Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa
File:                     34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa (raw, json)
Hash identifier:          5R/H/qjBOtiki6Dgdr+5995eHS0FePuqQzGxf2kkY94=
Subject key identifier:   12:57:F9:4F:E9:AD:61:61:2F:96:C7:18:BA:0A:54:AB:90:37:A6:3F
Certificate issuer:       /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial:       0BA8B4EF78B000DCF2159EEE27C5239D32527413
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa
Signing time:             Thu 04 Apr 2024 01:23:04 +0000
ROA not before:           Thu 04 Apr 2024 01:18:04 +0000
ROA not after:            Thu 03 Apr 2025 01:23:04 +0000
asID:                     269473
IP address blocks:        45.187.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
                          rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a8:b4:ef:78:b0:00:dc:f2:15:9e:ee:27:c5:23:9d:32:52:74:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
        Validity
            Not Before: Apr  4 01:18:04 2024 GMT
            Not After : Apr  3 01:23:04 2025 GMT
        Subject: CN=1257F94FE9AD61612F96C718BA0A54AB9037A63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8b:a2:08:70:fb:28:65:9c:39:dc:28:b8:17:
                    da:6b:42:b4:57:f3:93:e6:db:cb:e1:fc:fd:e7:c1:
                    fd:29:33:75:af:04:f9:7d:42:24:00:12:96:94:e1:
                    ac:5e:37:92:d4:ec:8b:bf:a2:34:df:a0:44:9d:51:
                    9e:b2:49:d3:10:de:ee:71:dc:a3:16:6f:29:00:ab:
                    37:0f:ec:6b:46:c6:9b:78:cd:65:dc:1e:63:dd:cf:
                    17:fd:fe:70:6c:30:6d:5d:1d:af:4f:ae:93:d9:21:
                    49:a4:0a:f2:53:20:64:5a:07:ea:07:83:88:68:74:
                    fe:0f:0c:68:b5:b2:5a:23:07:09:ef:58:73:74:11:
                    51:10:17:07:1d:3b:35:14:b1:1f:57:69:a4:d5:54:
                    96:50:13:3a:fb:0d:14:48:18:49:08:3a:23:ea:64:
                    c7:fd:bb:92:b0:a9:71:0a:99:de:2e:69:1d:f5:b3:
                    11:62:93:94:38:31:47:42:9d:7d:36:43:67:34:11:
                    5c:3c:ab:2a:4a:e1:ee:bf:3c:3b:eb:e1:55:13:3f:
                    e6:d9:09:09:b6:15:03:63:db:eb:8c:b3:2e:74:ed:
                    12:de:4e:de:0b:ae:51:b2:68:7e:c8:b7:5b:e6:dc:
                    a4:4d:4b:54:76:39:33:60:e2:da:96:91:45:7f:9e:
                    1a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:57:F9:4F:E9:AD:61:61:2F:96:C7:18:BA:0A:54:AB:90:37:A6:3F
            X509v3 Authority Key Identifier:
                keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:3c:ff:2d:68:fa:4a:fd:69:49:8d:b6:db:52:13:c4:e1:41:
         3a:02:13:a7:bf:0b:b4:59:54:e6:ad:23:dd:b2:50:c1:15:1f:
         20:29:cc:05:fe:64:79:36:04:2d:31:2b:17:e3:94:36:82:a2:
         2d:f8:6d:e9:f7:fa:a5:1f:8c:48:89:39:a2:d0:c5:fb:bc:53:
         36:2e:65:d6:41:fe:1e:27:35:7a:54:b7:7f:7d:5b:77:c3:d7:
         b4:1b:5d:04:1e:ea:e3:98:ef:2a:c4:60:91:df:32:f3:53:d2:
         9f:42:7d:f3:f9:af:11:fe:01:a2:0f:40:46:14:9c:37:c7:3f:
         8a:9d:9b:08:ac:d1:10:59:c3:c5:31:1d:b8:ca:a9:c9:9d:a9:
         61:0b:c8:d1:9a:0c:70:4f:0d:a0:18:e7:6f:2a:5c:30:ee:b6:
         83:0b:58:cd:35:f7:62:60:76:e8:9b:e4:00:62:3f:5e:89:74:
         59:ca:95:97:48:31:92:64:e7:f9:b2:47:5b:ca:a3:98:09:a9:
         15:cd:67:49:5f:32:63:f4:81:74:33:17:e8:6c:33:b2:88:90:
         ba:12:ce:de:15:2e:3e:7e:8e:99:33:69:16:40:ea:f9:0a:1f:
         81:60:4a:f7:af:6e:9d:72:38:b5:5e:37:cc:02:d9:c4:69:6b:
         1f:47:cb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:12 2024 by rpki-client on console-fra.rpki-client.org