Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39332e302f32342d3234203d3e20323639313735.roa
File:                     34352e3138312e39332e302f32342d3234203d3e20323639313735.roa (raw, json)
Hash identifier:          4Jnh/rCJDTermsdI1dmftvy1mZKM6AFj8TGUOVLS+Y4=
Subject key identifier:   8E:D3:8D:0C:4B:FF:07:59:31:3D:FE:70:AA:82:21:18:F0:DD:2C:CB
Certificate issuer:       /CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Certificate serial:       048E99840986159D8970EF2E1B5831D59D5F129C
Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39332e302f32342d3234203d3e20323639313735.roa
Signing time:             Tue 10 Sep 2024 19:50:19 +0000
ROA not before:           Tue 10 Sep 2024 19:45:19 +0000
ROA not after:            Tue 09 Sep 2025 19:50:19 +0000
asID:                     269175
IP address blocks:        45.181.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8e:99:84:09:86:15:9d:89:70:ef:2e:1b:58:31:d5:9d:5f:12:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
        Validity
            Not Before: Sep 10 19:45:19 2024 GMT
            Not After : Sep  9 19:50:19 2025 GMT
        Subject: CN=8ED38D0C4BFF0759313DFE70AA822118F0DD2CCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4f:76:d7:8b:3c:a6:ad:f2:15:7b:d9:54:98:
                    91:d2:30:5c:20:ad:93:03:9b:0e:26:42:47:01:62:
                    7f:ee:a7:09:61:fb:b0:7e:2b:c8:99:97:58:45:eb:
                    e2:f1:4e:09:b2:e7:4d:b5:d9:d2:01:71:4c:fd:90:
                    8c:ee:6c:ce:3d:7b:41:a8:aa:8a:b0:be:25:d7:5e:
                    1f:a6:4e:60:96:1d:af:8c:56:31:d5:b8:ac:4a:b5:
                    13:a7:55:31:0b:f3:a2:1e:e9:b0:92:a0:0b:f0:57:
                    36:8e:16:bd:24:c8:9a:e1:51:29:0d:80:b2:35:ce:
                    24:1d:89:eb:49:ac:39:81:6c:8b:b3:06:6d:d6:fd:
                    77:e6:49:95:db:be:68:a3:13:6e:95:62:1a:a0:d1:
                    07:66:d4:d0:8a:aa:14:f8:c4:f7:d5:65:ef:e8:7f:
                    f0:f8:ca:90:e2:f1:69:1f:77:b7:2b:79:d1:83:66:
                    58:24:39:38:e6:47:b7:e9:0b:70:9f:97:fd:aa:a2:
                    3e:49:6c:86:c9:b0:fd:45:f0:06:ee:81:d9:7a:08:
                    b2:bf:76:dc:5b:a0:9c:d7:d9:a1:aa:57:89:59:ed:
                    9d:c4:da:cb:41:a4:90:fd:23:fa:9a:7d:0f:21:2f:
                    ff:90:a2:1a:9b:ca:44:7c:5e:58:dc:54:05:90:c5:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D3:8D:0C:4B:FF:07:59:31:3D:FE:70:AA:82:21:18:F0:DD:2C:CB
            X509v3 Authority Key Identifier:
                keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39332e302f32342d3234203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:02:d0:3f:42:5b:7b:70:d9:88:74:0d:5a:5b:cd:7c:15:cb:
         23:2d:f1:0b:a0:c4:96:3c:5d:ef:da:e9:02:23:f8:e7:bc:84:
         93:39:aa:b1:aa:c7:61:4e:44:2c:5e:dc:d6:73:55:6f:7b:74:
         c7:c5:4a:d2:9a:c7:96:2c:f3:b6:d4:b4:6f:1d:75:9b:c7:c3:
         51:aa:09:6e:a7:bd:99:b0:58:f1:ae:97:51:4a:da:58:fd:82:
         ca:b6:14:4f:d2:bb:63:fa:9a:31:52:da:5a:9a:65:d8:f1:59:
         73:85:de:d0:8f:3e:82:69:9b:7e:67:a8:59:bc:5a:0b:ec:f1:
         e9:46:c5:2b:8a:2f:08:a8:63:94:9b:24:1d:1b:17:41:b1:87:
         38:54:03:e1:0c:1b:f5:88:02:8d:4f:ac:d7:60:a5:1d:ad:ba:
         fc:a0:6e:34:23:e7:3f:b1:df:74:15:00:35:89:05:5b:65:80:
         d4:08:ab:70:c9:c7:5a:ca:17:7e:88:14:cb:2d:fb:fa:e3:e5:
         c8:79:15:ef:c7:6d:e6:8e:e0:67:8b:f5:df:31:34:cd:04:ca:
         b8:69:5c:1e:b0:4c:29:d0:0d:49:29:83:1d:32:89:f5:d5:1e:
         b9:21:9e:07:43:8b:f8:ad:45:cd:e7:b2:15:9f:e4:64:bc:2f:
         44:ea:3c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:41 2024 by rpki-client on console-ams.rpki-client.org