Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3137322e3235322e302f32322d3234203d3e20323633353639.roa
File:                     34352e3137322e3235322e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          w+GmPGFVOllEU+JRDNGNJcuK4dZO93PY5Ll9eoxNr94=
Subject key identifier:   59:99:B5:6A:FE:70:AD:51:BD:4D:BD:85:DE:79:CB:B0:78:26:73:E7
Certificate issuer:       /CN=E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A
Certificate serial:       042E43B255F8234C0E2AE3E50FFA0B2D944CB8CF
Authority key identifier: E1:C8:E0:FF:8F:E8:F0:85:E2:D7:92:B2:66:3A:22:5B:0D:93:C1:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3137322e3235322e302f32322d3234203d3e20323633353639.roa
Signing time:             Tue 23 Apr 2024 13:31:51 +0000
ROA not before:           Tue 23 Apr 2024 13:26:51 +0000
ROA not after:            Tue 22 Apr 2025 13:31:51 +0000
asID:                     263569
IP address blocks:        45.172.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.crl
                          rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2e:43:b2:55:f8:23:4c:0e:2a:e3:e5:0f:fa:0b:2d:94:4c:b8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A
        Validity
            Not Before: Apr 23 13:26:51 2024 GMT
            Not After : Apr 22 13:31:51 2025 GMT
        Subject: CN=5999B56AFE70AD51BD4DBD85DE79CBB0782673E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bf:2f:c7:ed:29:53:0d:ae:39:3e:72:b6:e9:
                    55:9a:07:3c:f1:c4:fb:be:a4:85:63:fc:32:17:20:
                    8c:1b:0b:fb:99:2e:f4:a9:e7:30:5f:90:78:3d:d5:
                    a1:ff:b9:b1:be:7c:88:56:5f:eb:a2:8f:d7:0f:02:
                    51:c4:a7:be:3c:a2:68:c9:06:48:31:79:11:4c:60:
                    f8:06:72:61:8b:1c:b2:64:38:e6:67:89:2a:ed:e6:
                    4e:33:5d:c4:98:86:36:35:6c:76:57:e0:84:78:4e:
                    78:d0:e7:83:e4:6b:7b:9c:95:42:98:09:be:80:7a:
                    d9:d6:d0:83:8b:94:95:7b:b1:d7:cf:2d:b2:ad:43:
                    75:8c:bc:dd:f3:cf:ee:d6:c3:24:6f:00:78:1a:f2:
                    ec:11:97:f2:85:a4:eb:3f:ce:05:20:c9:07:09:4a:
                    f3:96:c8:26:5a:51:d0:5a:af:0d:d6:ac:df:e7:24:
                    b2:f1:3c:73:c1:00:72:b8:53:46:7e:ef:06:a7:c3:
                    99:27:05:4a:b1:b7:18:37:ff:f3:29:c5:26:69:bd:
                    c4:be:47:12:77:eb:c8:1d:17:1c:2f:0b:01:9a:01:
                    fc:d0:01:13:4d:3b:16:b5:49:1b:5d:49:71:32:ea:
                    b4:f3:cf:13:fb:7c:7d:4c:42:4a:85:62:d0:11:56:
                    fb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:99:B5:6A:FE:70:AD:51:BD:4D:BD:85:DE:79:CB:B0:78:26:73:E7
            X509v3 Authority Key Identifier:
                keyid:E1:C8:E0:FF:8F:E8:F0:85:E2:D7:92:B2:66:3A:22:5B:0D:93:C1:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3137322e3235322e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:f4:c4:e4:1b:a1:41:a4:99:bc:c6:5a:f7:22:40:cb:22:96:
         66:1a:eb:fa:ce:29:94:97:5d:99:55:e3:0e:67:b0:bb:ef:4c:
         de:30:3b:7e:31:e1:2b:9a:64:aa:1b:69:63:89:de:fd:6f:1d:
         04:13:f9:59:1c:ea:91:e3:3d:0d:2b:a9:c0:ed:02:48:d1:11:
         e1:47:a3:d2:87:87:88:b8:c1:d5:c6:c9:15:ff:fa:5c:c1:13:
         cb:27:e3:c3:d6:88:fc:12:b7:ef:35:78:f3:2b:33:60:7e:38:
         ba:09:0e:38:45:3e:f0:bd:65:5f:f6:1d:6c:ac:73:0b:cd:55:
         c7:85:91:be:99:60:24:88:20:ec:9c:5e:e2:ba:57:d7:5c:d9:
         4e:5b:20:c6:76:2d:38:8f:20:94:c8:a6:2c:92:9c:e0:5c:e9:
         9c:43:e0:cb:04:77:20:03:26:de:cc:77:f9:86:b9:11:45:4c:
         9c:c1:05:25:23:18:79:11:77:39:7b:ca:a7:18:f1:5b:db:0f:
         7e:46:75:64:29:2a:13:d1:97:f2:84:67:20:67:2e:d0:3e:34:
         24:32:d4:02:a7:e9:35:1c:60:39:5b:ec:06:86:e2:77:bc:8e:
         60:95:76:70:cb:93:75:0a:e4:63:37:d3:39:97:42:1b:92:88:
         f5:6d:8b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org