Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e382e302f32342d3234203d3e20323639363938.roa
File:                     34352e3139312e382e302f32342d3234203d3e20323639363938.roa (raw, json)
Hash identifier:          wZl0I2Ro5RLiPRZnyRIuy9EEbyAyI1XCTcmN0cLpmlI=
Subject key identifier:   B8:B0:BB:A9:52:59:83:66:72:91:8F:99:8C:10:87:4C:64:D2:28:70
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       06761A11330FC260AE8A06D66104468932E292AB
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e382e302f32342d3234203d3e20323639363938.roa
Signing time:             Thu 04 Apr 2024 04:50:41 +0000
ROA not before:           Thu 04 Apr 2024 04:45:41 +0000
ROA not after:            Thu 03 Apr 2025 04:50:41 +0000
asID:                     269698
IP address blocks:        45.191.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:76:1a:11:33:0f:c2:60:ae:8a:06:d6:61:04:46:89:32:e2:92:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Apr  4 04:45:41 2024 GMT
            Not After : Apr  3 04:50:41 2025 GMT
        Subject: CN=B8B0BBA95259836672918F998C10874C64D22870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:34:05:b6:dc:1f:43:22:93:95:aa:58:88:
                    5e:e3:bc:99:78:8c:60:87:52:bb:b7:00:ff:d9:35:
                    b5:6d:a0:e4:d6:c9:42:54:dd:8f:ee:22:18:9d:5a:
                    8d:e9:c9:3a:38:cd:a2:5f:33:ce:41:eb:d3:3a:a9:
                    57:ca:87:3c:6b:0a:df:32:8f:ca:ac:02:41:ea:84:
                    e3:c9:0f:e6:78:1e:ce:29:a6:4d:73:28:b9:cb:aa:
                    45:e6:5b:76:35:94:c1:46:4a:de:cd:63:30:cf:1a:
                    f9:a6:db:7f:c8:4b:f2:fc:4b:8f:b4:90:fd:f4:0a:
                    00:36:8b:1d:57:24:15:d6:a6:21:16:a5:32:8b:d3:
                    db:21:7b:55:b2:b4:e1:4f:a0:19:02:af:9d:4a:9c:
                    a3:32:6a:fe:22:5b:9d:a1:63:b1:61:3f:86:11:2b:
                    f2:ff:3c:b4:e7:29:1f:25:d8:aa:89:83:61:2b:6c:
                    4c:25:29:de:bb:8b:99:1d:2d:e4:1a:15:d0:5d:92:
                    01:00:a6:7f:01:e1:1c:90:b8:5c:79:18:ab:81:e5:
                    20:9a:d5:fa:ad:f8:2f:8e:53:8a:23:9b:38:a6:60:
                    eb:9c:c5:0f:0a:54:dd:4d:eb:6b:a2:bd:71:2c:cc:
                    15:cd:df:f9:25:97:8a:81:85:b0:a8:89:88:dc:b4:
                    cd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B0:BB:A9:52:59:83:66:72:91:8F:99:8C:10:87:4C:64:D2:28:70
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e382e302f32342d3234203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:f6:1e:59:3a:21:df:44:32:cf:d8:86:b2:2f:ab:2b:d7:f2:
         a2:5b:49:2a:f7:45:02:eb:57:3c:5d:49:aa:58:9d:60:7c:bc:
         74:3d:09:14:e1:18:99:18:90:29:33:f6:78:a8:a0:0f:1c:22:
         5d:3c:ff:04:49:00:d3:92:be:cd:44:cb:bf:83:2c:52:03:2c:
         08:72:ce:4a:30:3f:04:ca:13:3d:46:b9:e8:d9:bf:aa:90:2c:
         51:c7:25:e3:dd:0d:b6:36:99:4e:97:c8:7d:89:f4:2f:97:50:
         f9:98:29:c5:72:00:9a:f5:46:db:c2:e3:5e:60:96:19:84:e7:
         57:41:bd:9f:94:0e:6a:62:8e:91:7f:72:57:3f:0f:78:19:de:
         4b:2e:03:45:fa:a1:40:a6:c1:4c:13:a8:a0:0c:4c:41:26:f5:
         48:1f:35:0c:8d:b2:d1:30:de:98:d4:7f:f0:6c:2b:b0:e0:33:
         37:6e:38:20:61:2f:2f:57:e9:c1:19:cf:70:77:64:c8:c0:e5:
         fd:65:1f:4b:76:b6:3f:6e:b7:f6:2d:ab:53:40:85:1c:7f:11:
         39:73:27:5f:ef:33:0b:18:09:e0:a2:80:40:d9:9c:d3:89:92:
         12:f5:42:5b:41:7a:75:07:d6:35:a4:4e:aa:22:13:50:53:f9:
         00:9f:f1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:24 2024 by rpki-client on console-fra.rpki-client.org