Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa
File:                     34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa (raw, json)
Hash identifier:          /oJFEb0VqVmdJS1vlOBKwkWqPUR+PCgVu5P/jreeJLs=
Subject key identifier:   73:B8:E4:25:08:93:AA:9D:00:B5:44:CD:49:A1:63:8B:33:8E:6C:B6
Certificate issuer:       /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Certificate serial:       425228F6544F0BB063D0B3EB8B3FAF8D568695B3
Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa
Signing time:             Fri 05 Apr 2024 03:20:25 +0000
ROA not before:           Fri 05 Apr 2024 03:15:25 +0000
ROA not after:            Fri 04 Apr 2025 03:20:25 +0000
asID:                     267546
IP address blocks:        45.166.212.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
                          rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:52:28:f6:54:4f:0b:b0:63:d0:b3:eb:8b:3f:af:8d:56:86:95:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
        Validity
            Not Before: Apr  5 03:15:25 2024 GMT
            Not After : Apr  4 03:20:25 2025 GMT
        Subject: CN=73B8E4250893AA9D00B544CD49A1638B338E6CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:69:12:9a:bd:64:15:c9:80:08:c3:f9:e6:
                    72:69:4b:8f:a5:a4:ef:ce:2b:80:48:94:4c:e3:96:
                    d8:8a:e1:8d:e2:73:c4:26:92:a3:bb:63:a2:eb:85:
                    f2:25:83:81:d6:8e:30:cb:0e:b5:53:d0:a0:45:e8:
                    27:bc:60:9a:54:c9:6c:de:84:16:07:50:a3:be:cc:
                    91:6b:2c:bc:be:10:b7:5e:68:9f:fa:46:23:bd:d3:
                    55:2c:99:c6:dd:b7:4f:3d:d5:1d:46:a3:12:ae:11:
                    8b:c1:34:41:c0:e4:d3:e9:b3:38:3f:e2:ce:10:bb:
                    1f:9a:db:f4:7f:27:45:c9:55:49:f8:7c:51:c2:06:
                    99:5e:99:2f:e0:d9:c8:0c:f9:d1:2c:95:b7:2e:65:
                    5c:8a:39:73:76:d4:e6:88:c8:c4:8d:c3:7e:11:3d:
                    62:a6:71:48:38:ad:67:fd:ee:01:2c:98:4f:ab:be:
                    88:1f:0a:66:55:c2:25:6c:1d:a9:cd:10:68:82:b4:
                    43:1c:12:74:aa:46:f5:3e:aa:6a:5e:c6:9c:c3:e7:
                    6a:eb:2b:b4:f1:71:48:91:2b:26:fa:22:89:20:b2:
                    e7:25:27:f9:35:15:1d:b6:8c:dd:cc:4f:f9:32:a6:
                    8d:ee:5d:de:fe:18:7a:d7:d6:57:85:76:ef:c7:06:
                    c9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B8:E4:25:08:93:AA:9D:00:B5:44:CD:49:A1:63:8B:33:8E:6C:B6
            X509v3 Authority Key Identifier:
                keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:60:b7:d0:3d:5c:9d:02:1d:5e:77:a7:22:d8:6e:74:9d:e5:
         4c:d9:c7:a6:0a:09:58:cb:17:bf:cd:46:91:5b:97:ec:2d:20:
         f5:f6:1b:9d:ad:e3:1a:0d:ee:f0:4c:cb:94:c8:75:c2:ab:d9:
         07:98:e6:47:a1:93:be:cc:04:5b:4f:82:0b:52:3e:b4:47:ec:
         c5:cd:5e:0d:b4:f4:7f:8c:01:4c:ea:a7:38:30:a7:6f:48:4a:
         8a:5e:f8:91:27:90:27:22:cb:f3:c5:b2:66:10:7b:b4:02:7b:
         6a:7e:da:43:99:e4:80:77:a9:ae:4a:ad:a7:93:12:06:d3:db:
         29:c2:4b:17:8c:6a:f1:23:5a:71:23:05:94:6c:47:b3:37:10:
         57:25:cf:cd:3a:f9:1c:e0:15:6c:c0:09:17:0c:15:65:e3:89:
         0e:eb:2d:4d:75:52:fa:a0:89:de:20:e6:aa:7f:f9:80:18:76:
         12:ec:84:74:e4:a7:04:cf:0c:31:b8:d7:01:67:33:c4:45:94:
         fb:ea:5b:f5:fe:ac:05:2b:d0:9f:06:fc:b4:9f:c3:c2:09:4d:
         3a:0b:47:72:86:a9:57:4b:b2:77:7a:de:37:79:60:81:85:2c:
         2d:9d:0e:0b:a8:ae:6b:a4:eb:39:12:1d:f3:57:02:96:dc:47:
         93:c2:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:10 2024 by rpki-client on console-ams.rpki-client.org