Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36342e302f32332d3233203d3e20323639313731.roa
File:                     34352e3138312e36342e302f32332d3233203d3e20323639313731.roa (raw, json)
Hash identifier:          keI8xz8dE+G7AQxTLZD7UQ1IDhrygYN4b7/Mwfakt6Y=
Subject key identifier:   EE:20:BE:83:67:40:4D:B1:D3:B6:AC:FF:B3:EA:8B:A4:E3:6A:20:E1
Certificate issuer:       /CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
Certificate serial:       72E4455CF2266B76A8D213F0595A683BE03C4999
Authority key identifier: 36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36342e302f32332d3233203d3e20323639313731.roa
Signing time:             Mon 23 Sep 2024 18:35:19 +0000
ROA not before:           Mon 23 Sep 2024 18:30:19 +0000
ROA not after:            Mon 22 Sep 2025 18:35:19 +0000
asID:                     269171
IP address blocks:        45.181.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl
                          rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e4:45:5c:f2:26:6b:76:a8:d2:13:f0:59:5a:68:3b:e0:3c:49:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
        Validity
            Not Before: Sep 23 18:30:19 2024 GMT
            Not After : Sep 22 18:35:19 2025 GMT
        Subject: CN=EE20BE8367404DB1D3B6ACFFB3EA8BA4E36A20E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ea:87:c6:3a:58:d8:68:03:7f:13:02:68:d8:
                    14:f5:db:7f:35:52:a3:26:d5:fc:bd:c6:ea:1f:e2:
                    7d:a4:b8:d5:7c:6b:42:4e:b0:8e:6b:7f:25:04:18:
                    92:30:e6:7c:5a:ec:99:c5:8d:f1:0b:70:3a:7d:b2:
                    de:14:67:29:b1:8e:a8:19:13:8f:0f:7c:c9:e6:23:
                    7e:d1:91:23:76:ac:1d:6e:c2:86:aa:1f:7b:bc:f4:
                    39:82:8b:82:fa:c4:0b:40:4e:67:e0:84:25:cb:50:
                    fc:e8:fc:18:25:3e:79:e5:fa:21:f7:cc:ad:cf:86:
                    92:9f:cb:06:41:b9:59:69:e3:41:b8:62:ad:ea:d7:
                    75:60:a6:2e:e3:ba:c2:96:e0:df:25:a3:c0:71:e4:
                    9b:fc:ef:ab:b6:e4:4b:65:c4:f8:fd:f3:b7:94:92:
                    7d:64:a4:0e:6b:b7:a8:2d:86:a2:de:89:8a:50:18:
                    55:fd:25:63:fe:90:68:65:13:cd:da:dc:b1:88:80:
                    e2:16:49:9f:c3:80:0f:d3:19:76:62:76:fc:35:06:
                    1d:2f:74:66:2e:ad:ac:f1:92:53:2f:44:a6:dd:d9:
                    08:ab:2e:99:fa:3f:cb:ee:38:3f:68:45:d3:be:30:
                    dd:80:69:b5:df:02:8e:3b:10:d8:fc:ec:74:e4:2a:
                    8d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:20:BE:83:67:40:4D:B1:D3:B6:AC:FF:B3:EA:8B:A4:E3:6A:20:E1
            X509v3 Authority Key Identifier:
                keyid:36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36342e302f32332d3233203d3e20323639313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:f6:74:e9:89:fb:56:52:68:c7:c7:db:36:7a:2c:f5:db:99:
         50:72:8b:27:23:7e:de:07:f9:7f:14:fe:dc:38:4f:c3:c7:12:
         3a:f5:d9:8b:77:cd:fa:02:4b:96:4d:2d:ee:0c:5e:36:03:da:
         c3:28:59:9e:81:fa:60:ba:3f:28:e6:08:dd:d8:db:ee:12:0e:
         96:20:03:50:fa:54:4c:6c:f0:ac:0f:b4:60:53:fb:c1:53:5a:
         f4:09:c1:3f:e5:0f:10:24:2a:17:03:f8:67:02:00:dc:0b:a3:
         18:16:16:0d:28:e8:5d:e9:7b:12:54:bb:dc:a5:87:34:d4:29:
         f6:08:7d:f7:1b:9b:d9:a3:59:52:7b:2a:fc:7a:be:50:d6:87:
         70:7d:32:f7:4e:f3:0b:34:a9:25:38:90:6c:6d:d4:2d:40:2c:
         b1:8e:77:bd:49:72:80:54:b0:26:e8:e3:60:96:63:0f:1c:41:
         b1:99:fa:d0:d6:e4:ee:a7:96:00:fe:b2:7a:34:0e:35:0a:c1:
         cd:72:b3:65:17:1e:5d:5c:41:54:ca:c5:ea:39:20:9d:73:7b:
         07:f4:30:3d:8a:de:09:80:2d:61:83:19:c6:27:60:21:e4:89:
         f0:9b:1d:b6:ed:e4:57:dc:31:6e:fd:b2:f2:49:d9:eb:78:29:
         24:17:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:25 2024 by rpki-client on console-fra.rpki-client.org