Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36372e302f32342d3234203d3e20323639313731.roa
File:                     34352e3138312e36372e302f32342d3234203d3e20323639313731.roa (raw, json)
Hash identifier:          3eOYFOomEmIEFf6maXhryT9K5pbQEsnY4+bu6fyKNdc=
Subject key identifier:   42:AF:F5:AF:6D:6A:5C:34:B9:50:C0:EF:EC:B1:A4:25:0B:8A:63:38
Certificate issuer:       /CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
Certificate serial:       59E0171AE078D48DB87139A8997865ABD36EE9FC
Authority key identifier: 36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36372e302f32342d3234203d3e20323639313731.roa
Signing time:             Mon 23 Sep 2024 18:35:44 +0000
ROA not before:           Mon 23 Sep 2024 18:30:44 +0000
ROA not after:            Mon 22 Sep 2025 18:35:44 +0000
asID:                     269171
IP address blocks:        45.181.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl
                          rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e0:17:1a:e0:78:d4:8d:b8:71:39:a8:99:78:65:ab:d3:6e:e9:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
        Validity
            Not Before: Sep 23 18:30:44 2024 GMT
            Not After : Sep 22 18:35:44 2025 GMT
        Subject: CN=42AFF5AF6D6A5C34B950C0EFECB1A4250B8A6338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:9d:4d:53:c1:9a:79:47:33:b6:18:6e:af:
                    93:a0:4f:a7:36:99:a6:e0:a4:93:8c:b5:a3:d2:96:
                    21:c3:2c:20:9d:43:4a:03:e9:e8:44:8c:4f:d2:b4:
                    5d:6c:10:38:56:3b:41:25:00:6f:0d:5b:4a:ad:be:
                    b7:79:1d:c1:70:1c:bc:0c:bc:dd:37:5e:3b:ce:7e:
                    44:22:2b:08:35:45:ad:c5:41:28:7a:24:02:e0:5c:
                    56:05:d8:f2:b1:55:ae:7f:b4:0e:86:1d:df:a6:b0:
                    ad:18:e1:c6:a8:74:cb:21:07:cc:01:7a:fe:0e:5e:
                    79:b3:8b:d9:05:97:50:ea:91:38:bf:7c:cf:fc:f8:
                    fc:34:2e:7e:f4:a3:31:0a:92:7b:a7:c3:ac:1a:fa:
                    48:1e:dd:39:91:2c:55:1f:ef:aa:a4:be:c6:98:6d:
                    91:c9:94:1b:35:64:d5:70:a7:dd:e1:57:f0:56:1c:
                    a3:74:b0:2c:76:a3:90:0f:e8:7f:92:a4:a3:25:fb:
                    b0:c0:21:a5:68:26:15:4a:94:52:1d:ce:2c:52:58:
                    b6:c3:d1:b1:61:78:40:5e:31:7a:70:26:5f:90:d0:
                    6e:28:96:b9:5c:88:ce:5d:68:cc:61:55:6e:18:89:
                    62:ed:0f:5d:27:ce:41:88:23:2e:d2:dc:b1:3b:84:
                    69:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AF:F5:AF:6D:6A:5C:34:B9:50:C0:EF:EC:B1:A4:25:0B:8A:63:38
            X509v3 Authority Key Identifier:
                keyid:36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36372e302f32342d3234203d3e20323639313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:1d:70:f1:d5:c0:71:e6:ee:6e:ad:5e:a7:cc:3f:99:5a:7c:
         c8:6b:ac:ac:cd:ce:fa:d2:00:7b:33:91:e4:c5:13:07:18:e7:
         63:0c:bd:7e:be:40:50:54:30:3e:dc:59:a5:86:43:dd:95:64:
         89:f5:a4:bd:27:41:75:ab:c8:14:29:b0:11:e0:57:79:b5:bd:
         d9:30:d3:15:ec:37:cc:58:00:ff:ef:2b:f6:d6:e7:de:ed:ed:
         93:1f:7c:59:4f:c9:1b:4b:27:fe:66:96:10:48:2d:2d:48:f3:
         8c:41:23:7d:74:a8:3a:42:1f:e2:40:7d:d8:58:2e:7a:41:e6:
         34:26:17:4e:3e:5d:25:0e:e7:71:dc:b4:d1:9c:d8:aa:ba:34:
         6f:d9:12:d2:ef:c5:c3:9e:15:27:32:e1:39:b5:5e:91:db:cb:
         b2:7f:d1:d1:db:4c:60:bc:86:63:53:ec:62:9b:c8:b2:7a:cd:
         8b:2a:65:14:bb:28:35:f4:aa:cc:c6:b8:08:99:04:f5:60:37:
         35:47:a8:0c:45:9e:63:5e:35:7a:0c:3c:0a:ea:33:d8:a6:4d:
         d5:de:88:8e:77:c6:ef:03:16:8d:6e:46:ab:a1:07:95:5d:9c:
         28:68:62:50:f8:5b:5b:d6:c7:32:4c:a0:12:34:6c:e7:7f:9d:
         84:d3:da:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:25 2024 by rpki-client on console-fra.rpki-client.org