Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa
File:                     34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa (raw, json)
Hash identifier:          Fb9HbhH4w3MOKqEpK7IPfcaI6aCpbXbhSuLslBBn370=
Subject key identifier:   91:BA:2A:BF:A1:B1:A0:44:13:7D:D3:16:F6:81:12:C3:B5:A1:CA:93
Certificate issuer:       /CN=450D2460BB579B573599E83A5DA3018696A0F8F6
Certificate serial:       0FFEA8AA6B34D4169FB4F4271271C0A42CF65A41
Authority key identifier: 45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa
Signing time:             Thu 04 Apr 2024 17:08:23 +0000
ROA not before:           Thu 04 Apr 2024 17:03:23 +0000
ROA not after:            Thu 03 Apr 2025 17:08:23 +0000
asID:                     271632
IP address blocks:        45.172.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl
                          rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fe:a8:aa:6b:34:d4:16:9f:b4:f4:27:12:71:c0:a4:2c:f6:5a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D2460BB579B573599E83A5DA3018696A0F8F6
        Validity
            Not Before: Apr  4 17:03:23 2024 GMT
            Not After : Apr  3 17:08:23 2025 GMT
        Subject: CN=91BA2ABFA1B1A044137DD316F68112C3B5A1CA93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:34:b6:b9:4e:0a:85:b4:8a:a7:2a:98:a3:01:
                    ab:7b:10:ef:82:e0:80:7d:20:65:7e:89:12:94:31:
                    ff:ef:86:4d:98:da:19:e6:75:5d:11:d4:e7:26:1f:
                    6f:99:c0:f6:3c:7d:28:4b:aa:ea:b5:c0:2e:c9:a9:
                    08:77:bd:3a:b8:2b:3b:74:be:07:4c:cb:f4:98:f2:
                    17:31:34:82:4d:98:87:20:11:eb:ed:d2:a6:fb:94:
                    85:1e:b7:3d:51:c6:78:cc:f1:a9:77:30:67:31:d9:
                    69:78:e0:ff:51:f8:fc:c2:53:30:74:50:df:04:98:
                    c5:9d:e4:2b:56:8e:1f:72:8a:f3:bb:26:70:56:12:
                    51:77:37:3d:63:69:e6:41:6f:23:f7:3c:69:e1:a8:
                    43:cd:58:34:f1:a6:aa:25:c6:3a:c4:f2:89:f7:27:
                    fb:88:a7:94:0a:1f:a2:01:0f:43:cc:08:df:77:72:
                    6a:94:96:07:cd:1c:c8:4c:b1:ae:4a:96:57:03:c4:
                    63:13:af:36:65:bc:2c:54:ed:5b:1e:41:2d:84:b5:
                    6d:f7:93:e8:00:94:2b:5f:19:56:d4:d0:0e:9f:73:
                    93:5d:fc:19:fe:1a:85:20:1b:88:8f:b0:4b:24:e5:
                    01:71:75:00:e9:60:fc:e3:56:85:d6:4f:56:d8:b2:
                    94:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BA:2A:BF:A1:B1:A0:44:13:7D:D3:16:F6:81:12:C3:B5:A1:CA:93
            X509v3 Authority Key Identifier:
                keyid:45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:a0:a3:31:05:c9:d5:b2:36:3d:f2:5f:44:f1:55:45:08:af:
         70:5b:ee:03:25:3c:1a:31:dc:16:4e:06:7c:c8:d5:db:9f:2c:
         55:47:eb:32:17:1f:80:b2:87:2e:8d:a4:11:52:5e:b6:35:a2:
         43:b4:78:46:a6:d4:6c:88:c2:22:44:df:aa:04:9d:0b:e6:f3:
         f7:d2:69:39:f8:e9:27:d3:29:4a:44:b6:de:4a:ab:a7:fe:5c:
         c8:62:b4:44:31:9d:16:1e:5d:89:76:7f:a1:5b:a4:7d:35:ef:
         eb:f8:7a:66:24:4d:d0:07:ec:72:87:9c:f2:59:02:16:98:e9:
         52:ee:a7:34:97:82:39:a5:ba:75:db:38:53:f1:5b:db:0f:67:
         8a:f8:8c:cc:c2:2b:c9:42:1b:29:bb:6b:bd:cc:90:e1:b2:cc:
         8f:f0:28:cd:7a:ca:38:2f:be:cd:c5:c6:2d:dc:59:50:8b:5b:
         a4:45:c7:3d:01:53:cb:4f:4c:00:63:fb:19:6b:45:55:24:56:
         7d:f9:55:15:8e:2e:c8:db:de:d8:ff:fa:61:fe:21:5e:40:5f:
         0d:18:d3:90:5f:38:74:19:7e:50:e8:0e:c8:40:5d:79:22:05:
         58:03:dd:80:f0:b1:99:fc:79:fc:63:06:07:e1:05:b8:24:5b:
         d7:0b:83:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:43 2024 by rpki-client on console-fra.rpki-client.org