Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31362e302f32332d3233203d3e20323638343436.roa
File:                     34352e3136312e31362e302f32332d3233203d3e20323638343436.roa (raw, json)
Hash identifier:          X6Lbmc1AZl5O3j+4L5AchGCCoZXCqBePKNuu9Nac5VQ=
Subject key identifier:   50:B5:CE:BD:1F:D1:B3:BA:01:CF:5D:D7:7C:46:38:F6:1B:6D:E0:CA
Certificate issuer:       /CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
Certificate serial:       031AF8EE49FE40743D16603E0749796C3F0B1B89
Authority key identifier: D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31362e302f32332d3233203d3e20323638343436.roa
Signing time:             Wed 03 Apr 2024 18:33:11 +0000
ROA not before:           Wed 03 Apr 2024 18:28:11 +0000
ROA not after:            Wed 02 Apr 2025 18:33:11 +0000
asID:                     268446
IP address blocks:        45.161.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl
                          rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 00:34:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1a:f8:ee:49:fe:40:74:3d:16:60:3e:07:49:79:6c:3f:0b:1b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
        Validity
            Not Before: Apr  3 18:28:11 2024 GMT
            Not After : Apr  2 18:33:11 2025 GMT
        Subject: CN=50B5CEBD1FD1B3BA01CF5DD77C4638F61B6DE0CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:f6:92:89:ee:d6:30:54:17:08:d0:c5:98:
                    5e:cc:01:ff:fe:1f:2e:7e:23:18:f6:09:4b:24:70:
                    6b:bb:5c:34:1b:74:1a:e5:6d:51:1e:bd:22:89:0a:
                    41:39:96:30:b6:7d:66:bc:55:a1:e4:57:c5:4a:12:
                    2f:e7:75:3e:6f:f7:b4:52:5e:81:5d:63:9c:cb:d8:
                    b6:52:2a:28:06:ad:50:38:85:e8:ac:e4:30:a7:33:
                    59:3c:ba:ed:f4:a6:7e:26:6a:9f:3a:dd:14:d6:5c:
                    fd:c0:56:fc:4c:01:eb:68:ec:5b:71:c1:cc:4e:78:
                    5c:6f:fa:6f:e9:ea:cf:67:4b:a8:a2:ae:d3:ad:9d:
                    2b:d8:06:05:06:12:96:82:2f:f5:7a:06:7b:01:9e:
                    94:97:fa:e2:9a:52:73:38:d2:27:a3:cc:b0:f1:67:
                    c2:ef:6d:6c:21:cf:2f:ed:5d:ec:bf:48:16:ea:1f:
                    f4:77:4e:7a:ea:43:65:07:65:26:75:c2:fb:8e:ca:
                    95:9c:3c:cf:8a:80:cb:ee:e1:09:e9:b3:28:4d:25:
                    14:e9:50:e4:23:5c:8f:86:76:a0:1b:e2:c8:5f:dd:
                    bb:9d:14:e5:f0:32:94:8d:98:55:75:2d:04:cd:24:
                    7e:4f:e1:0e:5e:72:24:94:0b:ef:4d:7e:64:19:d9:
                    21:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B5:CE:BD:1F:D1:B3:BA:01:CF:5D:D7:7C:46:38:F6:1B:6D:E0:CA
            X509v3 Authority Key Identifier:
                keyid:D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31362e302f32332d3233203d3e20323638343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:20:bc:e9:70:0f:80:4e:cf:51:86:38:58:00:f2:bd:b0:51:
         b1:0c:7e:5f:e5:b2:78:8c:bd:74:5c:9c:c9:05:cc:82:16:d2:
         cf:31:0a:4b:f5:ea:3f:16:dc:1e:44:86:fb:3a:98:f5:90:70:
         f9:53:d9:5c:c7:92:46:1e:3f:9e:5d:26:4a:7a:94:4b:99:50:
         4d:7a:9f:4b:64:2d:98:76:ed:1e:45:00:45:7a:3f:84:c1:fe:
         9c:66:ef:55:83:ac:4d:fe:91:10:a8:9e:d8:b1:02:82:99:92:
         71:67:20:80:ed:f9:b0:26:4c:40:01:af:03:0b:fe:e2:91:58:
         d4:fb:05:69:2f:59:7c:0c:3c:70:76:1d:2d:33:e8:2e:94:a1:
         98:7c:fe:c0:f9:45:bb:0b:84:bd:b1:c9:1e:57:11:5d:ef:99:
         89:17:67:e7:a2:1b:73:19:dd:8e:e6:d3:72:f9:49:e7:e4:75:
         c9:63:a1:c8:3e:3e:a4:92:f0:8a:73:75:ec:8d:f4:f9:63:fc:
         33:6f:bf:b7:d4:55:a5:b7:58:01:1b:31:e0:53:c3:40:9c:89:
         d6:c5:fd:03:70:00:de:87:9e:77:4d:25:39:d6:70:a9:92:87:
         bc:76:7d:05:cb:93:4b:32:e2:6d:6d:f6:52:7e:98:59:bd:e3:
         3a:35:56:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:38:45 2024 by rpki-client on console-ams.rpki-client.org