Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37372e302f32342d3234203d3e20323639373030.roa
File:                     34352e3139312e37372e302f32342d3234203d3e20323639373030.roa (raw, json)
Hash identifier:          zcouvIUbkvg5qDj1prE27TM165jymx4CieAX2wzVpTk=
Subject key identifier:   18:8A:74:0F:2B:0E:18:41:EE:CF:5E:D7:CE:FA:9A:20:0E:97:CB:66
Certificate issuer:       /CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
Certificate serial:       65CA610DD16DB3753C8848A3B9E6A5583A00C31B
Authority key identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37372e302f32342d3234203d3e20323639373030.roa
Signing time:             Wed 03 Apr 2024 18:31:50 +0000
ROA not before:           Wed 03 Apr 2024 18:26:50 +0000
ROA not after:            Wed 02 Apr 2025 18:31:50 +0000
asID:                     269700
IP address blocks:        45.191.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl
                          rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ca:61:0d:d1:6d:b3:75:3c:88:48:a3:b9:e6:a5:58:3a:00:c3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
        Validity
            Not Before: Apr  3 18:26:50 2024 GMT
            Not After : Apr  2 18:31:50 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f4:ef:34:dc:c0:ee:15:a0:9c:c0:d1:83:9d:
                    4f:54:13:3a:24:e2:84:e2:83:3b:ba:4f:7b:df:57:
                    b1:28:40:b9:db:37:9e:dc:10:74:a2:39:f2:7a:ae:
                    2c:7c:15:51:9d:1d:d7:68:f6:e5:24:d1:41:81:0b:
                    83:68:2b:d2:01:52:05:a7:0a:a9:02:9a:01:db:f1:
                    73:36:25:0c:9b:67:5e:2a:a4:9f:11:33:e6:51:10:
                    a7:49:a9:65:b9:3c:4e:89:01:80:3f:a8:0f:50:a8:
                    ac:c9:d9:80:cf:21:01:8b:a9:15:de:9a:a9:4a:12:
                    3b:39:d9:6f:99:86:37:ae:5d:7c:b5:fe:5e:25:92:
                    85:73:8b:62:72:06:66:66:33:75:7a:c9:c9:3d:e9:
                    33:d7:70:66:82:f9:f4:3a:87:e7:e4:d6:b5:3f:0e:
                    7b:ad:ad:79:e8:4c:6b:c6:34:d0:79:09:11:7b:98:
                    f6:98:1b:9e:3a:e1:8a:e2:29:e0:e3:47:41:66:8a:
                    d7:0d:1f:1a:c0:19:3b:7c:78:7c:3d:da:42:2a:d7:
                    52:5d:23:f6:7b:0c:1a:4a:c1:a1:e8:e5:bc:ce:35:
                    49:13:16:43:f2:0b:12:4e:1c:fd:b0:d4:65:39:53:
                    b4:03:79:1c:96:e2:ee:1c:bb:91:16:cd:3f:e2:19:
                    21:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8A:74:0F:2B:0E:18:41:EE:CF:5E:D7:CE:FA:9A:20:0E:97:CB:66
            X509v3 Authority Key Identifier:
                keyid:83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37372e302f32342d3234203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:68:8a:c3:b3:06:3e:6b:2c:2f:13:b0:00:b5:6a:7d:36:29:
         2f:b6:21:92:09:c9:cc:db:c4:e7:6b:bf:18:b7:d4:92:09:b9:
         b7:d2:b9:3c:69:28:0d:a3:df:d4:08:48:05:0b:e8:f1:aa:df:
         31:62:e5:da:e3:99:f8:3c:27:c8:2a:84:ef:9f:16:2f:e1:8a:
         40:37:dc:c1:8e:f1:9e:97:73:35:c2:85:44:26:b4:c2:d0:ef:
         cb:54:2b:0a:66:7e:ee:54:aa:74:19:f4:22:24:bb:57:2f:26:
         0c:8b:5d:32:e3:38:a6:da:9a:f9:c1:d8:ac:63:24:e9:bc:73:
         1d:60:25:b7:f6:ab:f1:9d:dc:4b:d7:86:e1:0c:36:d3:94:00:
         00:55:16:44:6b:ea:c5:44:68:1f:06:07:18:99:c5:73:b6:d1:
         9b:52:e0:06:c9:ab:c2:dc:d5:ca:80:75:fc:c3:47:74:4c:52:
         55:7c:86:7b:7c:c1:aa:60:0c:6c:c5:0e:10:c8:8d:c6:0a:55:
         8d:87:f9:4b:66:b0:0e:5f:09:72:3e:d1:6c:22:a4:d0:66:66:
         8e:60:e6:ea:95:f9:8c:76:9b:22:43:9a:71:95:63:d5:a3:56:
         2e:0e:3d:78:20:64:b0:b6:9c:a6:6c:d9:8a:2a:90:17:04:f3:
         55:77:e2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org