Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36342e302f32342d3234203d3e20323639313731.roa
File:                     34352e3138312e36342e302f32342d3234203d3e20323639313731.roa (raw, json)
Hash identifier:          EdghBTHAYxxS/pzhBbOvgR5J7uUVrrYEshBMQtcu1E8=
Subject key identifier:   F4:B4:2D:FE:67:4F:87:5D:DE:BC:74:86:80:BA:78:F9:89:70:FF:07
Certificate issuer:       /CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
Certificate serial:       408F02D5925E99CB1E937F880057E0BA027BEE8F
Authority key identifier: 36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36342e302f32342d3234203d3e20323639313731.roa
Signing time:             Mon 23 Sep 2024 18:35:37 +0000
ROA not before:           Mon 23 Sep 2024 18:30:37 +0000
ROA not after:            Mon 22 Sep 2025 18:35:37 +0000
asID:                     269171
IP address blocks:        45.181.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl
                          rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8f:02:d5:92:5e:99:cb:1e:93:7f:88:00:57:e0:ba:02:7b:ee:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
        Validity
            Not Before: Sep 23 18:30:37 2024 GMT
            Not After : Sep 22 18:35:37 2025 GMT
        Subject: CN=F4B42DFE674F875DDEBC748680BA78F98970FF07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:96:12:32:6a:7b:6f:88:99:59:2d:90:21:
                    32:7f:dd:7d:92:1c:fd:4f:a5:24:3c:df:9a:c2:51:
                    8a:b9:43:6c:c1:74:2f:cd:84:a3:3e:28:04:a6:2b:
                    16:51:15:cd:be:02:9a:97:8a:1e:ff:1a:5b:f4:f9:
                    6c:a5:38:7e:65:ab:6a:39:e0:e0:69:45:29:62:0e:
                    55:47:78:5c:ae:eb:5f:32:b2:24:7e:74:06:c2:e8:
                    fd:7f:a3:9e:ab:f1:31:7f:ec:8a:3a:2b:6c:7c:44:
                    8d:16:6c:04:5b:1f:4b:f5:bf:9f:fa:82:ea:88:45:
                    5b:66:e7:ea:f8:a5:5c:17:b3:ab:1c:2c:ea:f3:1c:
                    d7:0e:f6:62:2a:f5:eb:2e:b0:ec:28:38:fe:c1:57:
                    80:f7:d5:b1:ef:f7:34:1b:30:94:07:65:e4:dc:18:
                    65:9c:a9:36:b2:23:24:a2:98:d2:91:19:f4:a0:d8:
                    c6:8a:93:44:06:7b:fb:e2:c5:91:a0:1c:51:40:22:
                    9e:8c:5d:c1:85:ee:37:95:aa:48:00:27:bf:6a:9a:
                    35:71:ec:41:e9:cd:12:6c:1e:ba:41:c3:70:4b:8c:
                    1c:42:05:a1:77:00:d8:14:2a:db:2f:3f:e4:27:2f:
                    e5:55:41:f4:3b:ba:c6:83:b8:5a:cb:49:fb:90:e3:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B4:2D:FE:67:4F:87:5D:DE:BC:74:86:80:BA:78:F9:89:70:FF:07
            X509v3 Authority Key Identifier:
                keyid:36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36342e302f32342d3234203d3e20323639313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:2f:da:a0:b5:26:f1:5f:8e:30:3b:19:2a:4f:b4:cc:0e:fd:
         0f:3f:0c:67:dc:43:05:2f:4a:70:09:44:97:53:c6:e2:15:42:
         c6:14:bf:89:eb:1c:a7:91:24:56:79:8a:e9:22:1c:7b:46:9c:
         f2:2a:bc:df:4f:04:83:59:c5:ff:03:7d:91:a9:e8:53:49:98:
         a2:44:bf:f5:ff:92:ee:6b:09:8e:af:ce:3b:e5:e0:bf:97:eb:
         0f:fd:ca:67:3b:a3:73:e4:6d:78:0a:28:30:89:f4:95:c1:8a:
         71:bf:e9:c3:e2:43:a7:ed:02:0e:3b:6b:0b:93:44:44:d3:ac:
         a9:82:df:45:05:0e:cc:db:36:da:df:54:07:20:ce:48:76:d5:
         d8:83:d0:92:e3:fe:66:e3:e2:37:e4:ab:28:2d:ff:8a:7a:82:
         a0:76:a1:b5:e5:56:09:29:e8:f5:a3:74:bd:21:d1:3b:41:15:
         5b:90:e1:c8:9e:80:26:a4:59:6f:d4:ad:2e:94:23:41:e3:4d:
         ee:f2:03:66:73:ab:3d:c3:14:1a:67:21:f5:df:75:c1:76:ac:
         be:22:dc:01:5e:67:70:eb:a2:97:7c:f6:2d:d2:d7:28:5b:1c:
         2a:ff:db:bf:d3:65:62:f0:b9:60:72:b6:c4:34:7e:1b:2e:8f:
         26:af:5d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:42 2024 by rpki-client on console-ams.rpki-client.org