Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3137302e302f32332d3233203d3e20323639343733.roa
File:                     34352e3138372e3137302e302f32332d3233203d3e20323639343733.roa (raw, json)
Hash identifier:          Lx7nSCgj5dOCOPrurXvE2HW2gQpQataNP9dJX4pXSJY=
Subject key identifier:   AF:20:78:76:D3:56:DC:6E:80:8D:2A:35:9C:BE:90:31:12:39:9D:72
Certificate issuer:       /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial:       584D3BAD0B94568FB1BF5313F16266D414283910
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3137302e302f32332d3233203d3e20323639343733.roa
Signing time:             Tue 06 Aug 2024 20:11:50 +0000
ROA not before:           Tue 06 Aug 2024 20:06:50 +0000
ROA not after:            Tue 05 Aug 2025 20:11:50 +0000
asID:                     269473
IP address blocks:        45.187.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
                          rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4d:3b:ad:0b:94:56:8f:b1:bf:53:13:f1:62:66:d4:14:28:39:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
        Validity
            Not Before: Aug  6 20:06:50 2024 GMT
            Not After : Aug  5 20:11:50 2025 GMT
        Subject: CN=AF207876D356DC6E808D2A359CBE903112399D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2c:99:b4:cb:58:b4:7a:90:cb:82:fe:09:13:
                    9b:32:6e:27:08:e4:11:83:e5:04:ae:68:8e:0a:97:
                    3f:20:ad:22:ae:9f:27:7d:db:87:e7:58:84:5d:9a:
                    e4:f7:51:07:98:48:c4:c7:2f:e8:cb:d3:5c:71:3c:
                    fc:9b:fe:57:78:3d:fb:aa:ce:0f:16:82:36:37:92:
                    f7:eb:28:e8:60:dd:34:09:36:eb:09:bb:e8:b0:7b:
                    6e:d1:73:60:e6:a1:9a:a0:cf:f5:7a:8f:25:0a:8a:
                    bd:fa:f8:a1:85:4e:eb:85:73:3f:91:fa:f5:fe:8d:
                    75:dd:f4:b5:d9:2e:34:47:f5:8a:de:ab:a3:67:81:
                    b0:33:7b:c6:66:1b:10:94:7c:da:60:0f:8e:a7:06:
                    74:d9:a4:3a:14:29:57:e7:1c:0f:08:72:51:12:ac:
                    01:a2:25:13:92:5e:15:a9:a6:75:03:7e:14:66:44:
                    e1:ed:b7:87:f7:23:30:23:d0:c3:b5:dc:fd:28:d5:
                    a6:bf:0f:68:e9:da:8c:8f:bc:46:5b:6c:2d:45:5c:
                    19:f3:60:51:61:65:f5:63:29:98:23:bb:f7:d5:c0:
                    c0:ce:b7:bb:c4:ca:9e:4f:d4:fb:14:ef:32:27:f6:
                    c1:bc:58:0d:24:0e:dc:fa:03:28:10:36:4a:45:bc:
                    82:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:20:78:76:D3:56:DC:6E:80:8D:2A:35:9C:BE:90:31:12:39:9D:72
            X509v3 Authority Key Identifier:
                keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3137302e302f32332d3233203d3e20323639343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:e9:c4:82:1c:fd:f9:28:51:8a:e5:91:ab:44:a9:df:64:fe:
         ae:ea:55:7d:b9:d7:66:c2:19:b7:ec:bc:18:cc:3a:fb:c0:22:
         2e:cb:6d:54:a2:f9:bd:4a:cf:6a:bc:4e:1f:fc:ed:68:19:36:
         51:1d:78:97:38:38:b3:c1:2a:b3:54:a3:9f:9c:63:ef:f2:b9:
         4d:18:2b:4f:47:97:b0:b3:df:7a:6c:65:2c:52:35:84:d0:5e:
         21:2e:df:16:0b:93:36:77:5c:1e:3c:7d:71:a4:4e:3e:0b:37:
         5c:46:a8:4b:de:ef:4c:14:f0:ba:da:05:15:0b:9e:3a:10:2e:
         b7:b0:76:ef:49:ad:d0:6f:0f:c6:49:21:46:dc:26:f7:f1:f4:
         25:0b:d0:f9:9e:62:6b:5c:e6:e7:f9:42:59:f2:65:72:51:05:
         30:85:dd:a0:b3:03:b7:69:7c:79:e6:df:88:1b:5f:67:53:39:
         f4:8d:77:7c:3a:af:98:09:83:74:3f:48:60:be:22:7c:40:7c:
         dd:1e:de:3a:27:bf:b7:4d:dd:ee:e0:f1:50:cd:76:e9:25:62:
         b1:4a:17:9e:47:a1:2a:81:a1:63:3d:fd:55:41:e1:dd:13:5d:
         54:c8:e2:45:fa:70:51:02:07:b4:e2:c9:56:ad:c4:8e:b2:eb:
         0c:aa:f3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:20 2024 by rpki-client on console-ams.rpki-client.org