Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37322e302f32322d3332203d3e20323638343439.roa
File:                     34352e3136312e37322e302f32322d3332203d3e20323638343439.roa (raw, json)
Hash identifier:          zAn1qOZ9n78ahUJASXYoTNIQ5Gx5qj3HDdM0RWpF6/k=
Subject key identifier:   FD:B7:BF:AD:BC:CA:35:14:50:F7:DA:D6:5F:83:2B:E1:E4:D1:F2:F1
Certificate issuer:       /CN=72D4C5EE34A043798ED938051AE717D10692045C
Certificate serial:       0E78163B55C5B347B986C5AD957AD5765EE28018
Authority key identifier: 72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37322e302f32322d3332203d3e20323638343439.roa
Signing time:             Mon 23 Sep 2024 18:17:48 +0000
ROA not before:           Mon 23 Sep 2024 18:12:48 +0000
ROA not after:            Mon 22 Sep 2025 18:17:48 +0000
asID:                     268449
IP address blocks:        45.161.72.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl
                          rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:78:16:3b:55:c5:b3:47:b9:86:c5:ad:95:7a:d5:76:5e:e2:80:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D4C5EE34A043798ED938051AE717D10692045C
        Validity
            Not Before: Sep 23 18:12:48 2024 GMT
            Not After : Sep 22 18:17:48 2025 GMT
        Subject: CN=FDB7BFADBCCA351450F7DAD65F832BE1E4D1F2F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:2c:8c:12:c7:cc:52:04:3f:40:5f:31:9b:
                    9a:7e:65:28:cf:b9:25:b2:e9:aa:ed:4c:5a:d1:ac:
                    da:ff:37:82:39:b1:bb:88:60:17:cc:de:65:0f:db:
                    1d:d7:9e:c7:6c:19:6b:75:e8:a4:0a:1e:21:a0:2e:
                    b3:92:d2:c3:95:e0:c4:9d:29:cc:d4:65:1b:88:2c:
                    0e:ae:ff:dd:29:20:68:cd:7d:3a:76:cf:d7:33:da:
                    f7:73:5f:ff:81:63:51:34:a6:fe:d7:34:a6:46:95:
                    9f:f3:2c:d1:78:6e:6b:f5:85:ff:25:10:38:a3:44:
                    47:98:39:56:ce:93:6f:57:f7:6d:bc:9e:12:e1:6d:
                    26:06:f7:f6:8c:9e:2b:00:bf:64:4b:0a:70:03:67:
                    a4:19:5d:a2:23:bb:e5:7f:eb:03:6d:02:61:3f:9c:
                    e8:fe:dd:17:19:25:d3:a8:40:77:b2:ce:6e:d3:7e:
                    0e:b2:ab:33:0b:43:7f:b6:28:7a:a4:c5:4f:35:d4:
                    fe:62:c2:8b:81:27:c1:d9:eb:89:fc:3b:2b:b4:66:
                    22:77:22:7f:60:5a:06:c8:79:ff:68:3f:2c:97:8a:
                    94:99:ef:24:41:a9:f9:5d:2e:1a:56:8a:8d:2a:a1:
                    af:2c:02:52:1c:d7:3e:a5:59:76:cb:5a:c9:9e:a2:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B7:BF:AD:BC:CA:35:14:50:F7:DA:D6:5F:83:2B:E1:E4:D1:F2:F1
            X509v3 Authority Key Identifier:
                keyid:72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37322e302f32322d3332203d3e20323638343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:df:f8:9d:7c:49:bc:74:3d:d3:ce:28:14:50:ad:cd:01:61:
         3e:0e:73:b9:f7:7c:fa:9b:47:03:7b:33:9e:91:3f:dc:b2:80:
         68:4d:43:c4:3d:f3:4e:17:7c:8f:5e:2b:de:c5:30:cd:60:ec:
         4b:c2:f1:ae:ba:2d:5b:93:b4:e6:0c:90:8e:3f:ce:49:7e:db:
         a2:a4:50:9a:ff:0f:75:8e:dd:5e:ac:38:b1:ac:d9:4a:17:ce:
         79:db:68:f1:9b:1f:01:6a:f4:1c:fe:40:02:a4:91:3c:de:61:
         ef:44:96:09:bb:90:40:6f:54:98:ca:f4:40:a3:40:c3:22:ce:
         03:e1:8c:ed:88:6b:f8:9d:4c:0f:67:0e:3c:51:7c:69:1b:77:
         1f:56:ab:13:30:bd:76:4c:78:35:fd:da:6e:97:71:c0:75:ec:
         57:a9:95:81:56:aa:79:13:88:69:c9:5f:84:95:2b:7f:83:59:
         48:af:ff:6f:ad:6d:2f:37:91:1d:e1:ba:dd:0b:72:2a:64:7d:
         f0:5f:b6:5d:34:f9:a5:39:39:e1:56:a6:27:5a:9a:17:06:a2:
         e1:47:6d:ac:31:75:03:5c:08:f0:d5:15:42:5d:9f:5b:b4:08:
         85:15:40:c8:b8:09:69:72:07:a6:fe:34:0b:f2:f1:ac:89:67:
         ef:ec:7b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:08 2024 by rpki-client on console-ams.rpki-client.org