Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37382e302f32332d3233203d3e20323639373030.roa
File:                     34352e3139312e37382e302f32332d3233203d3e20323639373030.roa (raw, json)
Hash identifier:          g7WgxBrPU7WZzL7omYKuFuRZx3L/mxYhsT7HwQN7aPY=
Subject key identifier:   96:19:EB:49:85:62:18:B9:85:43:23:E2:E6:0E:06:0F:E4:2F:1A:DC
Certificate issuer:       /CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
Certificate serial:       04E26D6D0D0F2D612D9D4E26A9AFB76D6900A369
Authority key identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37382e302f32332d3233203d3e20323639373030.roa
Signing time:             Wed 03 Apr 2024 18:31:52 +0000
ROA not before:           Wed 03 Apr 2024 18:26:52 +0000
ROA not after:            Wed 02 Apr 2025 18:31:52 +0000
asID:                     269700
IP address blocks:        45.191.78.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl
                          rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e2:6d:6d:0d:0f:2d:61:2d:9d:4e:26:a9:af:b7:6d:69:00:a3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
        Validity
            Not Before: Apr  3 18:26:52 2024 GMT
            Not After : Apr  2 18:31:52 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:65:a1:10:71:3e:e1:65:b4:83:e8:4d:b7:06:
                    e6:d3:df:ee:65:1b:4d:ce:89:37:c9:11:a8:54:74:
                    b7:99:da:ca:b6:06:d3:54:5a:e2:5a:7f:bc:d0:ec:
                    76:4c:1f:54:d8:e4:3b:29:20:82:fc:4c:05:d3:f0:
                    3d:b5:c7:fc:5f:00:e8:b9:74:41:8b:31:85:9a:6e:
                    28:af:b3:e6:87:8d:b4:9d:94:78:4c:bb:a0:1f:9f:
                    92:ef:ea:81:c0:8f:9b:df:09:b9:64:0a:10:0c:0b:
                    d2:20:2b:dd:17:9a:5a:27:40:ba:d1:e1:7d:2a:36:
                    65:c2:33:90:40:e1:d1:9f:3c:53:5e:5d:ac:53:f5:
                    8d:ee:7b:f6:cf:3e:d8:32:07:03:76:07:67:3f:ba:
                    20:8e:23:62:87:a4:55:8a:17:20:e4:48:37:92:c4:
                    64:18:10:63:cb:f7:d8:50:21:ec:7c:f0:81:6f:2b:
                    fd:59:56:23:9a:8a:8a:ad:52:bb:00:fd:54:bf:b1:
                    78:a6:de:dd:9d:4c:52:2e:01:66:de:5b:c2:66:aa:
                    66:07:3d:19:91:60:66:39:3d:b3:8a:0c:dc:42:7c:
                    fd:e7:b2:72:94:34:79:96:71:53:94:d5:31:cf:92:
                    5b:e0:cd:75:8b:83:b9:a3:f3:82:30:44:3a:68:83:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:19:EB:49:85:62:18:B9:85:43:23:E2:E6:0E:06:0F:E4:2F:1A:DC
            X509v3 Authority Key Identifier:
                keyid:83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37382e302f32332d3233203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:d8:1e:ba:dd:d3:33:0e:0e:f3:55:b9:7a:69:43:a7:f1:97:
         d8:84:c9:b3:16:31:dd:a6:e5:8c:78:a8:31:39:f9:a6:4d:6c:
         ae:29:e2:f0:b3:6f:29:1d:90:98:10:e1:70:45:ff:f2:bf:6b:
         78:ad:51:c4:39:29:fb:cb:43:31:9e:45:e8:8b:e9:4d:51:c9:
         33:f5:71:47:1e:71:13:cb:f3:2f:9c:ba:e7:e3:62:9f:45:80:
         c0:da:c8:03:67:b3:81:b7:3d:c9:2e:4c:ad:a0:6c:d0:2e:a7:
         7e:43:29:c4:1f:19:d4:8c:0b:f3:39:bc:24:a6:88:20:bb:2d:
         01:ae:4c:aa:1c:04:bc:42:23:82:15:42:45:07:2d:c7:6a:b9:
         94:64:c6:04:fb:01:12:3c:6c:95:ac:fb:94:d3:da:4f:69:dc:
         1d:1e:56:3a:b2:ff:9a:df:96:98:37:ee:73:3a:bc:61:dd:b9:
         1b:d2:c4:1f:fa:1d:09:dc:65:b5:e7:e2:a2:9d:b4:fa:fe:72:
         22:d4:ef:01:e8:5e:77:18:1c:d5:17:31:f6:3e:9d:67:fc:c6:
         46:22:99:0c:c9:50:65:f6:19:6e:0a:39:04:bb:2d:d1:fa:8c:
         85:4f:dd:11:91:f5:b3:62:fe:2f:92:5d:b7:70:3e:03:a2:d5:
         2b:b0:f3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:05 2024 by rpki-client on console-fra.rpki-client.org