Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/1/34352e3137372e3130302e302f32322d3234203d3e203133373836.roa
File:                     34352e3137372e3130302e302f32322d3234203d3e203133373836.roa (raw, json)
Hash identifier:          iksbyG0MhuvImG7x9XyeTJxD9yvVdFVEJoRd/NJLbNQ=
Subject key identifier:   84:A8:51:DC:FF:63:34:53:78:16:65:32:AD:BA:C3:4A:07:F1:E7:C1
Certificate issuer:       /CN=96AFED63B689A791A3CAECEF2B7206AF3008AD7D
Certificate serial:       1F3913154C1925F49C633FF6E13A5982E44A8C74
Authority key identifier: 96:AF:ED:63:B6:89:A7:91:A3:CA:EC:EF:2B:72:06:AF:30:08:AD:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96AFED63B689A791A3CAECEF2B7206AF3008AD7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/1/34352e3137372e3130302e302f32322d3234203d3e203133373836.roa
Signing time:             Thu 04 Apr 2024 00:27:48 +0000
ROA not before:           Thu 04 Apr 2024 00:22:48 +0000
ROA not after:            Thu 03 Apr 2025 00:27:48 +0000
asID:                     13786
IP address blocks:        45.177.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/1/96AFED63B689A791A3CAECEF2B7206AF3008AD7D.crl
                          rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/1/96AFED63B689A791A3CAECEF2B7206AF3008AD7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96AFED63B689A791A3CAECEF2B7206AF3008AD7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:39:13:15:4c:19:25:f4:9c:63:3f:f6:e1:3a:59:82:e4:4a:8c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96AFED63B689A791A3CAECEF2B7206AF3008AD7D
        Validity
            Not Before: Apr  4 00:22:48 2024 GMT
            Not After : Apr  3 00:27:48 2025 GMT
        Subject: CN=84A851DCFF63345378166532ADBAC34A07F1E7C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:be:d3:69:1f:47:53:26:b6:ab:7c:94:ad:4e:
                    f5:ae:c5:0c:37:e5:34:1f:50:bf:f6:0f:81:66:ea:
                    eb:10:58:74:6b:7b:99:d4:91:b8:28:03:9e:a2:e8:
                    29:5d:1a:35:26:47:f0:9e:9e:8a:49:af:12:3c:5a:
                    fa:04:68:2f:8b:46:27:fd:3f:02:86:89:5d:4e:98:
                    2b:79:fc:ff:9c:97:1a:95:fe:88:8c:4c:db:cf:95:
                    41:56:48:45:1e:5d:6b:03:2d:53:fc:a5:d7:c7:68:
                    de:3f:b9:ff:c6:d5:c3:fc:54:73:e1:6f:54:1d:ff:
                    5c:29:b8:c3:69:b2:ce:c6:f8:d7:5b:79:58:d8:a7:
                    af:fb:e5:13:01:6f:d0:f3:cf:12:52:20:95:64:f3:
                    ab:c1:b0:ff:6e:78:90:ef:de:26:6e:9f:a0:01:b0:
                    04:ed:01:89:ba:06:e7:25:fd:e7:ef:dc:3f:54:88:
                    0f:ab:cd:80:e0:9f:45:81:59:f1:09:6a:25:f9:98:
                    62:e2:eb:82:0d:51:f1:8a:9b:d1:21:11:e3:bc:c8:
                    e2:64:0c:2b:cd:21:7b:68:14:41:05:35:af:55:c8:
                    a6:a5:83:1d:1e:b9:20:23:00:20:e1:eb:38:f3:1c:
                    21:11:09:d4:ec:4a:06:92:fc:a2:0e:32:a6:43:d4:
                    9b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A8:51:DC:FF:63:34:53:78:16:65:32:AD:BA:C3:4A:07:F1:E7:C1
            X509v3 Authority Key Identifier:
                keyid:96:AF:ED:63:B6:89:A7:91:A3:CA:EC:EF:2B:72:06:AF:30:08:AD:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/1/96AFED63B689A791A3CAECEF2B7206AF3008AD7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96AFED63B689A791A3CAECEF2B7206AF3008AD7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/1/34352e3137372e3130302e302f32322d3234203d3e203133373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:77:04:cf:09:c2:50:4f:80:66:ff:b8:ff:bc:3b:7f:ac:ba:
         db:a8:a2:3f:f4:1b:cc:44:d3:93:38:fc:b3:0e:e9:d6:83:31:
         a9:74:42:23:39:6f:c0:f8:66:dd:b1:e3:a3:c7:bc:32:ce:c9:
         f1:f1:8a:f5:13:04:2c:50:c9:98:1b:ba:5f:21:53:57:c6:80:
         40:ce:bd:c3:b9:f2:d2:51:39:2b:4d:4f:75:52:3b:e2:a6:a3:
         66:a0:5d:68:b0:b7:05:a5:0f:d8:31:8b:f9:32:24:72:27:de:
         c6:e8:bb:db:c3:79:d6:f2:83:28:78:cb:10:ae:b9:49:5f:fd:
         02:a7:b0:07:7c:82:b5:ea:b8:89:0f:09:f3:02:73:9c:0a:60:
         86:82:c1:45:e1:de:cd:21:79:be:ab:51:94:48:62:b6:11:4c:
         7f:e6:e6:7c:d9:fc:60:f4:16:c7:b9:d2:85:8d:42:64:4c:1f:
         4b:b4:77:a8:eb:b0:59:8b:be:e5:6e:ea:3e:54:34:f2:40:f9:
         a5:ba:c1:43:2b:b7:5f:70:1a:a8:56:b5:ea:1e:8e:6a:fc:53:
         d5:93:bd:f8:b1:99:fe:37:16:5e:5d:7b:11:85:65:64:23:18:
         9e:8e:2b:d6:1c:90:e6:0e:0f:a3:34:1f:87:d8:26:d4:1e:0b:
         71:6c:cf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:26 2024 by rpki-client on console-ams.rpki-client.org