Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36362e302f32342d3234203d3e20323639313731.roa
File:                     34352e3138312e36362e302f32342d3234203d3e20323639313731.roa (raw, json)
Hash identifier:          9em6JlOciP2Ldsq1K7fDnLvTwg4lNV7L2Q0qTbM5WHw=
Subject key identifier:   23:80:52:9A:AB:14:C6:14:CC:B0:F5:11:31:B6:E6:17:DF:57:3B:2A
Certificate issuer:       /CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
Certificate serial:       18D8FFF66C63815A6EC32BA1E0AB1BB8FDFEA886
Authority key identifier: 36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36362e302f32342d3234203d3e20323639313731.roa
Signing time:             Mon 23 Sep 2024 18:34:54 +0000
ROA not before:           Mon 23 Sep 2024 18:29:54 +0000
ROA not after:            Mon 22 Sep 2025 18:34:54 +0000
asID:                     269171
IP address blocks:        45.181.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl
                          rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d8:ff:f6:6c:63:81:5a:6e:c3:2b:a1:e0:ab:1b:b8:fd:fe:a8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
        Validity
            Not Before: Sep 23 18:29:54 2024 GMT
            Not After : Sep 22 18:34:54 2025 GMT
        Subject: CN=2380529AAB14C614CCB0F51131B6E617DF573B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a9:07:ad:e4:c8:e1:49:70:ca:38:ea:e9:16:
                    df:12:e0:57:d4:b1:ce:89:53:2b:1f:d5:6a:8a:1a:
                    f0:cf:af:d0:0d:e1:34:aa:4f:0d:ab:28:5e:5d:03:
                    16:d3:b4:c8:c4:be:46:77:bf:b2:a6:78:10:93:a2:
                    ce:1a:54:f7:4c:c1:2a:43:d7:a2:8e:1d:f0:62:32:
                    ac:4b:85:26:4a:62:08:6c:8d:ed:ed:aa:6c:9a:ff:
                    86:c8:2f:28:8f:78:6c:db:c5:1f:b3:51:7a:30:d6:
                    4b:1c:10:9a:bf:2d:a6:8d:07:fd:78:c5:87:c1:e2:
                    a9:6e:78:24:89:6c:39:35:b2:76:3d:b6:e6:6f:8c:
                    29:01:02:42:2a:d1:79:66:c5:d9:7a:e7:e8:57:3e:
                    aa:e5:1f:b4:cc:a1:7f:b8:e3:18:f5:f6:29:10:c0:
                    9f:f8:69:27:08:9d:95:cf:6f:77:47:28:67:53:b3:
                    3b:0f:1b:76:16:75:bb:17:57:08:84:1f:7e:78:c3:
                    08:d7:89:81:fa:66:b6:a5:11:65:d4:f2:ee:a4:cf:
                    48:52:b6:32:48:d1:8a:10:62:c8:ab:2b:83:f4:71:
                    4c:e6:c3:a1:2c:8b:88:54:ba:d4:ca:33:b4:26:67:
                    8e:9e:79:ca:88:43:7e:8e:e5:6a:d5:6d:e5:16:55:
                    21:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:80:52:9A:AB:14:C6:14:CC:B0:F5:11:31:B6:E6:17:DF:57:3B:2A
            X509v3 Authority Key Identifier:
                keyid:36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36362e302f32342d3234203d3e20323639313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:99:39:dc:e7:7e:28:86:5c:04:e2:76:dc:33:1f:d0:c1:de:
         f5:bd:61:42:1f:5e:19:d7:a3:d9:53:f3:00:52:d2:d5:4a:31:
         64:57:e4:0b:69:6d:38:5d:ab:6e:4f:86:51:40:d7:1b:a6:7f:
         18:78:7b:ad:84:96:85:df:16:80:95:6c:24:e7:bb:32:d6:97:
         15:34:3b:2e:b8:8b:ec:d6:08:eb:ab:5f:5f:bc:ec:27:a5:71:
         ba:29:77:4c:3e:2e:b3:c4:f7:2b:49:8e:70:76:cf:94:c5:56:
         53:da:17:63:f7:6a:c2:cb:3d:03:82:c3:14:cc:aa:15:f6:c1:
         e0:c7:9f:b7:8f:6f:35:c3:71:8e:e5:23:cb:ae:3e:ca:45:83:
         cd:39:98:b8:b9:4f:5d:c1:a4:74:28:d8:87:96:f4:7e:4b:31:
         e6:ca:b5:9f:f6:c8:77:e8:7d:83:23:85:30:f6:d6:b4:58:82:
         a1:20:0f:ad:7a:97:2c:dc:fd:62:cc:9b:6e:4a:ba:90:37:b6:
         09:0c:75:a4:8d:aa:61:27:3c:fe:23:6b:dd:77:af:f3:14:12:
         19:7b:35:36:3c:66:cf:6f:01:c0:e5:e8:7e:2b:e5:26:3f:7f:
         c3:87:dd:20:57:f4:d3:0b:9e:0c:b9:77:79:83:76:4c:fb:54:
         2d:0b:95:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:25 2024 by rpki-client on console-fra.rpki-client.org