Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36352e302f32342d3234203d3e20323639313731.roa
File:                     34352e3138312e36352e302f32342d3234203d3e20323639313731.roa (raw, json)
Hash identifier:          sDCLhc0+qfKjZCWUTsFRLmcKhUugyL/NHpjskFj5LpE=
Subject key identifier:   26:A3:D3:CC:9E:4D:E7:86:78:AF:B5:EF:DE:32:E0:F6:F7:9C:A3:D7
Certificate issuer:       /CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
Certificate serial:       647120569A0076475EF19FDC915B7EB1C3B0AECB
Authority key identifier: 36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36352e302f32342d3234203d3e20323639313731.roa
Signing time:             Mon 23 Sep 2024 18:35:29 +0000
ROA not before:           Mon 23 Sep 2024 18:30:29 +0000
ROA not after:            Mon 22 Sep 2025 18:35:29 +0000
asID:                     269171
IP address blocks:        45.181.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl
                          rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:71:20:56:9a:00:76:47:5e:f1:9f:dc:91:5b:7e:b1:c3:b0:ae:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
        Validity
            Not Before: Sep 23 18:30:29 2024 GMT
            Not After : Sep 22 18:35:29 2025 GMT
        Subject: CN=26A3D3CC9E4DE78678AFB5EFDE32E0F6F79CA3D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:75:ee:b5:6b:4a:49:1e:43:30:da:1f:a1:
                    05:44:e5:18:e2:d3:96:b7:27:9d:db:a8:30:ab:90:
                    64:d4:ce:d7:53:83:0b:0b:dd:a0:c3:c6:ad:25:00:
                    3d:5a:ac:58:ac:b9:17:86:e9:5a:42:db:19:4d:41:
                    a2:f6:9f:48:b1:39:13:b5:cb:44:d6:e8:b3:0a:a1:
                    f2:33:a9:d9:8f:df:74:6a:f7:a2:b7:d8:4e:bb:d7:
                    f9:cb:2d:f6:3c:b3:0f:d7:84:14:e2:80:0f:64:d4:
                    e5:e0:74:86:b9:90:36:58:d3:58:c2:bf:f5:0c:e2:
                    7e:4f:1c:93:03:d2:0c:c4:c6:64:3a:ed:66:56:7a:
                    98:05:63:42:df:67:a9:6c:8d:f3:be:6d:9a:f3:ad:
                    a4:ae:34:1c:8e:84:f7:e3:b3:7f:b2:8a:b2:12:eb:
                    ce:f8:58:99:a8:37:65:e5:99:27:b1:d2:ec:10:b3:
                    4a:48:d2:e7:e7:75:5e:24:95:81:32:5e:90:4f:34:
                    2a:84:29:55:59:0e:8b:bc:97:e3:70:d5:73:c7:05:
                    5d:51:ff:81:ad:b3:0d:15:de:0a:44:07:e8:52:98:
                    ac:c3:a7:54:b3:0e:88:ca:64:09:28:5e:2a:a2:31:
                    22:61:b3:59:d8:56:73:4d:04:3c:d8:d7:ca:a2:cd:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A3:D3:CC:9E:4D:E7:86:78:AF:B5:EF:DE:32:E0:F6:F7:9C:A3:D7
            X509v3 Authority Key Identifier:
                keyid:36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36352e302f32342d3234203d3e20323639313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a0:e4:e1:af:09:be:6a:f4:f3:64:7a:79:82:69:01:96:b6:
         21:40:6c:4c:39:23:a5:39:c2:8b:72:03:ec:86:bf:ef:8e:91:
         0d:42:8f:93:b6:6d:b3:92:70:13:36:b3:f9:39:1c:e0:fe:c1:
         32:9c:1b:d8:2f:60:b2:4a:ab:34:81:0c:25:24:53:fd:36:b9:
         9f:c1:1a:83:dd:3a:b6:1e:ff:90:a1:c0:0e:5a:85:ba:c1:1e:
         89:d8:a7:88:1a:f8:57:8e:17:e5:c8:3c:64:c3:93:8d:58:8a:
         ff:56:15:36:dd:1f:bb:e7:9a:a6:0f:ac:ed:a7:a0:4b:0b:2d:
         b6:c2:9e:ee:33:78:0d:0c:2b:03:18:b3:6e:09:03:b3:d5:32:
         30:e1:86:12:ac:9f:99:97:2d:5e:c9:6a:f6:d6:86:d7:c1:ec:
         aa:61:36:26:9a:fe:a7:95:25:79:ff:85:f7:df:48:44:33:c8:
         e2:11:d5:11:cc:d6:5e:e6:8a:b5:0e:38:91:8a:4b:d7:0d:bf:
         19:45:9e:36:7b:ac:d9:31:51:76:d5:3c:ad:4e:b8:b1:7e:e0:
         7f:15:3d:f0:d6:c9:30:68:ad:f6:6d:3f:e3:07:c9:e7:89:f6:
         41:15:c7:a9:6b:26:21:ba:54:1a:68:a0:27:aa:00:42:fc:8d:
         58:06:26:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:25 2024 by rpki-client on console-fra.rpki-client.org