Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231372e302f32342d3234203d3e20323638373332.roa
File:                     34352e3137312e3231372e302f32342d3234203d3e20323638373332.roa (raw, json)
Hash identifier:          xNUbTjlpYKbmXXnFmENAA0ocTjdYaAaY1W5roqFhn9w=
Subject key identifier:   4A:A3:7C:69:07:92:8E:E6:3E:E5:C5:50:92:31:B0:94:19:7A:74:5F
Certificate issuer:       /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial:       607F96BD93FD0EF7781A80336ECD2B1EEA102544
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231372e302f32342d3234203d3e20323638373332.roa
Signing time:             Wed 03 Apr 2024 18:30:11 +0000
ROA not before:           Wed 03 Apr 2024 18:25:11 +0000
ROA not after:            Wed 02 Apr 2025 18:30:11 +0000
asID:                     268732
IP address blocks:        45.171.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
                          rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7f:96:bd:93:fd:0e:f7:78:1a:80:33:6e:cd:2b:1e:ea:10:25:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
        Validity
            Not Before: Apr  3 18:25:11 2024 GMT
            Not After : Apr  2 18:30:11 2025 GMT
        Subject: CN=4AA37C6907928EE63EE5C5509231B094197A745F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:43:14:19:70:01:f6:17:7d:1e:6c:db:e1:
                    c0:fb:d5:06:c4:36:24:87:c1:b8:9d:a9:4a:8f:35:
                    33:7a:84:8e:4b:6c:cb:0f:9a:69:df:70:9d:21:35:
                    3d:ec:49:2b:55:ab:7e:f8:fd:2f:b7:b4:50:52:f4:
                    2e:91:4b:44:27:5c:ef:5f:84:7f:59:88:2d:0b:64:
                    e8:c8:a8:15:f7:6d:8b:ec:22:29:9a:a9:2e:5e:c9:
                    10:a1:70:f0:3e:80:a4:13:c7:80:4e:51:50:65:38:
                    52:f3:2c:60:5d:e7:24:ab:c7:e5:5a:7e:61:78:66:
                    ed:1e:a0:14:d2:52:3d:38:07:ea:f4:43:13:b5:37:
                    a7:3c:67:81:80:b6:89:94:0e:73:c7:40:75:2e:2c:
                    be:3c:2d:00:d0:5f:4a:b4:76:b7:5e:ec:37:57:80:
                    36:1b:9f:1b:26:a9:a9:77:77:3f:bf:d2:f3:31:f3:
                    8f:f8:47:24:d6:2d:ba:0c:79:f3:85:08:e5:60:f6:
                    5e:98:0b:20:35:e0:89:c5:c6:c4:f8:ac:a4:7f:a7:
                    71:11:93:24:8c:71:3b:cb:93:13:b3:31:fd:50:b1:
                    de:ed:6d:b2:a4:a8:54:86:b8:a2:91:79:aa:54:8c:
                    51:e5:77:57:d2:19:4b:28:45:06:33:a0:ea:07:67:
                    b3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A3:7C:69:07:92:8E:E6:3E:E5:C5:50:92:31:B0:94:19:7A:74:5F
            X509v3 Authority Key Identifier:
                keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231372e302f32342d3234203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:cd:7d:39:80:76:19:97:20:9f:74:b1:67:13:53:68:30:83:
         b1:fb:d1:07:e7:d7:b9:ea:2e:36:3e:22:ab:f0:9b:24:26:86:
         87:b9:72:69:7c:87:9e:e3:80:86:88:25:60:e8:45:20:f7:fc:
         07:fb:8f:31:6f:56:12:ab:19:6e:3c:5b:1a:be:1b:98:40:44:
         ff:5b:a9:83:32:1b:ee:34:78:d9:b8:de:64:a2:c7:81:47:c3:
         53:65:0f:68:e6:92:65:21:44:a3:3a:89:71:7d:6c:61:a0:f7:
         22:a0:40:da:7c:0c:e9:01:25:32:0b:e9:49:b1:b5:e7:69:0f:
         fa:60:e9:40:fd:e8:da:fb:2f:e6:ec:dc:1f:e2:18:79:5e:2c:
         03:c5:99:4f:c8:09:52:8b:d1:17:8b:4e:5f:2c:15:fe:55:12:
         e7:34:fb:73:c1:b8:22:97:6a:48:84:4e:ab:c3:b7:db:a5:ad:
         67:78:02:99:60:83:98:11:36:82:ca:90:b0:7d:1b:c9:13:75:
         15:db:56:cc:4f:29:04:5c:81:cd:43:d3:74:59:b7:f8:56:03:
         e9:e1:58:8c:9a:31:0a:cd:f6:fc:b4:8e:e0:12:fd:ed:28:1e:
         59:c0:99:8a:27:1f:ae:ae:b4:bd:a0:dd:e9:ce:9d:09:b3:c5:
         9d:3a:2e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:47 2024 by rpki-client on console-fra.rpki-client.org