Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/34352e3136312e3231322e302f32332d3233203d3e2030.roa
File:                     34352e3136312e3231322e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier:          br9QZ58pP6yOPwcDKXZTp6g7uRzGKE9uaM3UgIOW7DQ=
Subject key identifier:   49:8D:DB:9D:1F:1C:B2:32:7D:05:CD:B7:1A:C3:F9:15:C4:49:D9:BC
Certificate issuer:       /CN=7D41250B864CCAC75BADB9B24712630BE0F9C265
Certificate serial:       69B08F98FB790F06DFD60E5B814AF0BAF6F1E55F
Authority key identifier: 7D:41:25:0B:86:4C:CA:C7:5B:AD:B9:B2:47:12:63:0B:E0:F9:C2:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/34352e3136312e3231322e302f32332d3233203d3e2030.roa
Signing time:             Thu 22 Feb 2024 16:47:03 +0000
ROA not before:           Thu 22 Feb 2024 16:42:03 +0000
ROA not after:            Thu 20 Feb 2025 16:47:03 +0000
asID:                     0
IP address blocks:        45.161.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.crl
                          rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Mar 2024 07:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b0:8f:98:fb:79:0f:06:df:d6:0e:5b:81:4a:f0:ba:f6:f1:e5:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D41250B864CCAC75BADB9B24712630BE0F9C265
        Validity
            Not Before: Feb 22 16:42:03 2024 GMT
            Not After : Feb 20 16:47:03 2025 GMT
        Subject: CN=498DDB9D1F1CB2327D05CDB71AC3F915C449D9BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:74:a8:fb:19:6a:3a:4a:6f:12:d7:95:00:
                    64:9c:e4:b3:0c:ce:fd:29:a5:19:c2:13:df:33:41:
                    75:cc:a7:9b:de:e7:52:70:a1:63:c8:ad:e6:c5:26:
                    6a:4b:23:db:25:58:23:15:6d:37:c3:18:23:8b:a6:
                    1a:55:3c:8c:45:5c:b2:92:62:88:f6:d4:23:30:35:
                    02:ee:a0:cd:0c:21:5c:35:ad:d2:f1:66:1a:f4:fb:
                    d3:26:a0:6b:3d:94:99:d0:54:17:41:52:15:eb:66:
                    dc:32:da:43:80:51:ac:f7:68:32:50:25:57:0b:ae:
                    66:82:2b:1b:1d:55:d3:83:8e:54:5b:4e:93:9b:0c:
                    19:5e:ba:b3:bf:c3:bd:1c:f2:90:ad:dc:11:39:26:
                    4a:bf:3f:b6:94:a2:12:74:90:2a:fb:9b:30:be:df:
                    8f:e9:55:2c:30:ae:5a:0d:7c:2d:2d:67:65:0d:d3:
                    d7:93:e2:51:b7:3b:85:87:2e:67:90:1d:8a:80:86:
                    62:73:71:eb:cf:04:db:c1:25:87:f5:11:c2:51:c7:
                    c1:ed:3c:e4:b5:f3:f1:34:62:f9:66:73:d7:d6:94:
                    d4:5d:ae:42:2e:d3:88:6f:f8:9f:d0:83:72:ff:d2:
                    c5:5a:57:07:7f:8a:ab:6b:6f:38:c1:ce:c0:36:f6:
                    fb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8D:DB:9D:1F:1C:B2:32:7D:05:CD:B7:1A:C3:F9:15:C4:49:D9:BC
            X509v3 Authority Key Identifier:
                keyid:7D:41:25:0B:86:4C:CA:C7:5B:AD:B9:B2:47:12:63:0B:E0:F9:C2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/34352e3136312e3231322e302f32332d3233203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:ea:78:1d:51:a2:35:3c:0d:5e:0f:1f:27:5a:28:cc:01:fc:
         2e:6d:45:ca:92:02:96:d6:18:55:ad:92:ee:f4:ee:b4:8c:69:
         d6:5f:33:08:ab:1c:47:e0:e2:38:51:a2:31:24:30:3b:65:fe:
         d7:f4:96:ac:1a:94:7f:fa:c2:b8:7a:ca:35:06:e6:9d:26:af:
         b3:7f:64:a2:a5:4d:d0:f1:88:61:aa:5c:af:23:84:db:de:ab:
         20:f5:8b:3d:fd:28:9f:52:da:b6:d3:a7:1f:08:0c:1e:53:a5:
         40:d6:85:50:26:ec:66:f4:dc:60:ab:fc:6c:7c:be:d7:8c:86:
         b6:db:2f:62:ae:01:c0:1c:38:07:69:52:56:c2:87:f9:0c:bb:
         07:93:41:5d:e4:e7:c4:a3:6c:b7:08:3b:19:b7:fd:38:7a:51:
         db:99:16:6c:b9:38:b4:43:49:d4:26:db:35:a3:95:b6:53:20:
         17:4a:b6:a2:8c:a9:c6:4e:9a:e1:b4:be:24:d0:8c:1e:0e:9e:
         31:db:9b:36:a3:64:3b:a8:08:f7:de:60:3b:8c:fe:2a:71:b0:
         ac:db:3c:b0:a3:ff:32:a2:63:61:7e:b2:9b:4f:b3:fb:cb:0b:
         3e:2f:f3:28:7c:6d:0e:31:07:7d:11:52:0c:05:85:27:98:61:
         c5:ef:59:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 11:25:59 2024 by rpki-client on console-fra.rpki-client.org