Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/34352e3137332e3135362e302f32342d3234203d3e20323733343730.roa
File:                     34352e3137332e3135362e302f32342d3234203d3e20323733343730.roa (raw, json)
Hash identifier:          hV/ryzJRch8GY5fVKxluMujmhF7FZWjFrPRQZHx1ct4=
Subject key identifier:   FE:70:1B:E3:ED:41:3E:41:FE:86:35:87:F5:F8:94:70:DA:21:84:16
Certificate issuer:       /CN=16136D1772326C3F142FBE6A7E352B966E2C293D
Certificate serial:       34E251E418054F2F474FA0847D85E7D0B12B4E7F
Authority key identifier: 16:13:6D:17:72:32:6C:3F:14:2F:BE:6A:7E:35:2B:96:6E:2C:29:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16136D1772326C3F142FBE6A7E352B966E2C293D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/34352e3137332e3135362e302f32342d3234203d3e20323733343730.roa
Signing time:             Thu 06 Jun 2024 17:53:52 +0000
ROA not before:           Thu 06 Jun 2024 17:48:52 +0000
ROA not after:            Thu 05 Jun 2025 17:53:52 +0000
asID:                     273470
IP address blocks:        45.173.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/16136D1772326C3F142FBE6A7E352B966E2C293D.crl
                          rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/16136D1772326C3F142FBE6A7E352B966E2C293D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16136D1772326C3F142FBE6A7E352B966E2C293D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e2:51:e4:18:05:4f:2f:47:4f:a0:84:7d:85:e7:d0:b1:2b:4e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16136D1772326C3F142FBE6A7E352B966E2C293D
        Validity
            Not Before: Jun  6 17:48:52 2024 GMT
            Not After : Jun  5 17:53:52 2025 GMT
        Subject: CN=FE701BE3ED413E41FE863587F5F89470DA218416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:74:0a:71:a1:f3:94:a4:1c:5a:10:9e:73:28:
                    0b:18:3e:bf:8d:77:6e:2d:e9:c9:f9:32:c3:c4:62:
                    5c:e6:13:d1:a9:cf:4d:c8:03:27:a8:34:9b:9a:77:
                    af:82:d5:71:41:5c:81:76:1e:0c:5c:cc:b9:93:01:
                    a2:51:7d:54:84:3a:24:3f:8d:5c:f0:6e:b4:67:ac:
                    94:57:93:4b:f5:24:b4:0b:ef:7a:3e:b5:3d:45:7b:
                    77:bf:38:fd:c7:73:43:2b:3c:9f:21:ac:a9:87:09:
                    f5:d0:8b:52:66:06:a2:50:76:23:86:20:fb:c3:47:
                    38:03:78:ef:3b:43:59:bb:41:1f:df:08:81:59:b2:
                    9b:5d:de:7a:c2:ce:ee:64:3d:bd:93:7a:74:a4:66:
                    82:da:79:75:22:1e:3c:eb:4a:17:7c:7a:bb:30:4c:
                    37:5c:8f:b8:0d:b5:e8:9c:a5:77:4f:b1:3f:8b:c5:
                    09:d1:f0:30:38:a6:c8:af:c6:95:75:ba:2d:81:1a:
                    23:5d:2d:d5:0a:08:57:28:d8:db:3b:f4:f1:ea:f7:
                    47:17:5d:70:ca:0c:fa:5d:9c:8d:bc:04:9c:7c:d0:
                    e4:fd:47:36:72:1c:6c:7b:4e:f4:87:3a:0a:5b:72:
                    18:d4:c1:cb:19:17:81:66:d3:5a:b4:96:a8:de:f6:
                    f4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:70:1B:E3:ED:41:3E:41:FE:86:35:87:F5:F8:94:70:DA:21:84:16
            X509v3 Authority Key Identifier:
                keyid:16:13:6D:17:72:32:6C:3F:14:2F:BE:6A:7E:35:2B:96:6E:2C:29:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/16136D1772326C3F142FBE6A7E352B966E2C293D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16136D1772326C3F142FBE6A7E352B966E2C293D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/34352e3137332e3135362e302f32342d3234203d3e20323733343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e2:eb:6b:7a:da:39:9a:c0:8d:87:74:87:ce:76:5a:c8:70:c2:
         d2:39:bc:18:fb:10:a0:6c:06:f7:c1:ba:25:fe:cf:c8:fa:8d:
         a1:d5:81:6a:2a:19:72:ff:75:ca:63:e3:6c:4a:89:00:d1:76:
         ca:02:65:e2:60:41:45:80:14:34:99:28:65:ba:55:20:dc:1e:
         e7:16:b8:4a:32:f0:72:ed:48:98:b6:f0:a0:ab:75:e8:97:5f:
         1f:78:c0:cb:64:42:09:b3:b1:37:a4:24:9d:1a:34:6a:de:f6:
         bc:eb:fd:05:79:96:09:c7:7a:4f:a2:4e:48:9d:92:5c:3d:81:
         59:1f:36:93:33:b1:36:8f:19:36:7a:2f:b9:b0:9e:ca:54:7d:
         b4:ed:ac:f0:42:0c:11:f6:66:ab:a7:7c:1d:3d:0c:d4:01:7b:
         a6:ca:d7:28:9e:92:65:66:64:81:a1:42:69:48:2e:4f:39:9e:
         4b:b2:90:93:1b:e3:f8:c5:d3:12:ff:58:2c:8d:59:0b:2f:19:
         62:0a:25:3d:42:74:d3:16:6a:29:08:5a:d4:4c:37:92:f2:92:
         4f:8d:ee:14:4a:0e:81:ed:15:19:9a:8c:ce:a6:48:ae:0d:45:
         9e:4a:19:d7:4b:68:1e:08:b0:22:7c:8d:18:f0:8b:4e:00:f2:
         5f:1c:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:42 2024 by rpki-client on console-fra.rpki-client.org