Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/34352e3136312e32332e302f32342d3234203d3e20323638343430.roa
File:                     34352e3136312e32332e302f32342d3234203d3e20323638343430.roa (raw, json)
Hash identifier:          Vaebf33Hwu+wOaFrGLPbzHBkdk4wddOxD0xjGtwtvZg=
Subject key identifier:   0D:62:BC:2D:AB:BF:AF:AE:B3:7D:F2:14:84:02:34:C1:E2:1B:F8:D9
Certificate issuer:       /CN=F1E9E66CDF460681B363364D2E6C538262A83312
Certificate serial:       0EC44F1FAB55C23F771BA39982674C658645C8B5
Authority key identifier: F1:E9:E6:6C:DF:46:06:81:B3:63:36:4D:2E:6C:53:82:62:A8:33:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E9E66CDF460681B363364D2E6C538262A83312.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/34352e3136312e32332e302f32342d3234203d3e20323638343430.roa
Signing time:             Thu 04 Apr 2024 11:31:00 +0000
ROA not before:           Thu 04 Apr 2024 11:26:00 +0000
ROA not after:            Thu 03 Apr 2025 11:31:00 +0000
asID:                     268440
IP address blocks:        45.161.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/F1E9E66CDF460681B363364D2E6C538262A83312.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/F1E9E66CDF460681B363364D2E6C538262A83312.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E9E66CDF460681B363364D2E6C538262A83312.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 15:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c4:4f:1f:ab:55:c2:3f:77:1b:a3:99:82:67:4c:65:86:45:c8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1E9E66CDF460681B363364D2E6C538262A83312
        Validity
            Not Before: Apr  4 11:26:00 2024 GMT
            Not After : Apr  3 11:31:00 2025 GMT
        Subject: CN=0D62BC2DABBFAFAEB37DF214840234C1E21BF8D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:cb:7e:d9:09:cc:88:9c:7e:d1:36:35:d9:
                    84:df:67:62:01:2a:43:cc:4f:03:b7:9b:a9:28:1c:
                    b0:5c:4b:39:91:c6:e3:01:6c:51:1c:85:1e:ce:de:
                    b6:e8:59:b2:1b:83:8b:2f:c6:7b:4e:27:14:8f:40:
                    dd:8c:81:2c:ca:1d:44:b2:ad:e2:6d:d3:e1:95:45:
                    bd:06:ec:d6:7b:e0:b8:9d:ec:ac:d6:bf:d9:ba:f8:
                    d2:18:ee:7b:e5:b3:40:98:c1:b5:34:5c:8c:62:f4:
                    cc:dd:81:8d:fc:71:95:1a:86:0a:e8:cc:38:2b:d4:
                    4b:98:d9:f6:a8:b5:71:de:ed:42:b5:c1:e5:71:e1:
                    bc:00:a5:84:36:8f:df:b3:ee:b4:d3:13:fd:bd:66:
                    a4:6f:1f:83:27:0b:41:59:df:46:b8:49:d3:2a:85:
                    7f:59:4e:8c:6b:53:49:22:4e:ff:b2:0f:21:3a:c6:
                    31:4f:99:58:b2:88:18:73:a6:d5:40:56:6a:44:fc:
                    67:18:c7:6c:8e:31:91:6e:00:e8:42:3a:d9:f2:c8:
                    ed:1c:b0:9b:42:e7:57:a8:cf:fa:6a:5a:0d:54:b4:
                    14:1b:a7:9c:14:04:ba:26:24:8f:11:b4:c5:7d:02:
                    6e:17:43:e2:11:48:1b:b7:a7:ab:19:f1:e0:26:56:
                    95:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:62:BC:2D:AB:BF:AF:AE:B3:7D:F2:14:84:02:34:C1:E2:1B:F8:D9
            X509v3 Authority Key Identifier:
                keyid:F1:E9:E6:6C:DF:46:06:81:B3:63:36:4D:2E:6C:53:82:62:A8:33:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/F1E9E66CDF460681B363364D2E6C538262A83312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E9E66CDF460681B363364D2E6C538262A83312.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/34352e3136312e32332e302f32342d3234203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:8f:ab:77:7d:7b:25:c3:8e:84:05:f7:3f:33:65:3d:34:9d:
         fd:67:5c:93:09:fd:26:71:05:03:24:32:61:12:24:dc:52:19:
         d2:68:19:38:00:1a:5e:cc:da:e5:80:ce:1d:06:47:6d:28:a7:
         c2:4b:fc:53:d1:32:49:b3:a0:61:d3:b0:51:78:2d:00:5c:68:
         e0:8e:6b:c3:c3:08:a6:66:d0:21:10:c5:68:16:60:e7:0d:4c:
         15:96:ec:1d:f0:81:ec:26:c0:81:6c:8e:5b:40:61:63:aa:61:
         47:5c:69:60:43:9b:ad:90:ff:a8:4e:ac:1b:87:56:c1:23:9b:
         4a:14:c1:25:fb:d3:f2:00:ad:9f:e3:30:68:00:90:b4:60:a6:
         72:ca:35:72:f4:45:61:1c:e5:1f:51:9d:eb:df:05:ed:2f:46:
         ed:87:0a:04:7e:f1:cc:46:a7:30:ed:ea:79:a0:46:44:f2:bf:
         e0:69:37:0f:3f:73:59:14:07:76:48:ca:c7:c0:d3:f9:93:49:
         df:58:14:3d:af:e2:17:f9:9b:76:87:d9:a3:aa:b9:f2:af:4f:
         0b:63:8b:f7:b7:0d:e2:20:6c:aa:d6:e5:f5:bc:97:ae:07:ff:
         44:fe:8f:38:02:ad:05:6b:ce:8b:70:56:92:23:1f:4c:8b:7a:
         a3:c7:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:09 2024 by rpki-client on console-fra.rpki-client.org