Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37382e302f32342d3234203d3e20323639373030.roa
File:                     34352e3139312e37382e302f32342d3234203d3e20323639373030.roa (raw, json)
Hash identifier:          deCd/1Yws0iREOlRqroPfhFJK5NhNcuffKiJlQc/IpE=
Subject key identifier:   ED:89:07:15:D3:EC:DB:30:30:95:D8:A5:F9:74:46:C8:13:A9:71:00
Certificate issuer:       /CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
Certificate serial:       31F0D8A2DFF704505551A88652E7CCBE6E831D80
Authority key identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37382e302f32342d3234203d3e20323639373030.roa
Signing time:             Wed 03 Apr 2024 18:31:51 +0000
ROA not before:           Wed 03 Apr 2024 18:26:51 +0000
ROA not after:            Wed 02 Apr 2025 18:31:51 +0000
asID:                     269700
IP address blocks:        45.191.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl
                          rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f0:d8:a2:df:f7:04:50:55:51:a8:86:52:e7:cc:be:6e:83:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
        Validity
            Not Before: Apr  3 18:26:51 2024 GMT
            Not After : Apr  2 18:31:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bc:8b:44:12:3e:14:fb:3d:b1:b9:de:1b:74:
                    e5:9c:87:fa:ee:e1:49:ec:1a:32:44:bc:7a:a9:d6:
                    6a:75:c5:c5:1e:1b:79:07:eb:f6:f0:d4:29:b5:0f:
                    1d:5d:29:4a:ad:03:ff:92:da:8d:d6:70:14:be:32:
                    db:e5:6c:7e:5d:90:3f:0e:63:14:c8:1c:24:10:c5:
                    c1:79:c9:65:fc:06:6b:d0:9e:ae:5f:67:89:f6:2e:
                    68:b3:c8:d3:c3:27:1e:fb:8e:48:38:fe:2b:d2:bd:
                    c4:04:b3:d8:fc:8b:d6:29:d4:64:6d:6e:f7:29:d8:
                    e4:f4:61:17:47:5b:13:a7:8f:2a:51:55:7f:00:6b:
                    ea:02:4d:7b:14:f1:27:bb:05:00:12:8b:68:91:63:
                    31:0e:45:08:07:22:12:6d:32:64:22:1f:71:6b:8d:
                    d6:d0:c0:52:df:5d:12:fd:69:9b:2c:21:35:73:27:
                    05:bf:96:23:b5:77:aa:ea:52:30:57:d6:2c:b4:a8:
                    8f:dd:d2:23:fb:3e:04:dc:de:f9:92:94:c1:a9:1a:
                    f6:58:a9:84:af:4b:50:8c:c0:e0:f8:64:36:77:af:
                    97:ac:0e:e4:e8:46:29:1f:22:5a:6e:84:c8:62:61:
                    ab:22:32:75:e8:0e:36:75:09:e1:7a:9d:ca:07:9b:
                    e1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:89:07:15:D3:EC:DB:30:30:95:D8:A5:F9:74:46:C8:13:A9:71:00
            X509v3 Authority Key Identifier:
                keyid:83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37382e302f32342d3234203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:47:ac:62:3f:13:05:0d:9b:b2:19:41:0f:67:23:1a:16:0e:
         b4:fb:7c:4e:83:69:b8:f2:45:82:9a:31:48:ff:ad:06:0a:f4:
         f4:93:9b:7c:31:3e:36:2c:ab:75:40:3f:1f:62:53:11:80:5b:
         bf:2f:3d:09:a2:f6:e0:41:7f:85:5c:bb:d5:75:f2:24:88:62:
         2e:bc:33:54:e5:09:a1:d1:67:7c:2d:97:05:a2:f8:df:59:81:
         5a:91:42:0a:e4:c2:47:1b:ee:b2:71:7a:25:53:00:36:b5:3a:
         b8:52:e9:6c:53:18:ae:52:28:96:af:56:f2:01:06:84:a7:a7:
         4b:76:da:d5:30:56:71:3b:99:eb:8a:98:c5:97:aa:c0:ce:4a:
         97:e2:e2:8a:5e:67:18:28:53:a5:bd:1b:8a:64:5b:29:70:3c:
         1b:35:b6:1c:5f:93:21:3d:2f:12:21:71:1d:f3:7a:ba:87:62:
         20:3f:6b:57:a5:71:5c:42:0f:b9:7e:74:c8:99:b6:5f:03:f4:
         eb:26:81:71:1c:f8:2b:76:01:54:e1:33:3c:7b:99:03:48:a3:
         9a:ae:bd:95:a1:ae:45:e1:02:c7:b0:bd:56:88:cb:62:e3:06:
         69:e7:b2:2a:e4:ef:fe:b0:b9:96:ed:cc:3a:6c:03:0f:5b:8d:
         66:f8:bf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org