Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/34352e3136322e3231352e302f32342d3234203d3e20323638353634.roa
File:                     34352e3136322e3231352e302f32342d3234203d3e20323638353634.roa (raw, json)
Hash identifier:          DEhzildKqUtTvGfCe4a7taHLF9Ljr6iU5U4GJ5wMvFU=
Subject key identifier:   7F:EF:CE:EE:D5:9D:2E:CA:BA:53:E1:22:49:03:91:84:6C:0E:AC:C3
Certificate issuer:       /CN=48B65496F1100A4BEC2A103360694784DE4E87AA
Certificate serial:       6BFE7CD20C442D19D1A2A4E52C56E2AED0B98BCE
Authority key identifier: 48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/34352e3136322e3231352e302f32342d3234203d3e20323638353634.roa
Signing time:             Wed 03 Apr 2024 19:00:12 +0000
ROA not before:           Wed 03 Apr 2024 18:55:12 +0000
ROA not after:            Thu 03 Apr 2025 19:00:12 +0000
asID:                     268564
IP address blocks:        45.162.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/48B65496F1100A4BEC2A103360694784DE4E87AA.crl
                          rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/48B65496F1100A4BEC2A103360694784DE4E87AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fe:7c:d2:0c:44:2d:19:d1:a2:a4:e5:2c:56:e2:ae:d0:b9:8b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48B65496F1100A4BEC2A103360694784DE4E87AA
        Validity
            Not Before: Apr  3 18:55:12 2024 GMT
            Not After : Apr  3 19:00:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7f:7c:27:c3:ad:6d:bb:e2:cf:fc:a0:b5:c9:
                    fd:c9:7f:00:ed:a5:fc:32:64:c8:0b:0c:6a:8a:b6:
                    e1:3f:e7:d6:d4:7c:9c:73:45:58:ad:66:65:f1:77:
                    75:8c:69:42:b9:c3:82:33:27:6e:22:85:9c:f9:ec:
                    a7:b7:35:78:e2:4b:4f:63:f5:5a:06:40:94:37:26:
                    53:b3:39:bf:f8:17:cc:44:fe:10:eb:18:ad:13:60:
                    66:de:9d:b1:5f:19:4d:84:df:ad:37:0d:a7:93:da:
                    12:9b:04:58:4e:e0:ae:3a:44:ee:8b:0b:21:ae:8b:
                    4b:bc:e4:87:46:bc:4a:93:33:24:11:50:ca:d0:15:
                    9b:4b:3d:1f:ea:c8:e9:67:15:79:ff:a0:fe:28:7f:
                    ff:fd:69:7d:70:d5:6f:8e:ea:87:d0:7a:ee:79:f1:
                    d2:bd:bb:77:43:80:24:e2:61:03:ac:56:a0:fd:32:
                    b4:6d:1f:a1:a9:92:4c:c1:7d:82:44:16:fb:92:3d:
                    b9:ec:30:b8:06:ba:4e:da:81:4e:b2:50:45:90:fe:
                    a8:53:f3:72:5a:85:49:6a:d1:50:1c:64:5a:9b:48:
                    4e:4c:06:c0:7a:0e:3a:4a:f6:a5:31:e7:2f:7e:33:
                    03:51:d4:62:cc:37:a8:0f:41:ea:b2:93:6c:a7:3f:
                    83:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EF:CE:EE:D5:9D:2E:CA:BA:53:E1:22:49:03:91:84:6C:0E:AC:C3
            X509v3 Authority Key Identifier:
                keyid:48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/48B65496F1100A4BEC2A103360694784DE4E87AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/34352e3136322e3231352e302f32342d3234203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:d7:b2:9b:44:cc:61:ff:70:c6:6d:eb:34:8b:6d:5f:bf:91:
         a3:e5:7e:ec:a3:fa:f1:ec:60:46:c0:e1:ec:c4:64:f1:ec:da:
         ed:0d:c4:35:b7:92:30:db:14:68:9d:3f:9f:65:b0:f7:1b:08:
         40:8d:3d:51:7d:de:74:55:e0:e1:17:f8:6b:bc:ac:de:ed:a2:
         b4:08:d1:3a:60:3e:8e:29:c8:51:d7:4c:c7:16:05:ea:b9:2a:
         a9:93:dc:3c:7b:c6:9d:15:7c:a0:e2:89:37:b0:43:84:1f:51:
         00:cf:f5:34:9f:1e:f2:c8:cb:73:69:2f:c4:a2:e8:81:42:3a:
         fb:cc:2c:70:3a:9d:5d:73:50:15:40:1f:ae:60:dc:5b:fc:d7:
         89:e4:c4:a5:84:4c:35:ed:42:3b:a1:a1:32:23:f4:e3:4f:0a:
         2d:09:42:ec:69:d9:e2:21:ea:8c:c7:5e:2a:df:b6:d0:b7:89:
         4e:6e:33:f9:bc:35:c6:fa:96:32:66:10:8a:dc:26:f6:f7:a6:
         84:f1:dc:ec:25:49:cf:72:5a:d4:f2:e8:d1:ef:91:5e:e0:05:
         18:74:58:23:10:87:0d:e9:c7:11:69:b8:de:f0:e0:58:69:3a:
         d1:ed:ad:ac:54:74:3a:a2:aa:5f:54:ff:69:f1:f0:68:ab:4a:
         d1:4e:61:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:03 2024 by rpki-client on console-fra.rpki-client.org