Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32322d3234203d3e203631363231.roa
File:                     34352e3233352e3136302e302f32322d3234203d3e203631363231.roa (raw, json)
Hash identifier:          WRdV5JX3+mcFmYdw46dEBY/ypiMFUGgjmImoQW6qAUU=
Subject key identifier:   2C:9C:F0:19:02:24:8B:46:67:5C:12:6E:2B:B6:B3:52:9E:37:53:9D
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       2BBBC2F199A33297193FE557B80E74D1E69251EC
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32322d3234203d3e203631363231.roa
Signing time:             Wed 20 Nov 2024 13:22:35 +0000
ROA not before:           Wed 20 Nov 2024 13:17:35 +0000
ROA not after:            Wed 19 Nov 2025 13:22:35 +0000
asID:                     61621
IP address blocks:        45.235.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl
                          rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:bb:c2:f1:99:a3:32:97:19:3f:e5:57:b8:0e:74:d1:e6:92:51:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 20 13:17:35 2024 GMT
            Not After : Nov 19 13:22:35 2025 GMT
        Subject: CN=2C9CF01902248B46675C126E2BB6B3529E37539D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:21:76:f0:55:c2:4c:b2:c4:1c:f4:99:eb:6f:
                    2d:fc:19:a4:36:6b:a2:f0:68:4f:6f:fc:b2:12:d2:
                    9d:5c:c4:26:7b:cd:a4:69:63:4c:c2:b9:c7:cd:5d:
                    c4:4a:1d:c7:a0:56:f5:01:12:fd:e7:51:47:02:7b:
                    1b:ee:11:de:4d:d3:e9:9e:48:4f:81:30:b4:9e:ef:
                    1c:ae:f0:c2:13:35:91:12:4b:a9:2f:b8:c9:b6:fe:
                    7d:67:73:9a:9a:b0:04:2e:3e:ec:5f:a7:b0:e1:cb:
                    6c:72:41:b1:a2:71:39:0c:75:4f:0f:d4:17:29:76:
                    bf:2d:99:fe:86:e8:2f:f2:bb:bf:66:b0:ac:a4:07:
                    7b:1f:b8:cf:ad:20:0a:66:57:4e:a0:72:f8:4b:bd:
                    97:63:e1:6f:81:de:49:66:17:6d:c5:f5:f8:e3:4f:
                    a9:13:7b:26:43:f0:d0:54:e0:2a:e7:70:56:33:40:
                    c0:1d:02:a5:a2:ed:9f:d5:3a:dd:e8:8c:01:01:ec:
                    86:1b:ef:3b:9c:c3:6d:8c:6c:b1:09:2a:a7:fc:ce:
                    ea:34:28:15:f3:e8:d6:d2:cf:c1:e2:36:07:44:a1:
                    f8:a4:69:c9:95:82:d6:60:a9:2d:e4:f7:91:aa:c3:
                    56:23:e5:6d:b7:4b:cf:0e:33:03:16:8b:c0:02:9d:
                    f6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9C:F0:19:02:24:8B:46:67:5C:12:6E:2B:B6:B3:52:9E:37:53:9D
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32322d3234203d3e203631363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:e8:87:95:83:0a:2c:90:9f:4a:8e:4a:4b:25:25:51:01:74:
         b0:a9:75:37:6f:6b:e8:c3:d2:44:28:0f:9e:5a:9e:99:03:ad:
         26:3e:53:bd:60:09:3e:2e:ee:bb:66:f4:a2:10:c5:be:a8:b8:
         19:8a:f2:ca:fb:17:53:06:cc:d1:28:32:54:a1:7f:18:84:21:
         bf:15:fc:9e:3b:0a:b6:e7:63:0d:f7:e3:8d:1d:4c:07:56:eb:
         c4:38:ed:76:b8:cc:1b:cc:97:38:b5:08:00:e6:e3:a3:c1:c7:
         67:18:aa:98:89:93:b5:4a:a5:44:cb:45:7a:98:ab:84:2e:37:
         47:62:c7:91:fd:89:47:ee:f0:22:1d:3c:e7:4d:67:9c:1e:47:
         0f:63:05:f7:5a:48:ed:5d:ec:ba:29:7a:80:14:d3:e8:e3:a3:
         95:6e:51:31:71:f8:01:ce:92:da:ac:57:b1:2f:12:65:53:12:
         2d:9c:06:6a:f0:b8:04:bd:01:eb:dd:07:d0:c9:91:96:c5:e8:
         a5:3d:40:1d:1e:a0:d4:c0:e2:4d:f2:0b:9c:52:9d:2c:54:53:
         03:66:05:96:7e:ac:e7:aa:cf:e3:e8:5e:97:33:9f:c2:be:24:
         f8:be:b5:a5:73:1f:f8:d6:6f:d0:a3:70:5d:ff:6f:43:04:c4:
         0f:ce:b2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:13 2024 by rpki-client on console-fra.rpki-client.org