Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/34352e3136312e32302e302f32342d3234203d3e20323638343430.roa
File:                     34352e3136312e32302e302f32342d3234203d3e20323638343430.roa (raw, json)
Hash identifier:          sYbk8nuf6pJ7zgHLzq5XlUN25xkS0xdllf0Oxg4lC7A=
Subject key identifier:   A3:B5:39:C8:8A:FE:3D:F6:49:5F:1A:6F:53:57:E6:B4:2D:7C:9A:C4
Certificate issuer:       /CN=F1E9E66CDF460681B363364D2E6C538262A83312
Certificate serial:       54546BF9EC6206A9118D2116AEFA94A8FE4C977F
Authority key identifier: F1:E9:E6:6C:DF:46:06:81:B3:63:36:4D:2E:6C:53:82:62:A8:33:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E9E66CDF460681B363364D2E6C538262A83312.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/34352e3136312e32302e302f32342d3234203d3e20323638343430.roa
Signing time:             Thu 04 Apr 2024 11:31:00 +0000
ROA not before:           Thu 04 Apr 2024 11:26:00 +0000
ROA not after:            Thu 03 Apr 2025 11:31:00 +0000
asID:                     268440
IP address blocks:        45.161.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/F1E9E66CDF460681B363364D2E6C538262A83312.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/F1E9E66CDF460681B363364D2E6C538262A83312.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E9E66CDF460681B363364D2E6C538262A83312.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:54:6b:f9:ec:62:06:a9:11:8d:21:16:ae:fa:94:a8:fe:4c:97:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1E9E66CDF460681B363364D2E6C538262A83312
        Validity
            Not Before: Apr  4 11:26:00 2024 GMT
            Not After : Apr  3 11:31:00 2025 GMT
        Subject: CN=A3B539C88AFE3DF6495F1A6F5357E6B42D7C9AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:70:36:10:c1:7c:92:63:d1:86:52:5e:7b:
                    10:df:d8:3c:ae:3d:80:cc:61:7a:9e:d6:28:36:45:
                    ae:e3:3d:73:44:20:45:25:d9:17:2a:95:2d:d8:31:
                    ce:3d:48:3e:ef:9f:0f:de:4b:b6:68:00:25:f5:ca:
                    0c:01:72:6c:ac:8b:57:82:50:e5:83:a3:16:e3:05:
                    55:db:e6:f1:b4:12:91:88:e7:92:e8:d4:5d:d5:49:
                    e9:10:0c:1e:87:75:46:4e:99:cd:04:5c:43:de:73:
                    e8:1f:d3:86:8b:96:c8:4f:95:37:34:fa:fe:37:aa:
                    7c:df:9f:f4:04:58:b4:84:a9:a6:0e:51:db:08:4d:
                    bb:78:9d:e2:e0:dd:e9:09:99:93:80:2c:74:82:00:
                    1f:34:59:68:2c:69:16:73:0a:00:a2:0a:32:59:a2:
                    d5:05:e6:a4:d2:54:79:9c:2e:33:4b:ea:6d:95:27:
                    8e:b6:ed:86:b1:0a:8c:98:61:32:d2:f4:7e:66:35:
                    2e:0c:6b:50:cc:4c:b0:93:77:93:81:36:8a:b6:05:
                    d1:29:06:17:59:5b:4c:32:9f:7a:b1:71:b1:a5:5c:
                    73:db:30:7b:2f:35:3e:84:58:fb:59:f5:71:ac:ff:
                    bc:74:4b:b0:7e:0e:8e:9b:3b:6b:52:9a:fa:d4:65:
                    a7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B5:39:C8:8A:FE:3D:F6:49:5F:1A:6F:53:57:E6:B4:2D:7C:9A:C4
            X509v3 Authority Key Identifier:
                keyid:F1:E9:E6:6C:DF:46:06:81:B3:63:36:4D:2E:6C:53:82:62:A8:33:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/F1E9E66CDF460681B363364D2E6C538262A83312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E9E66CDF460681B363364D2E6C538262A83312.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/34352e3136312e32302e302f32342d3234203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:90:f8:08:fa:98:19:69:2e:1e:00:2e:72:ee:98:6e:fb:87:
         91:67:68:8e:7f:68:02:67:49:27:4e:f5:19:3d:3d:cb:e9:cd:
         75:58:f0:8b:cf:93:dc:06:aa:43:09:87:46:ca:03:a3:5a:e3:
         95:7d:fa:6b:ec:c5:8f:7f:ca:c6:52:a6:f6:25:50:ba:83:7d:
         27:81:5b:b5:07:3e:47:fd:16:53:47:82:19:4b:87:7b:05:1f:
         42:29:46:5e:3f:7c:25:ff:60:3d:36:db:20:05:32:e2:35:75:
         ac:ed:51:a3:65:fa:ed:88:fd:03:6c:6f:19:e2:e3:12:80:29:
         3a:36:ee:51:b2:df:1b:40:6d:7b:12:14:80:4b:f9:10:2c:79:
         6d:c5:b1:55:96:5f:8a:29:0d:3d:fd:20:9c:8f:ae:b3:0b:af:
         3f:30:75:49:41:9e:1c:c1:a6:26:ab:17:cf:6b:c2:55:89:fb:
         53:bf:3e:8c:de:14:d8:c4:36:0b:ba:24:70:11:ce:26:f0:f2:
         d2:ef:54:01:44:46:b5:3a:58:c2:49:eb:6b:2a:ab:69:97:d7:
         c9:b3:0d:a2:9b:1c:2a:f9:57:3d:de:0a:fa:5d:04:0b:60:87:
         ac:dc:e8:55:e1:73:49:07:9e:10:23:6e:1b:9d:5a:b9:ca:7c:
         79:eb:9b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:24 2024 by rpki-client on console-fra.rpki-client.org