Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31372e302f32342d3234203d3e20323638343436.roa
File:                     34352e3136312e31372e302f32342d3234203d3e20323638343436.roa (raw, json)
Hash identifier:          tRdAL31O3bvhrE9jLw/c8E70MjPk10/B7iLPUU25FBA=
Subject key identifier:   CA:EB:4C:11:77:8B:F5:7A:67:5B:72:7C:5B:57:82:BF:44:A5:40:32
Certificate issuer:       /CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
Certificate serial:       1BA5CBAF89F8A7A2EA244919A09D8F46B580AFBA
Authority key identifier: D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31372e302f32342d3234203d3e20323638343436.roa
Signing time:             Wed 03 Apr 2024 18:33:11 +0000
ROA not before:           Wed 03 Apr 2024 18:28:11 +0000
ROA not after:            Wed 02 Apr 2025 18:33:11 +0000
asID:                     268446
IP address blocks:        45.161.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl
                          rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a5:cb:af:89:f8:a7:a2:ea:24:49:19:a0:9d:8f:46:b5:80:af:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
        Validity
            Not Before: Apr  3 18:28:11 2024 GMT
            Not After : Apr  2 18:33:11 2025 GMT
        Subject: CN=CAEB4C11778BF57A675B727C5B5782BF44A54032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:de:47:81:61:fc:f4:68:95:33:06:ae:8f:
                    0a:c5:cd:aa:50:48:15:b5:48:11:f8:17:67:68:ae:
                    28:1a:81:0d:9f:55:6b:0c:d7:71:fc:0b:b7:a2:d1:
                    4c:b7:6b:cf:b0:63:00:91:f5:c6:d3:e2:1b:3a:13:
                    60:cc:e9:a7:4d:7d:24:e8:c4:2c:eb:47:70:c3:c5:
                    ae:02:8b:eb:6e:3b:19:72:38:50:28:a6:24:aa:bf:
                    b1:98:40:26:59:22:e0:fe:29:15:8c:30:05:58:c7:
                    1d:19:74:e4:d5:52:f8:d1:54:39:5b:9a:8e:f1:bf:
                    e4:c7:50:8b:7a:59:c9:db:7f:df:4b:36:08:26:11:
                    d9:46:3d:08:ba:65:e0:bb:e3:79:e3:56:9f:46:08:
                    7d:b1:b5:77:f4:ec:f9:9b:a8:57:84:dc:5a:98:c2:
                    31:fa:ed:bd:b5:d9:09:44:14:31:fe:1f:89:fb:04:
                    96:b9:c8:d9:b2:06:3b:3e:04:2f:39:ea:c1:fd:f6:
                    18:0c:fc:76:fe:73:4e:6b:41:22:e7:d2:43:64:64:
                    e5:88:3b:f3:3d:21:62:92:31:b7:09:9b:32:cc:f6:
                    c1:70:7e:0f:e5:f6:44:12:79:0c:9b:fc:0c:c4:b7:
                    bc:8e:e1:23:ae:15:b4:94:4c:d2:df:38:8c:c0:b1:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EB:4C:11:77:8B:F5:7A:67:5B:72:7C:5B:57:82:BF:44:A5:40:32
            X509v3 Authority Key Identifier:
                keyid:D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31372e302f32342d3234203d3e20323638343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:fb:db:d9:36:e7:0f:e3:25:60:ca:56:aa:c0:5c:c8:f3:b8:
         d7:46:f9:02:bd:f1:d6:05:7e:14:e4:8d:fb:8e:22:b2:4c:09:
         fd:75:8b:10:a1:2a:c9:eb:08:fe:af:b8:1d:3c:89:64:b4:eb:
         59:a2:ed:d2:cc:d7:2a:bd:6e:03:cf:dd:6f:2f:07:5a:37:6a:
         94:84:e6:b0:f0:d8:7e:e9:1c:9e:ab:bf:b8:44:c3:f8:c9:88:
         6f:af:c3:f0:ab:ff:8f:e9:f6:65:e8:88:56:e8:7f:1c:a9:e9:
         ea:1a:2e:60:a4:15:14:e5:3f:ad:8a:73:41:58:94:b6:6e:03:
         19:bc:f4:fe:2f:1d:d6:fa:e6:81:05:16:a9:19:eb:61:63:c3:
         c6:66:07:f7:65:b6:48:57:25:5e:89:80:1b:b7:49:96:f7:be:
         ec:5c:fe:7b:45:e3:05:f2:38:38:04:1c:f3:07:92:07:22:a9:
         94:ea:ec:76:f6:ef:d5:a3:85:99:d9:9d:f8:09:46:dc:67:f6:
         1c:b8:50:85:3b:8a:43:e5:99:f3:bc:99:d8:ac:36:6a:ad:14:
         99:08:13:a1:3a:91:18:9c:d5:1b:dc:12:d7:a2:2b:cc:8e:c6:
         a4:c5:78:a1:93:ab:2c:d5:69:8f:e8:76:bd:66:74:a8:90:3f:
         76:be:6e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org