Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/34352e37312e34332e302f32342d3234203d3e20323733333136.roa
File:                     34352e37312e34332e302f32342d3234203d3e20323733333136.roa (raw, json)
Hash identifier:          j8sTIrKiTP+cOqZGaiDPT59G640tzDpSeZttzR8UxrI=
Subject key identifier:   1F:43:4B:14:A1:1D:57:F0:46:EC:14:7C:E0:9D:9B:CC:96:E4:6A:02
Certificate issuer:       /CN=79798C354EE82F89133F9F2BDCA4F8220483498E
Certificate serial:       4AC4B3C249847EA98647FB41EEEA6553FD3B1141
Authority key identifier: 79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/34352e37312e34332e302f32342d3234203d3e20323733333136.roa
Signing time:             Wed 03 Apr 2024 21:32:18 +0000
ROA not before:           Wed 03 Apr 2024 21:27:18 +0000
ROA not after:            Wed 02 Apr 2025 21:32:18 +0000
asID:                     273316
IP address blocks:        45.71.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl
                          rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c4:b3:c2:49:84:7e:a9:86:47:fb:41:ee:ea:65:53:fd:3b:11:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79798C354EE82F89133F9F2BDCA4F8220483498E
        Validity
            Not Before: Apr  3 21:27:18 2024 GMT
            Not After : Apr  2 21:32:18 2025 GMT
        Subject: CN=1F434B14A11D57F046EC147CE09D9BCC96E46A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6e:c9:33:e4:17:3c:86:e3:9f:6f:a1:a3:0f:
                    e2:4d:6b:0f:e0:da:de:34:c0:d3:ee:3e:ee:a9:8e:
                    49:77:17:29:6c:01:0b:f8:27:73:6c:4b:45:ad:1d:
                    1a:b2:27:27:1b:9c:82:bd:d6:79:51:d4:ee:24:65:
                    ba:53:69:3e:e1:e8:0f:ae:46:a6:d8:aa:5a:83:42:
                    71:a0:49:e6:ac:15:b3:e4:9e:cd:f0:78:a7:1d:b2:
                    81:eb:e1:5d:ce:c5:2e:95:d2:ad:d5:95:3d:13:5d:
                    9c:13:3f:f7:4f:9a:92:cf:1f:f2:e5:5a:8e:b6:05:
                    5f:67:c9:af:65:a2:71:c5:d9:c1:11:d1:71:92:b8:
                    d6:9b:70:d4:eb:7e:57:f0:f9:30:4d:6f:cc:59:c8:
                    f8:cc:32:4c:ea:60:27:09:07:43:2a:07:32:37:ec:
                    dd:ff:eb:d9:6a:6f:30:4e:44:9c:1b:d9:bc:33:19:
                    fb:20:ed:db:d5:4c:76:75:93:fe:e0:d3:f4:b1:de:
                    a6:61:10:20:b2:02:c1:71:94:8e:ef:4d:98:c1:e0:
                    31:cb:aa:63:f3:fb:f6:52:15:ad:4d:c5:51:ac:32:
                    60:64:08:cd:48:b0:1c:09:01:f1:99:5d:dc:9e:e6:
                    c8:85:af:b0:97:08:fc:09:c7:53:17:f3:c4:f8:48:
                    75:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:43:4B:14:A1:1D:57:F0:46:EC:14:7C:E0:9D:9B:CC:96:E4:6A:02
            X509v3 Authority Key Identifier:
                keyid:79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/34352e37312e34332e302f32342d3234203d3e20323733333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:68:d4:e0:92:57:d2:7e:b7:5f:ed:e4:19:b0:6e:5d:3d:b9:
         14:72:ea:0f:cc:10:6b:5e:c7:7b:b6:d9:a2:5c:a4:a1:f0:4b:
         3c:ef:3f:0b:b3:49:6f:a6:98:b0:95:38:86:bb:8f:3a:97:31:
         75:98:7b:1d:2f:14:6b:e8:16:ac:04:60:59:60:9e:92:40:e4:
         f8:2d:a8:db:ab:87:a2:1b:08:a8:fc:0c:30:ba:8e:23:ed:90:
         ed:1a:61:6e:0c:f8:7f:0c:f0:46:1a:d7:bb:63:76:8e:ec:36:
         83:d7:91:09:c5:e3:df:01:34:97:89:bb:a9:91:50:ea:8f:78:
         b3:57:41:a6:8c:60:2a:25:b5:fa:1f:12:15:16:22:1a:46:b7:
         c0:bd:15:63:d0:ae:34:45:25:22:cf:0f:fe:3e:e6:d1:97:d7:
         dd:02:7e:7e:63:f6:72:3a:16:d1:90:1d:2d:1a:46:ef:84:24:
         6d:d2:ed:7e:3f:7e:24:98:a1:3f:1b:8f:fb:3e:8d:47:1c:cd:
         90:5b:b7:f2:d1:ab:25:ba:56:04:e1:de:23:94:91:25:f9:55:
         25:4b:99:c6:5e:95:f1:fc:b8:7f:be:d1:5c:85:2d:6c:09:db:
         23:40:6b:1a:ee:72:6e:6c:eb:f6:29:fd:49:84:a6:c6:22:fb:
         81:5c:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:06 2024 by rpki-client on console-fra.rpki-client.org