Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/34352e3136352e38302e302f32322d3234203d3e203631353935.roa
File:                     34352e3136352e38302e302f32322d3234203d3e203631353935.roa (raw, json)
Hash identifier:          P3iRqeK3Yv57QU7Bwadb2mGTtOHbUHSsYSW0mi15khA=
Subject key identifier:   5E:61:37:2C:FC:85:A4:84:C8:65:A2:20:99:AA:A2:C7:7D:FE:A5:66
Certificate issuer:       /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
Certificate serial:       121DBD7E9E0CA3E2BEEAC923F97E5BB3309717C4
Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/34352e3136352e38302e302f32322d3234203d3e203631353935.roa
Signing time:             Fri 20 Dec 2024 11:26:04 +0000
ROA not before:           Fri 20 Dec 2024 11:21:04 +0000
ROA not after:            Fri 19 Dec 2025 11:26:04 +0000
asID:                     61595
IP address blocks:        45.165.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl
                          rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1d:bd:7e:9e:0c:a3:e2:be:ea:c9:23:f9:7e:5b:b3:30:97:17:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
        Validity
            Not Before: Dec 20 11:21:04 2024 GMT
            Not After : Dec 19 11:26:04 2025 GMT
        Subject: CN=5E61372CFC85A484C865A22099AAA2C77DFEA566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:70:7a:0b:9d:bc:3c:2b:c3:ce:cf:b1:a4:
                    ad:e2:88:93:45:86:bb:07:6d:8d:13:85:f3:91:fd:
                    f6:af:35:ce:96:c0:b0:a7:a8:a5:40:04:1b:ee:83:
                    c9:a6:ef:88:7e:da:84:03:91:d9:86:b0:04:58:25:
                    00:5d:5c:39:1b:c4:e3:fe:70:42:75:38:8b:49:47:
                    6b:a3:46:08:53:5c:70:bc:45:0e:45:f5:c5:f7:bd:
                    7f:ec:e3:04:f9:e2:59:4a:5e:c6:4e:36:c8:9a:4b:
                    a4:13:20:03:2f:66:b2:c9:1d:42:71:d4:2a:18:93:
                    50:91:75:2f:d1:f8:fe:90:41:58:22:57:83:1b:80:
                    70:69:d0:32:62:f2:96:73:a4:58:76:e4:81:3f:bc:
                    e7:fe:f6:c0:41:40:3d:49:0c:f7:24:e7:f6:d7:7f:
                    b9:f7:e6:1d:a1:2f:57:94:d8:97:73:b3:2d:1d:e6:
                    5b:72:11:a6:2d:0c:42:a8:06:79:b1:78:2f:5a:04:
                    11:6e:05:f6:b8:ad:61:3d:1e:77:5d:96:31:32:cf:
                    64:4c:7a:36:75:fc:76:ec:a2:0e:a9:e1:cf:d1:8e:
                    31:ab:14:ac:54:70:02:bf:dd:c5:8f:d0:41:db:60:
                    18:a4:06:99:53:c1:ee:1c:40:f7:a7:db:6b:73:a5:
                    84:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:61:37:2C:FC:85:A4:84:C8:65:A2:20:99:AA:A2:C7:7D:FE:A5:66
            X509v3 Authority Key Identifier:
                keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/34352e3136352e38302e302f32322d3234203d3e203631353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:84:06:4c:b6:2e:63:a2:6b:b5:f4:3a:f4:f6:35:f8:72:73:
         b4:1c:5d:43:6f:c6:d3:23:37:75:ca:85:c1:5d:24:27:b9:76:
         3e:d9:65:50:21:8b:13:d0:d2:10:b3:e2:dc:92:b9:16:ec:84:
         a2:a5:bd:e4:8b:a4:d3:91:c0:42:35:32:53:e5:7c:ed:d5:9f:
         97:d8:4b:f3:eb:c1:91:8e:06:73:f3:94:58:48:07:8e:15:5b:
         ec:4c:71:2e:78:ea:a8:b7:c8:05:bc:78:76:ab:d5:dd:da:2b:
         44:52:3f:45:d3:8a:a6:e6:4e:46:98:f1:50:30:52:f0:ed:65:
         bd:2c:bc:85:64:3a:13:ab:68:f3:00:8f:5c:e7:30:b8:15:a3:
         9f:a6:01:b4:13:38:ba:9d:a1:17:c1:14:e9:a7:bf:6d:66:7f:
         a7:55:65:7c:14:b3:ce:84:bb:90:ce:49:1a:d9:d8:5b:f9:8f:
         cb:25:af:19:fb:9a:77:04:5c:98:f8:47:fe:2d:21:03:34:8b:
         4e:47:32:3f:88:0c:93:0c:9b:00:d6:63:5f:7b:60:1f:d1:0f:
         d9:16:19:51:77:0a:ec:de:3b:c7:ac:99:ba:07:f0:5f:d5:94:
         65:9b:16:18:07:87:7b:0b:6a:58:0b:b0:28:e7:f7:1a:ce:ae:
         28:ca:e8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:01 2025 by rpki-client on console.sobornost.net