Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36342e302f32322d3232203d3e20323639313731.roa
File:                     34352e3138312e36342e302f32322d3232203d3e20323639313731.roa (raw, json)
Hash identifier:          WgNZBydhRmrXaJwZR1EFZEgStcLDcrI6hikPhM5rC8A=
Subject key identifier:   96:EB:0E:46:0B:97:6B:B9:05:58:21:58:EF:41:C6:B8:D2:70:E2:68
Certificate issuer:       /CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
Certificate serial:       6490A4391919A971D1993249DD6879058627BDBF
Authority key identifier: 36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36342e302f32322d3232203d3e20323639313731.roa
Signing time:             Mon 23 Sep 2024 18:35:04 +0000
ROA not before:           Mon 23 Sep 2024 18:30:04 +0000
ROA not after:            Mon 22 Sep 2025 18:35:04 +0000
asID:                     269171
IP address blocks:        45.181.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl
                          rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:90:a4:39:19:19:a9:71:d1:99:32:49:dd:68:79:05:86:27:bd:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
        Validity
            Not Before: Sep 23 18:30:04 2024 GMT
            Not After : Sep 22 18:35:04 2025 GMT
        Subject: CN=96EB0E460B976BB905582158EF41C6B8D270E268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:1d:76:aa:7f:17:57:1d:00:0e:a9:20:33:
                    c9:d6:72:80:3c:5a:7a:1d:be:d0:d7:ea:31:85:e8:
                    ee:ea:24:ba:b6:b6:07:46:e8:58:b2:c0:d7:17:ac:
                    3e:f2:bd:e1:ac:55:76:6b:08:12:e9:91:07:4d:ad:
                    74:d8:bc:a3:df:b8:b3:43:e2:3d:75:46:22:f4:4b:
                    e5:68:7f:f1:70:da:c1:1e:2d:f9:7e:37:4b:28:2e:
                    c6:08:e6:52:97:75:8c:7f:e2:97:e2:fe:2a:7e:6b:
                    60:7a:83:29:7f:9e:44:85:96:c9:9c:d8:1e:cc:04:
                    a6:31:e2:e3:c7:49:c8:09:9b:b4:a4:58:36:0a:15:
                    11:08:00:07:fc:e6:d0:b9:e6:0d:36:60:cb:92:d0:
                    f3:c7:06:da:7a:ad:33:89:11:3b:e5:b2:b1:09:74:
                    09:80:a9:d7:27:b9:3e:bc:6e:8c:db:3d:df:ca:a7:
                    e3:66:55:ce:7b:22:d0:f4:cc:86:43:93:96:85:c0:
                    d1:f6:9f:64:ac:ce:0d:42:82:ff:b5:80:c5:f7:49:
                    8e:59:48:76:1f:27:df:65:a9:b1:7b:0b:4a:75:57:
                    9f:21:bf:32:c3:15:60:5d:64:b7:ab:2d:3e:4b:92:
                    7e:31:46:bb:13:bc:4f:cf:aa:86:83:53:92:9d:22:
                    15:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EB:0E:46:0B:97:6B:B9:05:58:21:58:EF:41:C6:B8:D2:70:E2:68
            X509v3 Authority Key Identifier:
                keyid:36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36342e302f32322d3232203d3e20323639313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:fe:77:5b:0d:52:c1:09:f4:70:13:06:5b:a8:25:a2:9d:dc:
         c3:9c:96:19:19:18:d6:1b:28:4d:fe:73:65:df:e8:b8:1d:30:
         73:be:c3:a1:8a:74:f6:03:c1:d8:fd:36:77:64:41:10:ed:a6:
         f3:2e:ef:6e:71:83:8c:ac:2b:33:91:bf:63:f6:d4:d4:dd:bf:
         71:45:a8:e6:fd:ba:32:50:5c:6c:6c:c5:78:20:91:5c:d1:98:
         3d:be:97:e8:7f:bb:c6:a8:a9:0a:15:4e:1b:0d:c0:fc:43:79:
         1d:cd:7a:65:1f:a5:f5:f7:30:0b:35:ca:f6:35:12:e1:ed:93:
         1c:b4:79:5b:74:95:ac:37:ba:4b:75:4f:f5:37:cd:74:59:89:
         ce:e3:7b:02:a8:e2:21:2c:40:9b:a8:23:5d:36:24:78:68:40:
         a5:5a:4b:ad:2e:34:08:bf:97:76:56:09:d0:70:ac:c7:aa:bd:
         89:1f:4e:54:af:41:60:f5:70:e2:88:22:00:24:72:93:a9:4f:
         75:73:ca:a3:a9:ec:f6:5a:49:61:f8:ef:af:18:d0:04:f7:72:
         87:4f:f6:52:c2:e2:eb:48:be:fd:57:67:0a:60:bb:ac:b1:47:
         28:98:d7:10:62:0f:a7:a2:69:a2:11:21:8a:d9:6a:6a:91:39:
         a6:33:44:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:25 2024 by rpki-client on console-fra.rpki-client.org