Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/34352e36352e3232302e302f32322d3234203d3e20323032.roa
File:                     34352e36352e3232302e302f32322d3234203d3e20323032.roa (raw, json)
Hash identifier:          pPEorw9YnVdIYi5Wn7uJokD+CX5D5L5h7RSE+b5KKBw=
Subject key identifier:   6F:3E:5E:28:44:15:FE:4A:C0:C8:8F:B9:FE:20:D8:D1:72:48:2C:A2
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       07C43ED3725607544C56BFD7B0532AB40D861137
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/34352e36352e3232302e302f32322d3234203d3e20323032.roa
Signing time:             Thu 04 Apr 2024 03:31:31 +0000
ROA not before:           Thu 04 Apr 2024 03:26:31 +0000
ROA not after:            Thu 03 Apr 2025 03:31:31 +0000
asID:                     202
IP address blocks:        45.65.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 18:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c4:3e:d3:72:56:07:54:4c:56:bf:d7:b0:53:2a:b4:0d:86:11:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Apr  4 03:26:31 2024 GMT
            Not After : Apr  3 03:31:31 2025 GMT
        Subject: CN=6F3E5E284415FE4AC0C88FB9FE20D8D172482CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:f7:95:8f:f7:1a:9a:cd:2a:9e:a7:6b:c0:
                    1d:92:23:31:44:f8:60:c7:9e:d1:78:1d:c2:1e:f4:
                    8f:63:5c:85:43:f2:1e:b4:a3:74:de:e7:41:03:b2:
                    88:c2:db:9d:73:d9:00:3a:a3:77:d8:4a:0c:b4:73:
                    9b:b3:6a:ad:d2:a3:8f:7b:39:bc:99:a7:41:ab:8c:
                    a2:dc:ff:5d:f0:dd:13:9e:36:21:4d:08:9f:ff:cf:
                    67:0d:6c:b4:da:2b:a0:c7:8e:91:9a:21:ea:6a:e6:
                    a0:05:40:c2:f5:1a:b5:e0:03:49:ee:29:08:d7:9f:
                    20:5d:33:55:73:d9:b9:d8:7c:77:26:2a:39:30:51:
                    b3:95:a0:65:bf:45:f1:74:4a:82:96:f0:f3:27:11:
                    fe:2b:30:2a:d7:a5:3c:d6:0d:c0:5d:01:27:c1:dd:
                    31:77:c1:17:c5:55:3a:e1:85:5a:f9:a6:75:cc:b7:
                    38:8a:43:c1:1d:38:f6:bd:55:5d:33:29:12:bc:e8:
                    2e:16:65:4c:46:20:3d:92:10:aa:99:ae:e9:58:9f:
                    eb:43:27:ca:43:10:2a:3b:7d:fc:9d:7e:5c:42:4a:
                    67:a6:da:f1:84:5a:d7:d6:80:07:75:4d:0e:8c:1f:
                    d0:a0:b7:0b:fb:70:c0:1b:91:4a:8a:f1:56:60:a3:
                    71:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3E:5E:28:44:15:FE:4A:C0:C8:8F:B9:FE:20:D8:D1:72:48:2C:A2
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/34352e36352e3232302e302f32322d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:37:b6:29:78:31:ee:a3:96:47:5f:23:be:42:1f:9a:1a:88:
         6e:38:3b:b4:c3:32:51:14:f2:56:37:46:50:e2:01:4a:b3:1d:
         bb:47:50:19:b8:c0:c7:84:14:81:95:26:ed:9f:ea:7e:58:b7:
         f2:80:d3:a5:f1:db:5d:2d:59:68:e4:a8:96:8e:54:e2:e3:53:
         ca:7d:03:24:2a:a0:e8:a4:6b:a0:5f:6a:35:d7:9f:92:69:d7:
         16:28:29:07:f2:03:99:a3:64:a3:87:e0:91:72:97:82:b9:ad:
         3d:fc:81:43:e5:77:47:08:a7:31:4e:e6:03:99:32:9e:a6:3f:
         57:31:a3:16:26:6b:a7:6f:80:21:d5:e5:26:9a:55:32:d8:51:
         c9:3b:d0:b9:2b:9f:e0:0e:15:95:8d:1a:48:cb:70:bb:69:56:
         c2:9c:22:61:15:d4:de:fd:02:e4:af:71:ec:58:0e:01:7d:3a:
         0b:ee:cf:01:fc:ac:2d:46:b4:70:ef:9b:38:a0:e7:84:c9:50:
         94:24:77:72:20:bf:3a:9a:b4:d0:fd:75:ef:93:81:85:85:74:
         70:f5:df:73:32:78:b6:6b:29:6d:ec:54:c1:9c:36:6e:73:7e:
         1a:0a:f7:80:17:ae:96:1a:bb:be:52:af:d7:3f:3f:40:ca:c6:
         c2:ce:e3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:01 2024 by rpki-client on console-fra.rpki-client.org