Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e31302e302f32342d3234203d3e20323639363938.roa
File:                     34352e3139312e31302e302f32342d3234203d3e20323639363938.roa (raw, json)
Hash identifier:          Aop+UymUpLi7Aq25stdSlsGGx7SDG9quRIgb/EVdZxg=
Subject key identifier:   40:E8:3E:6D:77:1C:D9:53:D9:20:47:31:49:FC:66:CD:A5:AD:B6:25
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       6B93ED7A371D2F7D9E090C37B658E673300C02CD
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e31302e302f32342d3234203d3e20323639363938.roa
Signing time:             Thu 04 Apr 2024 04:50:40 +0000
ROA not before:           Thu 04 Apr 2024 04:45:40 +0000
ROA not after:            Thu 03 Apr 2025 04:50:40 +0000
asID:                     269698
IP address blocks:        45.191.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:93:ed:7a:37:1d:2f:7d:9e:09:0c:37:b6:58:e6:73:30:0c:02:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Apr  4 04:45:40 2024 GMT
            Not After : Apr  3 04:50:40 2025 GMT
        Subject: CN=40E83E6D771CD953D920473149FC66CDA5ADB625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4e:31:f8:62:d0:59:c7:f9:4e:3f:4f:dd:df:
                    94:33:7d:78:b4:eb:76:ec:9c:7d:17:ae:ae:c0:fa:
                    97:c8:c8:97:0e:9f:cf:4d:3b:4f:be:cd:ac:bd:af:
                    53:01:bf:83:df:35:ca:8d:25:b7:02:62:a1:51:ac:
                    ac:f1:cb:c5:0a:47:0f:5e:0e:3e:d9:f4:2f:54:94:
                    da:db:77:65:99:56:76:48:e7:cf:90:77:0e:d8:35:
                    9f:7c:1f:b5:86:96:8d:b9:3a:8f:67:a2:0b:9c:f1:
                    df:eb:9a:86:d9:a8:0f:ac:9a:e9:e3:23:a9:be:1c:
                    d6:c6:55:4f:ab:57:f9:01:b8:62:3a:20:35:d0:cc:
                    e9:93:77:48:c6:71:e4:08:dd:b1:b4:71:4c:53:5d:
                    91:4f:da:61:a4:2b:75:a7:dc:6a:23:0c:52:bf:5d:
                    1f:46:a0:09:4f:2b:80:dc:61:b3:ba:ff:32:c7:b6:
                    9c:1c:53:32:54:7c:9c:e1:be:f5:87:c8:b7:44:eb:
                    94:d8:f3:da:68:27:d7:c8:c8:50:06:35:ed:13:0e:
                    37:08:73:06:1c:49:0e:3a:01:a4:bf:f5:cd:dd:eb:
                    bb:d6:05:2c:ac:26:7a:07:60:5d:4a:4b:43:44:4c:
                    de:82:fd:67:73:60:33:fa:e6:14:f6:04:1c:2e:4c:
                    2b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E8:3E:6D:77:1C:D9:53:D9:20:47:31:49:FC:66:CD:A5:AD:B6:25
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e31302e302f32342d3234203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:a5:e4:c1:cc:c4:29:87:22:42:86:7f:20:30:ed:18:2b:e8:
         62:5f:ef:77:69:cf:43:ac:95:c6:c5:6c:05:78:40:35:fe:79:
         40:35:cd:3f:79:e7:0d:e0:60:36:78:ee:84:84:0e:7b:aa:4d:
         c0:71:79:04:82:36:5d:87:49:f7:f6:12:f3:31:09:94:bc:93:
         79:0a:fa:91:89:b1:c6:09:d5:5e:e8:9f:b0:b5:91:7d:81:0d:
         de:e9:e6:cb:23:32:40:79:6f:08:e9:f4:28:f9:f3:41:76:01:
         1d:60:52:ca:3a:71:f7:a6:66:d5:fe:3c:16:c0:62:ec:ba:c9:
         31:63:e7:a3:87:e2:d1:2c:2b:95:74:4e:66:dc:6f:e9:9e:06:
         cb:d0:68:26:4a:ef:0a:c9:05:ee:ba:b7:42:6c:d1:f8:f3:fc:
         50:ba:7e:f3:2d:51:9f:c5:f7:29:74:b1:d2:60:4b:8e:50:5f:
         cb:e7:5f:57:c6:44:45:15:c0:0d:e8:d8:6f:98:7d:ab:28:c3:
         27:08:1f:5b:50:b3:ee:c8:32:45:1a:bc:fd:08:ec:68:5c:a7:
         fd:fa:cd:59:6f:9c:b9:21:44:5f:e9:1d:97:9a:f9:b1:23:e7:
         dc:40:9a:3c:7e:0f:24:39:78:ee:cb:da:ed:f9:03:fb:f7:ad:
         fd:33:75:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:03:00 2024 by rpki-client on console-fra.rpki-client.org