Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/34352e3137302e3136302e302f32322d3332203d3e20323638313638.roa
File:                     34352e3137302e3136302e302f32322d3332203d3e20323638313638.roa (raw, json)
Hash identifier:          t/2JkGZmZ3M8XgndAdQor/IdBKkY7rD6qIxkXonTxrk=
Subject key identifier:   A1:51:44:BB:C5:49:8F:96:F8:34:21:3F:A6:05:5A:58:1E:5C:B4:2E
Certificate issuer:       /CN=811DA02DC51058EDFF82D04A170B29D01B686AC4
Certificate serial:       6FC0CD774CD730706CFE3DB7825DD26C845B22AA
Authority key identifier: 81:1D:A0:2D:C5:10:58:ED:FF:82:D0:4A:17:0B:29:D0:1B:68:6A:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/34352e3137302e3136302e302f32322d3332203d3e20323638313638.roa
Signing time:             Thu 04 Apr 2024 18:34:53 +0000
ROA not before:           Thu 04 Apr 2024 18:29:53 +0000
ROA not after:            Thu 03 Apr 2025 18:34:53 +0000
asID:                     268168
IP address blocks:        45.170.160.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.crl
                          rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c0:cd:77:4c:d7:30:70:6c:fe:3d:b7:82:5d:d2:6c:84:5b:22:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811DA02DC51058EDFF82D04A170B29D01B686AC4
        Validity
            Not Before: Apr  4 18:29:53 2024 GMT
            Not After : Apr  3 18:34:53 2025 GMT
        Subject: CN=A15144BBC5498F96F834213FA6055A581E5CB42E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:03:cd:3a:55:a9:43:c3:6b:a7:86:51:21:85:
                    e5:84:86:76:6b:62:ef:b1:f6:82:1b:79:d8:bf:80:
                    96:7b:b8:f2:07:70:93:01:82:5f:cc:0a:2c:c7:20:
                    ff:6c:bc:57:f0:e0:4b:8c:e1:0d:d2:61:0c:5e:84:
                    a2:29:e9:16:fc:d5:23:83:ca:d8:73:63:35:0e:1c:
                    3f:09:68:39:c0:9e:ef:1e:6c:f2:50:a5:5d:e5:23:
                    d6:8e:32:d8:e8:a2:9a:60:cb:58:67:55:64:0d:60:
                    54:21:a8:c7:9a:55:4e:b6:74:95:dd:56:62:4a:ca:
                    1e:b5:ed:29:26:e0:df:ab:d5:ca:82:e0:9e:5b:f2:
                    7e:79:bb:a3:5f:03:22:1b:24:ba:3e:94:97:48:d7:
                    80:06:e6:94:66:d7:93:c5:8e:3f:7b:08:30:9e:77:
                    8a:3f:fe:05:f1:e1:2c:2c:e6:46:a3:fb:6a:e1:48:
                    0c:fb:08:c1:08:6e:a8:8b:b9:7c:dc:1e:66:ce:48:
                    7e:3f:82:f0:e0:fb:5d:cc:04:31:23:f1:f5:7f:3d:
                    42:d6:c5:51:c1:7f:ec:70:a0:59:12:52:b9:63:87:
                    d0:49:d5:74:95:64:4c:67:a9:ff:30:cd:f3:ba:cf:
                    78:27:d3:0f:d0:62:d6:92:5e:7a:70:c2:dd:2c:57:
                    a0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:51:44:BB:C5:49:8F:96:F8:34:21:3F:A6:05:5A:58:1E:5C:B4:2E
            X509v3 Authority Key Identifier:
                keyid:81:1D:A0:2D:C5:10:58:ED:FF:82:D0:4A:17:0B:29:D0:1B:68:6A:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/34352e3137302e3136302e302f32322d3332203d3e20323638313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:cc:f5:49:59:5a:97:0d:f1:1c:02:d3:12:3e:57:48:41:c9:
         a9:fd:8b:2a:c4:6f:c8:84:f9:18:7d:3a:98:88:36:aa:36:6a:
         33:58:e4:cd:e7:9f:cc:35:5b:bd:b5:ff:7d:e3:99:5b:e0:82:
         1a:ac:ca:7b:19:93:c4:62:b0:f6:a5:8a:e3:37:3d:46:e9:61:
         fe:b3:16:db:71:d9:4f:a2:e7:d7:2c:8c:91:ad:5f:b5:36:e9:
         ee:09:86:3d:4c:ed:c4:c9:ce:b3:73:88:87:62:bd:7d:28:db:
         f7:7c:e6:04:2e:20:88:79:11:9e:3c:c1:22:dd:34:e7:5a:fd:
         47:42:71:84:9b:90:c9:0b:ae:b2:dc:28:28:ed:ef:85:bc:d6:
         f3:ed:a7:87:d0:20:06:8a:4c:14:4c:98:93:1a:89:1a:ef:fa:
         72:59:90:23:89:6b:89:70:8b:80:2b:f2:9b:47:0e:3c:b6:f6:
         04:6a:5d:69:9b:69:21:40:d4:64:4f:b7:8f:c2:65:4e:69:45:
         1e:5e:21:8c:64:f8:0e:a4:0f:b2:ce:d0:fa:e9:05:98:77:74:
         70:33:06:45:c1:c0:80:e3:a8:f2:77:e3:02:ea:9b:f4:88:8d:
         ea:41:bb:79:09:24:ca:1f:7b:97:a1:80:4c:47:72:9d:21:be:
         2b:1e:e1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:37 2024 by rpki-client on console-fra.rpki-client.org