Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136352e302f32342d3234203d3e20323638343132.roa
File:                     34352e3136302e3136352e302f32342d3234203d3e20323638343132.roa (raw, json)
Hash identifier:          k4D/7flzFJfZzdKTk614VWwUg3mu/x0JKpu9sXnixkI=
Subject key identifier:   21:CE:A4:CB:B0:4A:F5:A4:86:14:F4:27:FE:59:92:C1:BC:EA:71:29
Certificate issuer:       /CN=68048497B89FF318156BA3D021C73EDE420ED5C8
Certificate serial:       08BB05BEC9CFD72C942A0B81A72AED652342940D
Authority key identifier: 68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136352e302f32342d3234203d3e20323638343132.roa
Signing time:             Thu 04 Apr 2024 06:57:16 +0000
ROA not before:           Thu 04 Apr 2024 06:52:16 +0000
ROA not after:            Thu 03 Apr 2025 06:57:16 +0000
asID:                     268412
IP address blocks:        45.160.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl
                          rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:bb:05:be:c9:cf:d7:2c:94:2a:0b:81:a7:2a:ed:65:23:42:94:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68048497B89FF318156BA3D021C73EDE420ED5C8
        Validity
            Not Before: Apr  4 06:52:16 2024 GMT
            Not After : Apr  3 06:57:16 2025 GMT
        Subject: CN=21CEA4CBB04AF5A48614F427FE5992C1BCEA7129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:e1:cb:29:d0:09:6e:6f:98:3f:81:76:4b:
                    37:af:3d:34:ad:ba:b7:58:59:27:8e:14:c8:60:40:
                    39:4a:f1:59:bf:85:14:0a:25:fb:05:7a:ef:94:45:
                    ff:8d:93:44:78:4d:0a:28:72:3b:43:37:49:79:5d:
                    55:25:47:65:9e:0a:77:4c:c2:b2:ef:74:47:67:2e:
                    13:d1:98:51:c3:24:25:c1:92:55:17:fe:94:21:c2:
                    39:4f:1b:ee:bc:af:ee:fe:94:8e:3d:9b:6e:59:3b:
                    3f:4d:f7:60:16:d6:22:3c:05:db:86:7a:2b:fc:42:
                    dd:05:21:0d:11:0b:e5:0b:73:f1:85:a5:40:e8:93:
                    67:0b:98:42:d2:11:70:a5:b1:ff:a0:0f:68:6b:71:
                    b8:c2:b6:8a:24:2a:10:50:10:0b:09:c4:cf:7b:ba:
                    03:10:a3:2e:95:06:52:a8:51:ee:d7:9b:36:7c:02:
                    27:c0:ca:5a:a9:5c:6e:73:eb:cb:cf:f2:6e:3a:bc:
                    09:c7:19:46:0d:45:ae:80:52:70:82:1a:e8:a5:4b:
                    b2:40:9b:fe:f5:e7:03:23:f8:4d:a1:a5:4b:73:fb:
                    aa:04:c4:f1:23:e5:4e:13:19:fd:88:b7:6d:1b:b1:
                    6f:47:4c:a2:e4:7f:ea:66:a9:c9:9b:cd:8e:28:02:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CE:A4:CB:B0:4A:F5:A4:86:14:F4:27:FE:59:92:C1:BC:EA:71:29
            X509v3 Authority Key Identifier:
                keyid:68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136352e302f32342d3234203d3e20323638343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:81:1e:4b:46:82:c3:3c:8b:c5:32:c4:fe:58:0b:76:29:84:
         20:86:89:ed:26:ca:da:9f:4c:c1:0e:a0:6d:17:7c:76:0e:9d:
         bd:6c:5e:ba:ba:3f:7d:76:fa:5b:9b:30:3e:d0:b7:7d:81:e9:
         7f:89:cf:69:95:71:cd:85:9b:20:c7:d4:ef:45:20:74:ff:1b:
         48:5b:88:07:b0:b5:30:18:94:20:e5:35:83:db:b4:0f:1f:e0:
         6e:cf:56:c8:d1:78:7d:f2:2b:6f:7e:ce:ef:b9:e8:0c:e4:c2:
         f3:f1:29:f8:97:8a:26:37:dd:9c:6b:32:f2:b7:e9:0d:d3:a9:
         f9:12:8c:eb:41:68:61:ef:66:eb:29:26:b7:05:b4:03:ff:25:
         4a:b7:4a:75:6f:59:41:0a:b5:4a:4f:07:25:1d:1f:f6:d3:f9:
         ef:75:41:e8:07:2a:eb:2d:b3:cf:0c:8e:19:ff:df:9a:c1:22:
         b9:37:0a:67:42:95:a9:3e:3b:aa:0c:92:30:7e:0b:b2:98:3f:
         1c:e9:f8:ef:da:3f:e4:3e:93:c4:7c:00:17:9d:ac:b4:be:6d:
         46:7e:1d:d7:dd:f2:b0:45:7f:c9:3b:de:7c:47:25:7e:80:a8:
         b5:2c:1b:fd:48:44:1f:7e:b4:a9:24:be:80:27:64:2c:43:ca:
         0e:c9:ad:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:52 2024 by rpki-client on console-fra.rpki-client.org