Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136372e302f32342d3234203d3e20323638343132.roa
File:                     34352e3136302e3136372e302f32342d3234203d3e20323638343132.roa (raw, json)
Hash identifier:          T02aEqbQE+eWp0O64/7lW6O4k3xVhtIs5fui6b0dj5s=
Subject key identifier:   A3:A1:AE:63:6E:B6:BB:76:EB:39:1E:B1:64:C1:52:45:B3:12:CD:3F
Certificate issuer:       /CN=68048497B89FF318156BA3D021C73EDE420ED5C8
Certificate serial:       0E09A608EAEFDBEF731986155CE075478EF42593
Authority key identifier: 68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136372e302f32342d3234203d3e20323638343132.roa
Signing time:             Thu 04 Apr 2024 06:57:16 +0000
ROA not before:           Thu 04 Apr 2024 06:52:16 +0000
ROA not after:            Thu 03 Apr 2025 06:57:16 +0000
asID:                     268412
IP address blocks:        45.160.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl
                          rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:09:a6:08:ea:ef:db:ef:73:19:86:15:5c:e0:75:47:8e:f4:25:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68048497B89FF318156BA3D021C73EDE420ED5C8
        Validity
            Not Before: Apr  4 06:52:16 2024 GMT
            Not After : Apr  3 06:57:16 2025 GMT
        Subject: CN=A3A1AE636EB6BB76EB391EB164C15245B312CD3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:14:c6:96:31:5d:3b:1b:69:9f:4a:6d:79:
                    be:01:a8:9f:9c:e4:d7:c4:9b:2e:d7:fe:2b:12:59:
                    8e:fc:a7:63:db:a9:ec:c1:d3:ae:9b:8f:02:41:9d:
                    91:ec:43:a3:61:4b:43:51:cd:82:8f:3f:38:b1:5a:
                    40:e5:71:79:6a:33:a0:ef:ad:75:86:71:cf:33:05:
                    4a:ac:49:bf:ce:79:ce:6c:c0:b7:5a:05:ee:e7:9f:
                    c8:3b:ea:42:5c:4e:f7:ac:66:09:ba:a7:96:9e:32:
                    b6:26:e4:fa:3b:d3:89:3d:71:f7:8b:c6:2e:35:f8:
                    f6:63:16:ff:94:f0:1c:cd:8f:24:f6:f2:b3:65:ce:
                    10:a9:d3:9d:4c:72:7e:cd:e8:23:7d:41:1d:e5:ad:
                    a1:0e:f7:47:ff:9e:da:6b:77:26:ca:d1:65:1e:f0:
                    59:d2:37:4d:04:c6:84:f1:95:3b:df:31:a8:24:dd:
                    cf:4f:e6:0a:4a:84:4a:60:d0:64:53:73:3c:08:52:
                    7f:cd:d5:8a:59:f2:57:b1:4b:5f:5d:5f:49:d0:80:
                    9c:75:2d:59:af:dd:6a:6f:38:c2:0d:83:7e:6b:c4:
                    52:da:45:e6:05:04:58:bd:39:ae:4f:e8:65:c3:93:
                    d4:2d:f0:be:d9:af:68:28:24:9c:ca:a8:48:85:f8:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A1:AE:63:6E:B6:BB:76:EB:39:1E:B1:64:C1:52:45:B3:12:CD:3F
            X509v3 Authority Key Identifier:
                keyid:68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136372e302f32342d3234203d3e20323638343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:e4:77:9b:95:e7:e6:dc:c6:2b:cb:44:e4:76:29:38:02:a7:
         41:4b:7f:7e:fd:d7:36:bd:71:5a:a1:d6:38:eb:07:aa:e0:95:
         c1:50:52:5c:e3:43:27:e8:07:ee:67:c6:e2:15:a4:2f:d1:3a:
         01:16:06:47:75:42:0a:36:44:0a:13:d8:48:5e:a9:be:e5:76:
         b5:24:0a:a2:16:a2:8f:4b:77:b3:6b:58:58:c7:ac:05:16:8f:
         f7:75:e0:b6:c2:8a:4f:78:81:f7:36:6e:c0:6b:b2:a5:1e:18:
         69:0e:db:9a:65:8f:77:b8:62:00:85:82:c0:a3:12:29:32:8c:
         61:0c:38:62:d0:34:7a:05:5e:70:58:0d:1d:2c:8f:77:fe:6c:
         3e:4c:64:fa:11:b7:cf:6c:e0:ed:33:ef:93:c3:0c:d6:31:4e:
         87:ea:87:08:64:f9:75:23:26:5b:eb:f1:b7:f2:68:7e:7c:3c:
         82:91:05:eb:5f:fc:54:bd:5b:47:b1:42:9d:8f:21:d8:1c:91:
         18:15:5b:c9:7a:75:4b:27:77:0a:6d:70:aa:00:e7:64:1a:9d:
         78:bf:56:9d:81:ac:98:ec:01:06:04:74:5b:c1:9b:4b:82:c0:
         73:f9:62:37:aa:03:df:a3:fe:3c:93:74:48:e0:3d:b4:c9:f5:
         08:7e:d6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:18:14 2024 by rpki-client on console-ams.rpki-client.org