Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31392e302f32342d3234203d3e20323638343436.roa
File:                     34352e3136312e31392e302f32342d3234203d3e20323638343436.roa (raw, json)
Hash identifier:          teoW2OzTR0iT5LuOa9lVft6yg7no7ZxxEpMMHi5j1QA=
Subject key identifier:   7D:BD:CB:ED:E8:D8:DC:20:F6:5B:1E:AF:56:6C:D0:FC:44:80:1F:1C
Certificate issuer:       /CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
Certificate serial:       13C8CFFC940E48FC86A5B2C822DDC2F87EAE4E56
Authority key identifier: D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31392e302f32342d3234203d3e20323638343436.roa
Signing time:             Wed 03 Apr 2024 18:33:11 +0000
ROA not before:           Wed 03 Apr 2024 18:28:11 +0000
ROA not after:            Wed 02 Apr 2025 18:33:11 +0000
asID:                     268446
IP address blocks:        45.161.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl
                          rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c8:cf:fc:94:0e:48:fc:86:a5:b2:c8:22:dd:c2:f8:7e:ae:4e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
        Validity
            Not Before: Apr  3 18:28:11 2024 GMT
            Not After : Apr  2 18:33:11 2025 GMT
        Subject: CN=7DBDCBEDE8D8DC20F65B1EAF566CD0FC44801F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cd:1f:47:9b:0f:5d:05:62:c5:b3:7a:7a:b3:
                    60:8f:f6:70:71:3c:40:74:19:7e:e6:9f:b7:20:06:
                    05:e6:f4:f6:34:07:c3:ed:50:e1:6d:2a:c8:56:88:
                    31:35:cf:e1:51:6b:7d:6d:e4:f6:15:f9:ea:94:77:
                    25:99:e6:92:19:d9:cb:9e:4c:d6:5d:56:72:95:71:
                    a3:a0:0a:b3:27:02:ef:f2:3c:b9:46:63:54:27:71:
                    eb:9b:ee:82:b6:16:5f:d0:11:0e:a1:0e:14:3c:44:
                    f4:eb:73:e7:e3:85:75:d5:31:01:cf:3f:56:80:17:
                    60:ae:0c:90:f8:77:c4:91:22:d1:ad:9e:62:43:03:
                    96:b2:19:96:63:ef:78:54:3a:73:d7:4b:5f:9c:01:
                    c9:79:fc:bb:60:f6:4e:87:7a:ad:33:40:d4:2e:90:
                    b8:6b:59:6d:d0:2e:29:48:bf:6e:53:55:06:81:f7:
                    ec:b0:f3:17:15:0b:52:07:03:67:c4:ae:49:a1:e6:
                    cb:b2:88:74:bf:3e:7e:95:2c:0e:92:45:7a:e0:c5:
                    3a:84:c8:4a:76:3f:ef:6b:e4:f3:55:f6:d8:61:59:
                    d1:88:1c:85:14:35:07:a8:47:3f:f4:02:ad:34:18:
                    d0:28:06:f2:82:68:45:61:50:65:66:7d:4e:c5:7a:
                    51:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BD:CB:ED:E8:D8:DC:20:F6:5B:1E:AF:56:6C:D0:FC:44:80:1F:1C
            X509v3 Authority Key Identifier:
                keyid:D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31392e302f32342d3234203d3e20323638343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:26:6f:fe:34:b6:f1:27:ef:03:24:d6:25:d5:7d:0e:b9:55:
         fa:8a:5f:07:b1:27:24:8d:32:90:46:34:e0:b2:c9:62:e8:33:
         bb:f4:4f:21:36:0b:e1:cf:c5:8d:7e:4d:ce:e7:b6:d0:02:93:
         40:50:cb:97:76:55:eb:e5:1b:d6:52:48:97:85:b4:8e:de:23:
         68:6d:ea:32:db:98:b9:45:dc:ca:15:c5:7e:55:e6:29:ef:f9:
         be:ab:0a:25:22:88:64:46:61:e6:1e:b9:79:b5:c0:75:df:89:
         ce:7a:c5:db:40:a0:f5:19:b5:71:8c:d4:e8:5e:4f:5b:2c:39:
         7e:3f:6a:51:61:ea:9b:cb:a6:bd:62:58:f2:bc:1d:82:da:b3:
         b9:58:b4:6d:7c:ec:55:5a:27:0b:17:83:06:f3:3c:70:2a:45:
         8d:fc:44:55:e6:7d:7d:15:a3:2e:02:9d:9e:90:6b:c5:da:a1:
         ad:be:6a:c9:c3:62:9c:17:d7:9a:c9:64:3b:12:dd:d4:a4:c6:
         bb:74:be:20:88:b0:76:3f:03:75:ce:c0:9c:d4:45:bf:65:31:
         c0:9b:51:f5:29:50:f2:dd:b3:da:fa:d9:0f:e7:96:95:3e:8c:
         eb:68:90:e3:c9:5a:e9:c4:f5:44:f0:1b:c8:6c:bd:9a:ae:f7:
         14:ad:bc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:17:05 2024 by rpki-client on console-ams.rpki-client.org