Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/34352e3136352e3232302e302f32322d3234203d3e20323637393333.roa
File:                     34352e3136352e3232302e302f32322d3234203d3e20323637393333.roa (raw, json)
Hash identifier:          eO/YlAN+BQLDqlbkMWQElefFmpkJOPzwUOizT1AfviU=
Subject key identifier:   EC:86:D3:89:D5:59:3E:CD:B4:3A:DD:83:BF:12:5D:80:8E:55:84:A8
Certificate issuer:       /CN=85F479D0628FB756E26AA406F0E8C072770444C8
Certificate serial:       4847A881080A3AC32DF594EAFDCEE3152B574CB3
Authority key identifier: 85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/34352e3136352e3232302e302f32322d3234203d3e20323637393333.roa
Signing time:             Tue 05 Nov 2024 20:53:09 +0000
ROA not before:           Tue 05 Nov 2024 20:48:09 +0000
ROA not after:            Tue 04 Nov 2025 20:53:09 +0000
asID:                     267933
IP address blocks:        45.165.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/85F479D0628FB756E26AA406F0E8C072770444C8.crl
                          rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/85F479D0628FB756E26AA406F0E8C072770444C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:47:a8:81:08:0a:3a:c3:2d:f5:94:ea:fd:ce:e3:15:2b:57:4c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F479D0628FB756E26AA406F0E8C072770444C8
        Validity
            Not Before: Nov  5 20:48:09 2024 GMT
            Not After : Nov  4 20:53:09 2025 GMT
        Subject: CN=EC86D389D5593ECDB43ADD83BF125D808E5584A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:10:c6:a7:97:e6:2b:a5:e1:a6:9c:7a:fc:67:
                    76:9b:bf:61:9c:88:b6:cf:b7:b7:40:49:93:56:99:
                    db:4e:20:77:df:5e:5b:59:f4:21:5f:a1:23:2e:e2:
                    af:eb:21:c1:8d:e0:b3:36:79:a3:b3:13:8d:24:82:
                    90:be:ba:bf:46:c7:fe:e3:97:7e:fa:92:2c:bf:74:
                    c1:cf:44:90:b1:69:b9:3b:6b:90:8d:30:4d:d3:5a:
                    b6:99:d4:31:a6:1e:89:50:22:62:b0:fd:ea:3b:9f:
                    96:22:58:57:2c:59:ec:84:74:a4:4f:0c:41:af:de:
                    0b:f6:89:bc:5c:c0:eb:f3:df:0f:6d:17:ec:b0:98:
                    40:d7:1c:2f:fe:db:a2:9c:32:ff:c4:1e:b7:4b:c6:
                    b9:36:6c:3a:8f:b7:0e:e3:e4:2b:c7:8f:da:0b:5e:
                    ba:35:2d:ec:f3:6f:93:74:b1:64:e9:f5:b6:d8:77:
                    0c:4f:cf:46:c0:4d:af:0c:2f:91:c7:87:83:9c:a5:
                    91:ce:2f:35:aa:19:96:07:2a:cd:a5:72:f8:6c:ef:
                    e5:74:73:2d:e0:b7:fb:fc:e4:41:b9:4d:e6:2e:04:
                    04:62:b0:21:b2:89:93:e9:d3:61:d9:c9:55:a4:06:
                    6a:67:11:04:1a:90:4d:53:ac:20:a8:d8:91:b2:73:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:86:D3:89:D5:59:3E:CD:B4:3A:DD:83:BF:12:5D:80:8E:55:84:A8
            X509v3 Authority Key Identifier:
                keyid:85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/85F479D0628FB756E26AA406F0E8C072770444C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/34352e3136352e3232302e302f32322d3234203d3e20323637393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:77:21:cd:8c:c2:50:dd:3a:6b:8e:11:fc:60:ef:fe:a7:43:
         db:89:2c:d5:03:82:b3:89:85:78:7c:c5:87:82:44:aa:b8:51:
         b7:7c:b4:60:ea:65:9e:67:de:b9:aa:3b:9d:02:f9:ac:b1:9f:
         55:2b:32:c7:63:18:ec:e4:18:d9:24:f4:6a:38:be:ac:e8:5d:
         a8:ab:d0:50:cd:25:85:de:3c:cc:a2:9d:3e:65:03:d1:b8:90:
         de:e1:22:82:a5:2a:9d:80:70:5f:b0:b2:f6:e2:91:f4:1c:0f:
         19:e6:aa:a6:4b:f0:f0:19:61:23:92:1d:be:4c:4d:3e:e3:66:
         0d:c4:54:b6:ed:a4:2e:9b:92:d5:38:ef:de:f5:30:70:27:2a:
         2b:4e:28:70:34:58:2f:83:3c:77:55:e9:73:70:07:d9:07:8f:
         05:89:7c:db:ea:8d:f6:d6:1f:a6:04:e9:ad:a2:ff:07:5f:cb:
         a0:07:0a:07:72:0a:31:41:64:78:32:f4:96:fd:f2:3a:6d:71:
         00:65:84:69:52:61:c0:37:f4:6c:f0:86:5c:25:d1:28:42:0f:
         03:08:01:e5:34:42:43:20:a5:80:57:0b:f4:0c:51:5b:31:15:
         83:e7:70:ea:7c:05:34:84:e7:2d:45:e1:22:80:35:86:85:5f:
         53:9a:59:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org