Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37392e302f32342d3234203d3e20323639373030.roa
File:                     34352e3139312e37392e302f32342d3234203d3e20323639373030.roa (raw, json)
Hash identifier:          XwwG3eCC6uAVr1KLez1AQnZF2fpFwn4Vp9qw0t8dQss=
Subject key identifier:   8E:6B:00:17:FF:52:34:61:2F:50:CA:8C:5C:06:14:E9:D6:EE:15:63
Certificate issuer:       /CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
Certificate serial:       6E7217A596304B68367C168F3F784AB9C5409B38
Authority key identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37392e302f32342d3234203d3e20323639373030.roa
Signing time:             Wed 03 Apr 2024 18:31:51 +0000
ROA not before:           Wed 03 Apr 2024 18:26:51 +0000
ROA not after:            Wed 02 Apr 2025 18:31:51 +0000
asID:                     269700
IP address blocks:        45.191.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl
                          rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:72:17:a5:96:30:4b:68:36:7c:16:8f:3f:78:4a:b9:c5:40:9b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
        Validity
            Not Before: Apr  3 18:26:51 2024 GMT
            Not After : Apr  2 18:31:51 2025 GMT
        Subject: CN=3082010A0282010100BD88758A06589735FB58F57986ACF47A579CC2CA7B84FC42A0A7ABFD1AF0901D82B708ED5287F2AB85D42A037E39CFFFAB403EB080643EEA8AF8D5254A02A8246E20491DDBA3969F174B34ED865D2B20052B5CC3FE54A584E81AB430BA409A565AC91C09824841BCA123F4BE4CA4D84F0C83ADEBC210909487AB73E3F88B8BB4D39F224120F90E14B46ADF21703C74C4BA23EF414681FEB4AE05B7622B55080F500AAE9D35694AC7DC4DC78CE1BF97B7C9ECA8BD832D8890A386104AC17C5AE676613352E5C9DFD1D9543A7BAB8BFA56818356A58E623D588081B2958434158716C70F915611A18B95E6C7D53AF330F57B9B938826B053C6CF39191DA19699EF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:88:75:8a:06:58:97:35:fb:58:f5:79:86:ac:
                    f4:7a:57:9c:c2:ca:7b:84:fc:42:a0:a7:ab:fd:1a:
                    f0:90:1d:82:b7:08:ed:52:87:f2:ab:85:d4:2a:03:
                    7e:39:cf:ff:ab:40:3e:b0:80:64:3e:ea:8a:f8:d5:
                    25:4a:02:a8:24:6e:20:49:1d:db:a3:96:9f:17:4b:
                    34:ed:86:5d:2b:20:05:2b:5c:c3:fe:54:a5:84:e8:
                    1a:b4:30:ba:40:9a:56:5a:c9:1c:09:82:48:41:bc:
                    a1:23:f4:be:4c:a4:d8:4f:0c:83:ad:eb:c2:10:90:
                    94:87:ab:73:e3:f8:8b:8b:b4:d3:9f:22:41:20:f9:
                    0e:14:b4:6a:df:21:70:3c:74:c4:ba:23:ef:41:46:
                    81:fe:b4:ae:05:b7:62:2b:55:08:0f:50:0a:ae:9d:
                    35:69:4a:c7:dc:4d:c7:8c:e1:bf:97:b7:c9:ec:a8:
                    bd:83:2d:88:90:a3:86:10:4a:c1:7c:5a:e6:76:61:
                    33:52:e5:c9:df:d1:d9:54:3a:7b:ab:8b:fa:56:81:
                    83:56:a5:8e:62:3d:58:80:81:b2:95:84:34:15:87:
                    16:c7:0f:91:56:11:a1:8b:95:e6:c7:d5:3a:f3:30:
                    f5:7b:9b:93:88:26:b0:53:c6:cf:39:19:1d:a1:96:
                    99:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6B:00:17:FF:52:34:61:2F:50:CA:8C:5C:06:14:E9:D6:EE:15:63
            X509v3 Authority Key Identifier:
                keyid:83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37392e302f32342d3234203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:f5:90:a1:06:ed:0a:8b:ce:82:3e:e7:c0:62:a7:68:51:10:
         3a:ae:a2:5a:18:ca:5a:35:e5:f2:1e:be:4f:2c:43:29:70:d9:
         89:39:80:46:e2:0d:4c:83:b3:6c:22:40:fd:05:74:0f:d8:fe:
         99:6e:1a:3e:0d:1e:30:8a:db:1d:58:3c:2a:15:c2:0f:a1:68:
         b3:38:c7:a7:bf:05:0f:90:82:3d:b7:32:73:f7:f8:5c:73:42:
         86:92:2f:79:32:07:45:cd:1e:65:63:86:22:07:c8:a1:d0:04:
         c5:48:74:90:b6:54:9f:88:44:47:f6:19:20:57:0b:f5:20:bc:
         4a:89:b8:21:d4:24:07:43:50:b6:54:b6:e6:fd:b0:76:eb:8e:
         2c:12:64:06:52:6a:07:0a:39:53:9e:f6:78:a8:93:76:01:9a:
         71:d2:85:71:e4:be:3b:fa:44:7b:17:02:1c:ef:a3:fa:18:34:
         dc:bc:21:f2:1c:c0:ec:6a:21:4b:74:ef:98:78:f4:4c:ce:60:
         f0:64:96:b8:e8:6b:59:9c:bb:5a:83:00:4c:57:81:52:3d:d3:
         8a:b0:01:3e:26:7b:ad:ad:97:4b:11:f3:8e:fa:eb:0a:ff:61:
         1f:c5:ac:ba:dc:c7:ea:27:57:cf:75:aa:71:99:2a:c7:58:97:
         7f:b6:b8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org