Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/34352e37312e34382e302f32322d3332203d3e203631353836.roa
File:                     34352e37312e34382e302f32322d3332203d3e203631353836.roa (raw, json)
Hash identifier:          S+4waeCsB8E1pkq7Fg65mkoFhwuh+FcqWrQ/elOb9sw=
Subject key identifier:   9C:16:80:46:ED:3C:E3:41:80:81:D0:B5:71:5F:F1:B0:4A:4D:00:E4
Certificate issuer:       /CN=3A3398830EBEBFCD5E65D35E79C3EC00B72A1942
Certificate serial:       67D42A7D572EA971F0197200A9E8D8BBA0BFF4EB
Authority key identifier: 3A:33:98:83:0E:BE:BF:CD:5E:65:D3:5E:79:C3:EC:00:B7:2A:19:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/34352e37312e34382e302f32322d3332203d3e203631353836.roa
Signing time:             Fri 05 Apr 2024 04:55:53 +0000
ROA not before:           Fri 05 Apr 2024 04:50:53 +0000
ROA not after:            Fri 04 Apr 2025 04:55:53 +0000
asID:                     61586
IP address blocks:        45.71.48.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.crl
                          rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d4:2a:7d:57:2e:a9:71:f0:19:72:00:a9:e8:d8:bb:a0:bf:f4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3398830EBEBFCD5E65D35E79C3EC00B72A1942
        Validity
            Not Before: Apr  5 04:50:53 2024 GMT
            Not After : Apr  4 04:55:53 2025 GMT
        Subject: CN=9C168046ED3CE3418081D0B5715FF1B04A4D00E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:81:54:aa:db:59:32:cb:d9:ab:ab:76:9f:
                    99:34:81:9a:62:a7:f0:26:63:0f:78:99:36:01:40:
                    3c:09:ca:19:52:0f:3c:c0:93:2b:6a:52:5d:ce:56:
                    a5:f4:43:cd:d8:4a:6b:14:77:24:fd:c8:63:c2:21:
                    06:1d:31:3b:a5:f2:29:11:4c:de:bb:07:f7:5a:8d:
                    10:44:6e:9f:9b:2c:0c:34:c6:34:8b:64:a1:b8:ef:
                    27:af:4d:ff:ff:68:ff:ba:6a:c7:09:c2:8d:55:d3:
                    fa:1f:80:80:58:4f:e5:63:b8:8e:7f:81:aa:d0:44:
                    be:74:d0:46:a6:9c:2d:3e:8d:df:cc:11:b6:aa:ad:
                    18:55:27:59:b3:9c:ec:b7:3e:c5:e7:81:34:00:7a:
                    4f:76:04:a3:f4:1f:de:c1:cc:5a:30:92:e3:06:1e:
                    af:f3:78:66:02:1f:37:71:d8:18:5f:c9:89:a2:45:
                    f8:40:76:37:64:5b:e9:29:87:8d:2e:2f:19:18:bb:
                    7a:23:c8:96:8a:76:f0:96:ce:87:c6:44:79:e4:2d:
                    97:86:8f:0b:0b:3f:cb:99:29:4a:e0:1f:b6:04:ed:
                    b9:4b:89:06:8d:22:c0:e0:e0:cd:9b:f2:5a:73:3c:
                    18:31:55:bc:91:a8:a3:6b:ed:d7:ad:58:98:fd:e7:
                    09:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:16:80:46:ED:3C:E3:41:80:81:D0:B5:71:5F:F1:B0:4A:4D:00:E4
            X509v3 Authority Key Identifier:
                keyid:3A:33:98:83:0E:BE:BF:CD:5E:65:D3:5E:79:C3:EC:00:B7:2A:19:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3398830EBEBFCD5E65D35E79C3EC00B72A1942.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/1/34352e37312e34382e302f32322d3332203d3e203631353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:a6:16:45:1c:d6:c1:0e:83:4a:26:fe:3c:bf:fb:eb:f4:ed:
         d7:89:06:f4:9e:4b:ca:d2:70:1d:34:e9:77:8a:1c:d9:b3:ae:
         c6:19:6a:d0:7e:2e:f8:bc:aa:d2:8c:9d:52:19:8c:e1:5f:9d:
         22:2d:c8:1a:f0:b1:4b:06:f8:f7:59:0f:e2:60:6e:03:60:61:
         01:60:d7:22:16:dc:42:29:f8:17:3c:0f:7f:ba:52:a9:89:f7:
         23:91:23:05:2e:14:7e:c6:da:d2:b5:80:4a:a2:01:61:b4:6d:
         d0:36:9e:00:86:7f:62:f4:29:23:49:c2:66:29:ba:e0:69:a6:
         64:8d:72:b8:f0:17:86:bf:78:cb:02:cc:2c:bb:38:54:93:fe:
         63:42:a7:bf:79:35:83:6d:b2:95:15:c4:c3:22:6c:54:ed:d8:
         08:78:f4:29:46:3f:e4:4b:c1:c5:f8:0c:8c:40:cf:30:d3:bc:
         79:6e:86:97:ed:7b:8a:6c:85:65:22:e9:cd:5b:06:e4:ea:ff:
         d9:a7:d2:f8:9a:ca:8e:f1:11:ef:13:b8:9c:ae:7a:39:05:ea:
         0d:d4:6e:23:41:fd:a4:e1:b2:7f:76:f9:e4:8d:78:fc:82:3a:
         32:2e:75:ee:fc:32:7e:18:38:21:2d:3c:6d:e8:aa:1f:d6:7a:
         8f:81:4c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:58 2024 by rpki-client on console-fra.rpki-client.org