Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/34352e3139312e3132382e302f32322d3234203d3e20323634353134.roa
File:                     34352e3139312e3132382e302f32322d3234203d3e20323634353134.roa (raw, json)
Hash identifier:          2+PtcbCOkGVazNd2iPt6KF/CyF933vjtcmL3fI17PkE=
Subject key identifier:   90:35:79:75:EE:7B:3F:91:C4:F9:3A:74:7C:2E:A9:48:F6:DD:63:B1
Certificate issuer:       /CN=5116131606911447B81AE3C7A8BE76D217A043B2
Certificate serial:       52E9104120AF7B6F1196EBAE5CB83C9D99B5F028
Authority key identifier: 51:16:13:16:06:91:14:47:B8:1A:E3:C7:A8:BE:76:D2:17:A0:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/34352e3139312e3132382e302f32322d3234203d3e20323634353134.roa
Signing time:             Wed 03 Apr 2024 18:31:51 +0000
ROA not before:           Wed 03 Apr 2024 18:26:51 +0000
ROA not after:            Wed 02 Apr 2025 18:31:51 +0000
asID:                     264514
IP address blocks:        45.191.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.crl
                          rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e9:10:41:20:af:7b:6f:11:96:eb:ae:5c:b8:3c:9d:99:b5:f0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5116131606911447B81AE3C7A8BE76D217A043B2
        Validity
            Not Before: Apr  3 18:26:51 2024 GMT
            Not After : Apr  2 18:31:51 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:61:21:f3:16:be:f4:9e:38:3d:eb:5d:bb:
                    d1:b3:f7:58:89:21:e8:58:ea:4d:35:e8:0f:7c:c9:
                    b9:aa:f6:86:f8:3a:be:04:6d:28:02:aa:bb:56:e5:
                    ff:9a:31:88:04:1e:92:8a:26:57:d4:5b:3a:f2:0e:
                    33:0a:90:7d:c6:a5:46:c9:f8:4c:e3:5f:7f:4f:fc:
                    d6:0e:72:18:f0:e7:59:bd:4f:b4:77:14:ea:c3:8b:
                    77:96:2e:71:d8:0c:51:c1:3e:b1:93:de:fa:f9:9d:
                    2e:2f:85:fd:a2:af:b5:ee:7e:52:cf:33:18:f1:15:
                    e1:60:d6:aa:98:ed:d2:c2:4d:0d:69:64:f7:f9:62:
                    b5:cf:59:fa:bf:46:16:fe:5d:97:cb:27:be:d5:fd:
                    c7:7d:af:f2:5e:6b:15:7a:5f:ca:55:10:a2:2c:fd:
                    67:c4:34:6d:0c:f6:fb:78:01:a3:bd:d7:6b:0c:c2:
                    d2:d2:14:9e:7b:88:4a:c0:f8:fd:bb:45:f3:8e:d5:
                    fb:84:f7:27:54:6d:03:ce:b4:d3:29:f4:37:aa:9c:
                    e9:ff:1d:98:53:e0:b9:a8:2a:95:05:bb:97:7a:96:
                    50:97:65:b6:37:e0:29:1e:18:02:02:2a:fd:a3:90:
                    9e:ac:04:f3:55:68:88:06:58:d1:4f:f4:62:75:b1:
                    ba:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:35:79:75:EE:7B:3F:91:C4:F9:3A:74:7C:2E:A9:48:F6:DD:63:B1
            X509v3 Authority Key Identifier:
                keyid:51:16:13:16:06:91:14:47:B8:1A:E3:C7:A8:BE:76:D2:17:A0:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/34352e3139312e3132382e302f32322d3234203d3e20323634353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:2f:3b:cb:68:54:72:b0:f0:0c:96:53:87:39:7e:98:4f:03:
         3c:4b:41:3a:73:c0:ea:f9:ba:ff:5c:31:39:aa:74:32:f5:71:
         c7:90:88:80:77:08:58:23:69:5c:41:0a:aa:a5:45:5b:bc:3b:
         d7:b7:fa:40:87:09:9a:30:5e:ad:de:e3:f9:42:04:f8:72:26:
         6f:e4:da:28:83:ef:f4:b4:13:c4:7d:30:c3:a9:18:4e:cc:58:
         d8:03:d9:a4:7d:d2:8d:76:3a:50:fb:24:f0:bd:2c:84:eb:f1:
         be:08:b4:72:a0:f8:93:bb:16:53:fa:e8:20:b9:66:40:89:b4:
         d1:41:bb:9d:88:b6:e5:d8:a9:bb:43:7f:4f:de:35:1b:a9:8e:
         0d:1e:57:5c:89:e0:3d:c7:9f:f0:2a:e8:c5:4a:1b:c5:bf:a2:
         58:b4:61:c6:19:0b:4a:45:2f:64:ba:49:45:b6:a9:ed:33:4e:
         7f:e9:f0:d4:be:4f:a6:43:d3:87:03:f8:d6:15:40:9f:c3:ea:
         34:0d:77:aa:39:7b:3c:8d:2c:61:74:e6:1e:28:9d:6b:95:f0:
         76:29:5d:ac:fe:6e:36:3a:7a:25:68:46:1a:34:2d:fb:fd:f6:
         6a:21:cc:3f:e6:e5:8e:2e:9a:b8:57:b5:20:f1:72:90:be:a0:
         44:92:3c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:49 2024 by rpki-client on console-fra.rpki-client.org