Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231362e302f32322d3232203d3e20323638373332.roa
File:                     34352e3137312e3231362e302f32322d3232203d3e20323638373332.roa (raw, json)
Hash identifier:          nGns02hWLiVKRuGKHP6HXobg+j29BDStoFqgHdvX79I=
Subject key identifier:   6E:2C:5E:FA:92:35:36:DB:15:CE:9B:D8:C2:EB:EB:6F:A2:91:68:3E
Certificate issuer:       /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial:       1BC927D25EB7ED95A717D813D68449F5F158CAB7
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231362e302f32322d3232203d3e20323638373332.roa
Signing time:             Wed 03 Apr 2024 18:30:11 +0000
ROA not before:           Wed 03 Apr 2024 18:25:11 +0000
ROA not after:            Wed 02 Apr 2025 18:30:11 +0000
asID:                     268732
IP address blocks:        45.171.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
                          rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c9:27:d2:5e:b7:ed:95:a7:17:d8:13:d6:84:49:f5:f1:58:ca:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
        Validity
            Not Before: Apr  3 18:25:11 2024 GMT
            Not After : Apr  2 18:30:11 2025 GMT
        Subject: CN=6E2C5EFA923536DB15CE9BD8C2EBEB6FA291683E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:84:50:84:02:8d:8f:27:48:57:3b:e8:c3:
                    07:29:8a:74:d3:7f:12:30:28:e7:36:31:db:b0:37:
                    b0:b2:07:b8:f7:f6:7e:ed:8c:c1:e0:45:42:ab:c2:
                    5c:af:27:73:08:64:cb:03:7c:fd:0f:c4:85:66:df:
                    57:ea:9f:16:ad:06:f6:be:8f:49:f6:b6:59:3c:b7:
                    8f:a2:75:bb:da:e4:0d:19:b2:43:a2:62:b3:07:b2:
                    83:e6:b1:af:9b:71:e2:11:a6:9d:9d:ed:45:ec:0f:
                    d2:7a:fd:81:97:90:01:e1:6e:b4:53:04:2e:fa:e1:
                    db:3e:0e:2d:93:80:18:68:30:ca:00:48:18:ed:f1:
                    94:79:3e:c1:6c:e3:36:10:dd:18:82:14:4c:3d:da:
                    23:e4:83:75:2a:de:f2:1d:05:91:d2:18:e8:06:c0:
                    c2:b3:41:f3:ba:8d:63:12:ed:ad:86:39:a7:39:25:
                    0e:7a:d6:3e:81:b4:73:08:35:cb:8d:d4:f4:df:6c:
                    cc:9e:e8:3a:7a:fa:11:f4:10:90:86:05:47:fa:1f:
                    f9:d4:b0:fb:59:7d:e2:ff:ca:35:4c:60:26:2b:eb:
                    f5:ab:4c:7a:1a:09:72:4d:b9:e4:66:89:e4:37:1b:
                    b1:24:46:df:3f:cc:9f:64:b6:e7:12:5b:cc:56:89:
                    b9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2C:5E:FA:92:35:36:DB:15:CE:9B:D8:C2:EB:EB:6F:A2:91:68:3E
            X509v3 Authority Key Identifier:
                keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231362e302f32322d3232203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:98:d8:86:e7:d4:44:2f:37:84:1d:76:4f:50:c7:d5:1d:60:
         f2:7e:9d:c9:66:f6:4c:af:32:1e:32:ed:bd:90:5d:5e:0a:86:
         71:e9:0f:be:df:2e:1d:de:5c:62:92:3c:1d:2d:4e:7c:be:eb:
         2c:83:6c:d3:d6:63:91:bf:db:f5:0d:ae:b9:fa:81:68:d6:6c:
         de:5b:33:aa:5e:e8:0c:9a:fd:9a:bb:67:ae:2e:c0:1e:1a:8e:
         4d:d0:1f:0f:8f:15:d3:d4:e1:bb:6a:f6:d6:30:ca:66:57:c4:
         6f:bb:0e:87:6d:b1:42:b4:eb:be:3a:75:03:6a:74:68:2f:c1:
         96:fb:21:62:61:7b:80:7f:b5:a1:63:4d:58:13:12:99:4f:ec:
         9b:ad:a5:dd:8f:57:ea:a7:9e:95:e3:85:87:10:06:7b:65:90:
         25:10:b0:ba:cc:0c:fa:6e:9b:d2:4c:86:70:d7:af:64:65:63:
         3f:ce:99:6c:f1:e7:9c:0b:ef:3f:9e:38:ac:27:f0:84:47:ec:
         bc:f1:4d:d4:ab:e5:71:60:c7:ff:a1:5a:a6:39:03:ef:2f:a9:
         cd:b5:f2:cd:a1:88:34:74:e3:34:1f:a3:aa:b4:2a:b2:95:32:
         ce:05:3e:6f:5c:3e:d0:16:5b:b4:27:e0:41:cf:d6:cb:a0:1a:
         d8:30:b0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:58 2024 by rpki-client on console-ams.rpki-client.org