Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/34352e37312e34322e302f32332d3233203d3e20323733333136.roa
File:                     34352e37312e34322e302f32332d3233203d3e20323733333136.roa (raw, json)
Hash identifier:          R/4pYusQkMMrICtKTrTxkZNsIdG/KALSddEix8DZ3Jc=
Subject key identifier:   B9:C9:01:52:E8:CB:EF:CF:DE:34:51:84:D4:3D:DD:09:17:45:B2:EB
Certificate issuer:       /CN=79798C354EE82F89133F9F2BDCA4F8220483498E
Certificate serial:       47E1AB0FC5F89DD1AAABB8DA1603A58061192EC7
Authority key identifier: 79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/34352e37312e34322e302f32332d3233203d3e20323733333136.roa
Signing time:             Wed 03 Apr 2024 21:32:18 +0000
ROA not before:           Wed 03 Apr 2024 21:27:18 +0000
ROA not after:            Wed 02 Apr 2025 21:32:18 +0000
asID:                     273316
IP address blocks:        45.71.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl
                          rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e1:ab:0f:c5:f8:9d:d1:aa:ab:b8:da:16:03:a5:80:61:19:2e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79798C354EE82F89133F9F2BDCA4F8220483498E
        Validity
            Not Before: Apr  3 21:27:18 2024 GMT
            Not After : Apr  2 21:32:18 2025 GMT
        Subject: CN=B9C90152E8CBEFCFDE345184D43DDD091745B2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:81:3d:4c:d0:81:71:8e:9b:4f:af:51:5e:
                    f6:38:03:42:40:30:b7:8b:02:41:73:c9:69:99:f3:
                    d3:13:33:5e:c0:37:f5:be:9a:1b:5a:8d:62:aa:0b:
                    3e:ef:07:92:27:df:c9:6f:33:2c:fd:a5:ab:37:83:
                    20:99:6b:63:8d:09:96:0c:7e:3c:a3:51:b0:12:61:
                    24:01:21:a4:92:bc:34:07:a3:56:c8:52:9b:dd:19:
                    1e:1a:86:7c:6c:ff:c1:56:ed:ab:3b:2e:e9:f8:b6:
                    fc:cd:5a:11:89:e7:d2:41:9e:b2:cf:10:af:77:88:
                    31:51:98:a2:af:ff:d8:2c:f6:aa:ad:84:80:98:93:
                    42:ee:3a:05:e3:fb:6b:19:e9:e7:a8:ce:9e:ab:6b:
                    91:5b:11:8f:21:3f:27:1c:15:85:ca:36:b3:43:23:
                    1f:e2:cc:db:ad:44:a5:aa:25:a8:89:f4:2a:c7:e2:
                    6b:99:0b:cf:3b:08:47:ab:54:f1:29:65:e5:0a:83:
                    ad:c2:7b:68:b7:4e:5f:fc:3a:06:e1:86:7b:53:4b:
                    a8:42:69:d9:b1:a1:b7:85:bb:33:8d:53:61:f8:ad:
                    b9:2b:09:8b:58:66:7c:03:3f:0d:66:d4:bf:65:ab:
                    10:94:dc:ea:e3:31:c4:8e:6c:9d:14:44:14:11:5c:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C9:01:52:E8:CB:EF:CF:DE:34:51:84:D4:3D:DD:09:17:45:B2:EB
            X509v3 Authority Key Identifier:
                keyid:79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/34352e37312e34322e302f32332d3233203d3e20323733333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:22:83:64:97:d2:1e:6b:7d:64:30:f9:96:2f:c8:ec:c3:28:
         5b:95:79:60:1d:f2:28:e4:9d:c9:67:86:eb:0c:93:03:fe:40:
         29:38:19:06:ff:f0:9f:cc:29:50:27:60:b5:2d:5b:7c:ea:5b:
         32:09:f2:ce:06:1f:79:1c:59:9e:71:05:7c:da:ac:87:47:10:
         01:cc:56:5a:14:e5:a0:96:2c:64:54:82:e1:da:f6:a0:f5:7d:
         e2:1a:15:8c:10:26:24:97:d5:36:0c:cd:84:db:62:d9:a7:93:
         0b:cc:10:ca:8c:a9:56:ae:ae:5c:75:1b:d1:1c:fb:b9:7d:f2:
         be:9b:89:51:3a:bc:df:e3:c0:76:16:70:1c:bd:85:39:61:6a:
         61:6e:a9:fd:73:cc:25:36:e2:4c:f4:8e:00:15:5d:9a:47:1b:
         8e:16:12:1b:bf:78:99:d3:9c:26:2b:2b:e0:9c:54:92:fb:5c:
         9d:e1:bd:67:5e:90:9b:2c:09:97:a4:86:9d:7c:56:dc:35:e3:
         27:4d:40:9d:06:bd:88:20:3c:dd:5a:5c:0f:e0:ac:58:d9:d3:
         c7:cb:9b:cd:e9:ee:8d:fc:bd:bf:29:22:e1:22:1b:36:d2:07:
         c0:8a:0a:a1:54:e0:e4:70:18:02:ac:8c:6a:55:15:e1:2c:c5:
         f3:4f:1f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:33 2024 by rpki-client on console-ams.rpki-client.org