Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/1/34352e3137392e3132302e302f32342d3234203d3e20323639303834.roa
File:                     34352e3137392e3132302e302f32342d3234203d3e20323639303834.roa (raw, json)
Hash identifier:          eIkJdT6GV2HVSWdDsGC1gwvjUDgj/ey5lXHxgNhphsE=
Subject key identifier:   29:D1:90:4F:68:F5:F3:DF:ED:3A:3C:E0:5B:C3:23:1D:CC:D8:B3:55
Certificate issuer:       /CN=0660AD3206B956788A419C5683098FF0D4DA723B
Certificate serial:       3E4EF5D04C571D53F7552A7657AF2BDD86BDFF43
Authority key identifier: 06:60:AD:32:06:B9:56:78:8A:41:9C:56:83:09:8F:F0:D4:DA:72:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0660AD3206B956788A419C5683098FF0D4DA723B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/1/34352e3137392e3132302e302f32342d3234203d3e20323639303834.roa
Signing time:             Thu 04 Apr 2024 00:36:10 +0000
ROA not before:           Thu 04 Apr 2024 00:31:10 +0000
ROA not after:            Thu 03 Apr 2025 00:36:10 +0000
asID:                     269084
IP address blocks:        45.179.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/1/0660AD3206B956788A419C5683098FF0D4DA723B.crl
                          rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/1/0660AD3206B956788A419C5683098FF0D4DA723B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0660AD3206B956788A419C5683098FF0D4DA723B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 11:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4e:f5:d0:4c:57:1d:53:f7:55:2a:76:57:af:2b:dd:86:bd:ff:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0660AD3206B956788A419C5683098FF0D4DA723B
        Validity
            Not Before: Apr  4 00:31:10 2024 GMT
            Not After : Apr  3 00:36:10 2025 GMT
        Subject: CN=29D1904F68F5F3DFED3A3CE05BC3231DCCD8B355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:26:8b:0d:f5:e5:75:a0:92:43:e0:74:5e:
                    af:51:89:1a:a9:f7:8b:fa:af:e8:76:36:a8:d6:75:
                    16:87:97:b8:08:82:7a:de:5d:05:fd:68:39:7c:93:
                    44:86:16:de:e6:df:57:93:67:e9:2e:9d:c5:27:55:
                    27:8b:c4:7d:27:81:4a:83:5a:23:2c:63:6d:0b:18:
                    c8:3d:24:48:75:9b:3f:05:cd:de:39:a0:8a:27:bd:
                    dd:21:22:97:67:e7:62:6a:21:09:9d:9e:6c:39:ab:
                    dd:b4:25:c2:38:a9:4f:a7:54:e0:60:9d:c9:7e:ce:
                    a4:ee:b3:04:e6:0c:aa:5d:e3:77:3d:8a:0d:d1:32:
                    57:db:db:49:ef:60:f0:e5:ab:2c:4c:e9:26:fc:30:
                    67:94:10:43:73:89:1b:97:63:6b:6c:6a:7d:d1:31:
                    ab:77:5f:1f:16:23:ae:79:fd:60:d6:6d:ab:21:e9:
                    3a:de:cd:af:45:e4:e0:00:3e:0e:85:7e:3a:e6:5c:
                    42:97:6e:c8:ac:ff:59:7f:43:b5:53:14:40:e2:7a:
                    8a:47:bb:51:33:0d:53:18:09:0e:90:f2:0f:a9:a0:
                    ce:58:8b:ea:46:97:1b:7e:fe:0e:1e:9a:fd:7c:9f:
                    bb:c4:2d:a0:7d:41:06:92:66:1d:01:81:ae:2b:05:
                    c8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D1:90:4F:68:F5:F3:DF:ED:3A:3C:E0:5B:C3:23:1D:CC:D8:B3:55
            X509v3 Authority Key Identifier:
                keyid:06:60:AD:32:06:B9:56:78:8A:41:9C:56:83:09:8F:F0:D4:DA:72:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/1/0660AD3206B956788A419C5683098FF0D4DA723B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0660AD3206B956788A419C5683098FF0D4DA723B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/1/34352e3137392e3132302e302f32342d3234203d3e20323639303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:a4:6c:3e:63:e8:6f:25:4d:86:e9:7f:7f:16:e0:03:36:25:
         ca:9a:92:f3:31:55:ef:67:15:27:84:47:c2:10:b1:19:a7:a5:
         2a:99:5f:13:76:47:50:89:da:90:29:b6:ad:3e:1e:4b:b9:da:
         f7:67:b5:1c:0a:98:f4:61:d6:1b:c3:5c:e8:97:7b:d2:58:4c:
         aa:cf:5b:b1:8f:a6:9a:2e:74:4c:f8:e8:0b:34:99:47:a7:8e:
         ea:e6:86:16:4a:74:01:7b:1b:d9:fe:9b:60:2f:6d:44:47:31:
         8a:31:aa:09:9f:b6:68:34:34:b3:86:bf:67:e7:38:77:a8:d7:
         31:70:55:59:e4:c0:c4:40:2d:64:99:aa:05:7f:ac:f0:16:d3:
         df:fe:23:a4:18:9b:58:e7:9e:a9:88:f8:e6:aa:ee:c0:df:35:
         79:08:eb:69:ed:3f:c7:a2:b7:3e:a0:0e:32:12:35:d4:e7:5d:
         85:b6:57:55:04:10:78:c7:c0:26:97:a1:0b:c0:d7:49:d5:b3:
         c8:7e:8c:a1:20:d0:7b:2b:cd:6a:55:da:22:72:fa:72:7b:dc:
         c9:3b:bb:e9:71:b5:a0:51:57:f5:a5:58:32:fc:d7:f1:51:6a:
         f5:d6:7c:92:d1:dc:f6:42:3e:54:56:23:98:13:1a:55:5a:bf:
         67:08:24:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:07 2024 by rpki-client on console-ams.rpki-client.org