Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31382e302f32342d3234203d3e20323638343436.roa
File:                     34352e3136312e31382e302f32342d3234203d3e20323638343436.roa (raw, json)
Hash identifier:          9EoCpKBGuYo1bkIlY1TvNF5OwqDrQK/P8eDzQkKuL8M=
Subject key identifier:   B1:7A:F2:D9:7D:42:BF:2E:79:83:92:75:32:B4:FA:A0:9C:02:B6:A4
Certificate issuer:       /CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
Certificate serial:       2A1283C0C66BB7A973EF4F78CADA47CF59AE9CBB
Authority key identifier: D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31382e302f32342d3234203d3e20323638343436.roa
Signing time:             Wed 03 Apr 2024 18:33:10 +0000
ROA not before:           Wed 03 Apr 2024 18:28:10 +0000
ROA not after:            Wed 02 Apr 2025 18:33:10 +0000
asID:                     268446
IP address blocks:        45.161.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl
                          rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:12:83:c0:c6:6b:b7:a9:73:ef:4f:78:ca:da:47:cf:59:ae:9c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
        Validity
            Not Before: Apr  3 18:28:10 2024 GMT
            Not After : Apr  2 18:33:10 2025 GMT
        Subject: CN=B17AF2D97D42BF2E7983927532B4FAA09C02B6A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:ce:2f:65:20:d5:a1:bb:cd:9b:38:1e:65:
                    72:49:25:68:17:6b:e8:99:2f:ec:48:89:61:48:58:
                    15:55:4e:c1:d7:52:46:5d:62:da:26:de:bf:0a:a7:
                    45:e2:50:d4:67:07:f2:19:3d:9b:bf:fd:21:27:2b:
                    bd:b3:33:29:02:1f:f7:b0:6d:cd:13:6a:67:d2:cd:
                    d7:ed:66:6a:48:bc:3f:91:a1:0b:d8:49:e2:5d:4f:
                    ae:7e:2f:41:f1:07:34:a8:80:a2:eb:56:27:65:66:
                    a1:7a:81:a5:fd:31:d3:ff:1c:df:8b:c9:8f:bf:ef:
                    a8:0c:cf:08:fe:99:3e:05:6d:f0:b9:e1:3c:1d:1e:
                    02:fe:22:3b:1d:03:9d:03:db:47:bd:e7:0d:83:08:
                    4e:a9:d1:26:f2:a2:f4:a6:31:6b:4e:c7:b2:e0:e5:
                    8b:ca:08:57:1c:84:a6:14:eb:3a:56:39:bd:4d:48:
                    34:3c:d2:1f:99:25:81:d8:e6:60:f6:8a:89:ca:ee:
                    b9:ce:63:41:ef:6b:2a:e3:57:54:d3:af:0a:39:c0:
                    d6:72:56:6b:57:fe:ca:8d:bd:b1:fd:04:8a:e8:17:
                    55:97:4e:53:fd:46:e9:84:87:ee:d0:b2:c5:6a:30:
                    0c:ce:92:a7:5c:1f:5a:9d:84:bd:2a:0d:4b:d6:34:
                    8b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7A:F2:D9:7D:42:BF:2E:79:83:92:75:32:B4:FA:A0:9C:02:B6:A4
            X509v3 Authority Key Identifier:
                keyid:D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31382e302f32342d3234203d3e20323638343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:f5:3d:b4:a2:8a:18:ee:c7:d4:23:88:c2:92:a4:22:8b:be:
         67:04:7c:9c:c1:d8:09:64:17:cb:2a:60:33:44:dd:5c:f0:60:
         25:0f:60:81:08:78:15:25:50:86:50:60:c6:9d:d3:3c:8b:b8:
         78:d6:59:00:2a:ff:fe:fa:61:1b:3b:e2:b5:15:5c:4f:ab:2b:
         f3:77:0c:93:e9:65:88:1b:42:7d:6e:e7:36:85:b3:6e:22:db:
         18:46:ec:0e:89:46:5f:c8:ec:37:03:c8:2a:91:c6:6b:63:be:
         ec:88:26:92:cf:c7:df:ae:61:54:e6:14:37:04:78:ce:4c:cb:
         d1:4e:45:19:2a:45:89:27:4d:0b:d0:0f:18:6e:7f:31:ed:71:
         84:5c:b3:00:6c:c9:c2:b1:d9:e4:7e:41:a4:4d:fc:46:cd:9a:
         7d:4f:70:88:ce:42:d2:75:aa:e2:4a:5a:91:9c:71:58:34:23:
         22:f0:b0:fc:34:c4:6e:4f:ca:f9:2a:af:0a:66:3b:5b:0f:3d:
         89:99:fe:c2:32:a5:6a:43:ea:eb:35:cf:82:d3:28:c8:50:9e:
         73:b1:c8:c6:07:25:41:5e:ea:7b:a7:be:7a:ee:5a:de:dc:bb:
         a6:56:00:95:82:14:2d:9b:9a:7f:6c:df:a4:4e:cb:3c:47:27:
         e7:4d:89:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org