Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132322e302f32332d3233203d3e20323638383736.roa
File:                     34352e3137312e3132322e302f32332d3233203d3e20323638383736.roa (raw, json)
Hash identifier:          cHsfFOR3TXP20y7j4jdMVv8LxdbCoWk6Ijgon0FdNcY=
Subject key identifier:   70:D2:8B:F9:DF:0F:04:EB:EE:87:66:40:73:C7:3F:B6:8F:12:38:FE
Certificate issuer:       /CN=FDD4E609728A79B5F481EFFB6BE30EADF7E69F36
Certificate serial:       6B99F1B697DB6FD1FABC71288846C605CB03D276
Authority key identifier: FD:D4:E6:09:72:8A:79:B5:F4:81:EF:FB:6B:E3:0E:AD:F7:E6:9F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132322e302f32332d3233203d3e20323638383736.roa
Signing time:             Tue 19 Nov 2024 12:43:53 +0000
ROA not before:           Tue 19 Nov 2024 12:38:53 +0000
ROA not after:            Tue 18 Nov 2025 12:43:53 +0000
asID:                     268876
IP address blocks:        45.171.122.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.crl
                          rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:99:f1:b6:97:db:6f:d1:fa:bc:71:28:88:46:c6:05:cb:03:d2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDD4E609728A79B5F481EFFB6BE30EADF7E69F36
        Validity
            Not Before: Nov 19 12:38:53 2024 GMT
            Not After : Nov 18 12:43:53 2025 GMT
        Subject: CN=70D28BF9DF0F04EBEE87664073C73FB68F1238FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:31:a2:14:af:32:55:73:dc:d3:ce:14:b9:0e:
                    76:da:3e:64:f5:0d:60:bf:d0:5f:9b:e0:f8:ba:47:
                    f1:d8:79:d6:92:0a:7b:5c:7c:d3:da:65:83:d5:ec:
                    20:7f:fd:ed:c6:bd:d1:7e:90:2b:b0:96:cc:6e:2c:
                    ee:a2:43:b0:7d:73:d7:2f:10:80:68:73:35:e3:b8:
                    e6:37:ea:b6:dd:e7:76:f6:10:3d:7e:a5:50:ac:e2:
                    64:8c:f1:92:15:c5:76:1d:7e:3e:02:ec:e5:8d:db:
                    92:20:58:20:c3:4e:44:02:9e:84:36:7c:80:0b:3d:
                    bd:3a:25:2b:8e:69:8f:89:e4:a2:3d:78:c9:14:80:
                    08:ee:6f:c9:ee:2a:1c:ae:fd:ab:59:d6:07:77:59:
                    ab:43:e0:80:dc:45:2b:be:ae:da:7d:7b:80:43:b6:
                    3a:a2:69:2d:a4:05:4e:22:f8:86:e9:65:c6:21:f9:
                    c4:04:fc:6e:a3:9b:c1:50:ba:18:34:07:cf:8c:7b:
                    18:a3:71:80:17:33:c1:4c:b1:3c:d2:d0:e1:1d:31:
                    e5:1a:e1:e2:56:2b:3c:3f:31:bb:17:1a:8a:0e:01:
                    23:83:6b:bf:97:cd:0d:d3:38:db:d7:f5:c4:31:8c:
                    38:92:21:ef:ba:ee:a8:b6:4d:a5:5f:4f:84:ce:66:
                    4c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D2:8B:F9:DF:0F:04:EB:EE:87:66:40:73:C7:3F:B6:8F:12:38:FE
            X509v3 Authority Key Identifier:
                keyid:FD:D4:E6:09:72:8A:79:B5:F4:81:EF:FB:6B:E3:0E:AD:F7:E6:9F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132322e302f32332d3233203d3e20323638383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:65:84:bd:75:2d:25:f7:e2:66:40:63:51:d8:d8:d1:0b:fd:
         b7:6a:74:8f:2c:14:de:a4:7f:9b:55:dc:d7:2a:3f:e2:78:0c:
         1d:85:3d:f4:9f:af:7d:b6:60:40:6b:bd:6b:a9:03:2e:96:d9:
         51:b1:db:7f:e6:10:6b:cd:91:9f:b5:b9:9d:33:3d:4b:63:d3:
         96:d1:18:a3:30:7a:a1:3a:3f:ce:8d:3f:59:01:2a:a1:c5:2a:
         d1:bf:a1:b9:c4:3c:e5:c6:a2:25:d5:c4:b4:f8:8e:4b:a6:95:
         ba:22:85:8e:15:9e:ca:79:f2:58:80:b9:de:c5:ee:aa:f4:65:
         21:b9:c7:b0:97:a2:6c:d8:c9:d8:51:fb:f4:76:b4:ba:19:60:
         d0:07:c7:74:28:89:98:38:3b:5b:46:7f:d2:ca:8a:69:ef:f7:
         89:12:a5:df:75:58:5b:5e:6d:a7:b0:1f:a3:e2:0b:ea:32:20:
         e3:bf:b8:cc:df:f9:e7:5b:3d:ef:22:29:30:bd:4a:68:ef:62:
         8a:38:87:7d:59:74:a2:dc:73:1b:92:3c:18:30:c1:19:c7:97:
         0d:41:73:16:b3:e0:73:64:7f:2f:fd:44:35:48:b3:dd:7b:68:
         71:74:e6:4c:f9:ee:21:30:d4:76:b3:d1:ee:9a:3e:e9:26:01:
         ef:a6:00:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:40 2024 by rpki-client on console-ams.rpki-client.org