Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/34352e3137392e3132382e302f32342d3234203d3e20323634393936.roa
File:                     34352e3137392e3132382e302f32342d3234203d3e20323634393936.roa (raw, json)
Hash identifier:          art15OXgB6VGmdppGkYCVDH973WHNY2Uz6pECYumlfA=
Subject key identifier:   D1:E1:41:6A:78:9C:C1:B2:CB:4A:2A:DD:A6:18:AF:35:9B:A9:8A:27
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       68AE019F709526E229B5DE4A46331F40C0746ED8
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/34352e3137392e3132382e302f32342d3234203d3e20323634393936.roa
Signing time:             Thu 04 Apr 2024 08:22:06 +0000
ROA not before:           Thu 04 Apr 2024 08:17:06 +0000
ROA not after:            Thu 03 Apr 2025 08:22:06 +0000
asID:                     264996
IP address blocks:        45.179.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ae:01:9f:70:95:26:e2:29:b5:de:4a:46:33:1f:40:c0:74:6e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Apr  4 08:17:06 2024 GMT
            Not After : Apr  3 08:22:06 2025 GMT
        Subject: CN=D1E1416A789CC1B2CB4A2ADDA618AF359BA98A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:70:f6:dc:30:ea:29:61:22:3b:83:65:f1:a0:
                    fe:f8:fd:2f:c1:97:7e:5b:82:ec:bb:b6:9c:51:24:
                    49:1f:b3:41:91:9b:2b:3b:83:58:7d:bb:8e:05:78:
                    bd:78:fe:e4:8a:2f:cc:05:82:6e:a8:c0:c4:3f:53:
                    2c:33:2c:91:9a:c5:bb:7b:ad:1b:c5:53:fd:ca:3b:
                    bf:7e:2d:be:bf:91:79:f6:cc:41:3e:d0:cb:bb:63:
                    e3:e0:8e:7f:93:67:d6:d5:42:a4:9d:7a:ab:c4:13:
                    6f:36:91:06:eb:63:c9:5f:d2:67:6e:81:1d:d2:e0:
                    0c:28:a4:ee:24:7c:1d:d7:42:a5:f1:1c:c6:03:87:
                    0a:54:35:86:0f:dd:38:5a:e6:98:54:74:4f:9e:b7:
                    7a:39:51:f6:d6:f4:0e:fb:17:33:6f:48:2b:f7:97:
                    0b:50:ac:4c:e5:52:40:cd:d4:2a:a0:84:24:b8:72:
                    2f:a5:d3:c5:7c:c9:98:1b:b9:58:a2:a1:e2:57:ef:
                    26:11:34:cc:40:d2:51:91:fe:9d:6e:64:d9:69:61:
                    bb:a6:38:84:c2:55:55:4f:4b:04:00:4f:81:19:3c:
                    9e:56:9c:0c:43:ac:7b:1f:58:35:47:a1:62:be:9a:
                    e0:15:01:0f:59:20:f4:75:d3:57:72:ea:d4:fb:e8:
                    31:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E1:41:6A:78:9C:C1:B2:CB:4A:2A:DD:A6:18:AF:35:9B:A9:8A:27
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/34352e3137392e3132382e302f32342d3234203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:ea:5b:2d:3e:73:bd:b2:45:0a:15:0d:bc:a7:91:67:15:fc:
         5e:5d:47:2e:d8:e4:9c:08:03:83:1b:36:c4:bf:f5:e9:63:f9:
         4d:71:9c:5d:c3:84:f0:70:61:12:8d:97:59:1d:36:39:ee:44:
         e1:ea:3e:36:c2:e8:47:9c:33:96:f6:48:8e:77:b7:6e:a0:3b:
         22:e1:85:03:1e:5f:61:b5:d1:c8:5a:20:9f:a3:c8:ec:b1:b8:
         ad:2d:7b:50:9f:09:50:fb:df:34:82:c0:92:f6:0a:71:ad:fe:
         77:d6:70:65:aa:1c:ca:42:ac:0b:da:0a:c2:56:8a:6f:fe:41:
         9d:0c:95:7a:5a:14:12:d1:df:f0:e9:17:30:99:5d:a4:7b:a7:
         f2:ec:77:22:ee:b3:cc:bd:c2:df:ca:c8:5c:68:2e:a7:6a:dc:
         f4:dd:54:bb:22:76:47:7a:b4:2f:91:f7:11:6b:51:ef:ab:bb:
         0c:65:3a:33:2e:b5:fa:57:0e:cd:cf:25:72:09:de:3b:36:6f:
         19:60:1e:be:94:5a:58:69:ce:85:4c:02:b7:d6:99:f2:b9:7e:
         88:6c:04:c1:ee:3e:1c:19:26:e5:a9:34:b4:cb:81:9d:f2:af:
         13:1a:a7:55:f9:64:b2:91:68:72:1c:79:59:4c:9a:e4:89:88:
         63:fe:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:31 2024 by rpki-client on console-ams.rpki-client.org