9:66:e0:af:2c:8d:8d:1d:02:ba:
                    49:31:d5:8a:9e:b8:19:cc:9a:8f:da:b5:19:bd:48:
                    b2:52:3e:11:a6:51:44:2e:4e:57:14:79:fc:a9:d6:
                    3c:51:c6:cf:7a:29:94:44:77:45:0f:53:82:03:9c:
                    e1:94:0b:be:c0:e6:28:35:c8:d0:84:b7:70:13:66:
                    bc:3d:d2:af:3d:ee:2d:eb:b3:79:3e:0c:c6:09:d6:
                    25:77:9e:0c:d7:33:d4:56:af:34:6d:a2:2f:dc:91:
                    db:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:76:CA:47:E5:24:A4:BD:9E:66:77:74:43:A3:3F:6C:FF:FC:5B:3E
            X509v3 Authority Key Identifier:
                keyid:DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/34352e3138382e38332e302f32342d3234203d3e20323639353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:55:16:dc:e4:6d:ce:f8:46:44:c7:94:99:91:a2:80:cd:2c:
         64:52:07:d3:9b:9c:cd:a9:88:a0:a7:e6:0f:df:71:eb:f0:94:
         94:a8:6a:46:06:f7:c0:ad:5e:df:e3:4c:f8:98:49:7a:a3:56:
         c0:2c:ea:e5:3a:18:73:f7:a8:73:ef:f8:7f:46:44:74:15:f6:
         35:fd:0d:d5:6b:53:8d:48:f5:10:fc:dd:1f:3e:bd:f7:e9:8a:
         a6:47:ab:62:6b:55:c0:bc:c4:f2:dd:a9:01:55:fd:a6:1d:e1:
         96:dc:68:4b:eb:da:c2:ae:73:44:01:12:00:bb:26:33:3c:ae:
         82:65:e7:19:01:d1:e2:78:b8:02:62:d7:38:46:13:3b:5f:46:
         dd:8a:ac:6e:d1:71:7a:03:07:62:60:d7:d9:69:0c:6a:89:e0:
         26:ce:16:f5:da:52:45:9c:68:cc:3f:af:b5:86:5c:bb:b9:d8:
         35:69:2a:1f:f9:11:0a:7a:62:35:83:35:e5:a6:f3:1f:b2:c3:
         1f:41:7f:c5:03:82:76:35:aa:80:57:f6:8e:83:36:ba:d5:2d:
         e2:04:69:bd:6c:0e:de:48:72:85:d7:ee:ac:4e:45:1f:bf:90:
         1b:56:8e:d3:7b:8d:70:bb:68:ef:bb:9f:ef:90:89:fb:bb:f3:
         0f:93:38:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:22 2024 by rpki-client on console-ams.rpki-client.org