Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e31312e302f32342d3234203d3e20323639363938.roa
File:                     34352e3139312e31312e302f32342d3234203d3e20323639363938.roa (raw, json)
Hash identifier:          iv0POY8mIRyOg/HYOYDDX1LFqC3RWiM1Z2FqcPd0htU=
Subject key identifier:   82:2B:06:D4:A2:E1:CA:A6:BC:06:D4:50:4D:B7:E8:AE:23:DE:18:AE
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       687CA08E50E823349B6EE4B08F718130CC7070B3
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e31312e302f32342d3234203d3e20323639363938.roa
Signing time:             Thu 04 Apr 2024 04:50:42 +0000
ROA not before:           Thu 04 Apr 2024 04:45:42 +0000
ROA not after:            Thu 03 Apr 2025 04:50:42 +0000
asID:                     269698
IP address blocks:        45.191.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7c:a0:8e:50:e8:23:34:9b:6e:e4:b0:8f:71:81:30:cc:70:70:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Apr  4 04:45:42 2024 GMT
            Not After : Apr  3 04:50:42 2025 GMT
        Subject: CN=822B06D4A2E1CAA6BC06D4504DB7E8AE23DE18AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:c7:b9:e1:1a:cc:6e:63:d6:ab:2d:26:0a:
                    01:7a:66:62:66:03:36:e6:35:45:12:bf:da:2f:c0:
                    8e:e7:02:5c:25:e8:85:c5:c0:36:9c:99:a9:46:ab:
                    24:1f:cd:27:62:53:32:53:f6:a9:16:01:30:94:28:
                    15:7e:90:db:98:83:e1:ad:7e:c9:d7:c3:a9:46:97:
                    57:f1:66:75:34:b6:28:57:1a:1e:b5:72:55:08:7c:
                    41:3c:99:e8:9a:1d:17:22:46:82:ec:a5:a4:1b:40:
                    34:b6:0a:f9:9a:65:7c:60:8f:3e:62:41:65:79:ad:
                    ce:f3:5c:86:fb:cf:e2:51:29:0e:d7:c5:19:7f:92:
                    4a:37:22:86:9d:05:9e:78:f2:74:d5:d6:6a:f4:af:
                    0a:6c:92:64:83:cd:2d:a0:43:8d:9d:7e:22:95:4d:
                    24:bd:d0:4a:f5:1d:24:a4:c1:37:4e:46:61:fa:f6:
                    af:e6:e0:59:10:16:65:8e:e0:77:59:00:fc:c5:a4:
                    b0:93:f0:2d:ec:b1:5e:33:79:0c:71:af:20:74:66:
                    d3:45:e1:b1:57:c6:6a:1c:29:47:d9:60:e8:49:55:
                    19:63:8c:27:57:11:4b:e6:65:95:3f:11:44:8e:0c:
                    be:f8:f3:8f:71:7f:59:ca:07:92:50:6f:70:63:fa:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2B:06:D4:A2:E1:CA:A6:BC:06:D4:50:4D:B7:E8:AE:23:DE:18:AE
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e31312e302f32342d3234203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:eb:a3:8e:a5:69:bb:a2:b8:59:9a:4f:ac:b5:78:5d:53:17:
         d8:3a:96:2e:60:f2:22:42:d1:64:09:24:c2:5d:f7:06:07:f4:
         02:88:37:68:92:ec:d7:e9:20:bd:19:b9:f9:b9:76:6b:fe:bb:
         a9:21:c7:42:f4:a1:79:6e:9a:01:3f:f0:3d:bc:03:a4:f6:3b:
         68:38:59:7d:b9:8a:60:3d:78:63:a3:3a:7e:f0:12:59:60:52:
         da:ab:0a:81:bb:de:e7:c7:f8:df:2c:82:96:68:26:b7:a2:5c:
         1a:4c:dc:fb:e0:13:10:7b:a6:19:e5:bd:c8:37:fb:45:58:6f:
         df:0c:f8:70:04:27:f9:70:13:f4:dc:0c:db:a8:f7:05:d9:a7:
         1f:a3:63:30:17:d0:5e:64:34:5f:20:6e:77:1a:df:68:c5:5d:
         67:34:c2:78:fc:8a:a4:89:60:c5:32:f4:69:77:f3:80:c2:ec:
         e1:82:b8:6a:d4:4c:81:4e:63:cc:b1:76:2b:db:ed:4f:69:f6:
         f6:ba:a7:b8:a4:0d:92:da:8a:56:03:db:a2:5f:78:03:be:81:
         76:a9:7c:73:63:dc:32:ee:a6:af:bd:8f:a4:ba:e0:18:0b:b6:
         ec:ba:b3:ed:f6:bf:29:15:c4:5e:57:4c:ba:dc:92:9c:39:25:
         e8:2b:42:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:20 2024 by rpki-client on console-ams.rpki-client.org