Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132302e302f32332d3233203d3e20323639343233.roa
File:                     34352e3138362e3132302e302f32332d3233203d3e20323639343233.roa (raw, json)
Hash identifier:          TR5/rj79ilKBN8moAULva9O5G+9H0MEchq9QQU1bt8w=
Subject key identifier:   C5:30:2E:F6:4A:AD:7A:93:C5:52:67:47:B6:05:C9:BD:35:A4:C4:F4
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       33300475D2B9CC97CC3025D5BC3F588B73A78A71
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132302e302f32332d3233203d3e20323639343233.roa
Signing time:             Thu 02 May 2024 17:58:56 +0000
ROA not before:           Thu 02 May 2024 17:53:56 +0000
ROA not after:            Thu 01 May 2025 17:58:56 +0000
asID:                     269423
IP address blocks:        45.186.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:30:04:75:d2:b9:cc:97:cc:30:25:d5:bc:3f:58:8b:73:a7:8a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: May  2 17:53:56 2024 GMT
            Not After : May  1 17:58:56 2025 GMT
        Subject: CN=C5302EF64AAD7A93C5526747B605C9BD35A4C4F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a7:4f:b2:f6:84:07:4b:21:c3:54:bd:49:e9:
                    01:54:24:a1:52:07:0c:b4:e8:49:56:9a:99:42:f5:
                    5c:ad:04:00:68:4d:22:95:56:9d:32:51:7d:ea:aa:
                    e5:08:ea:d5:ec:c2:77:18:07:3b:8b:d8:e7:c6:fa:
                    1a:a6:f9:f2:2c:44:69:1f:ae:61:db:78:02:09:74:
                    9b:2f:a4:f0:db:df:8c:93:3e:17:0c:34:7d:3e:73:
                    14:56:62:60:ef:f4:43:5f:c8:7e:9b:26:f2:3f:72:
                    f6:14:8e:53:74:b5:12:b9:fb:32:fb:24:af:f7:fc:
                    54:8f:e5:c7:d7:9f:fa:05:d3:81:cc:3d:a6:d7:b8:
                    7b:87:b2:29:98:a8:c7:3e:d5:2b:c4:47:4d:32:56:
                    9f:4e:fb:b9:df:ee:23:0f:56:55:65:97:fd:dc:34:
                    97:99:66:b6:5c:cd:ab:2b:af:57:fc:d3:93:9e:f9:
                    b8:de:e7:29:3c:27:da:61:36:6c:5a:48:cc:89:bb:
                    25:1a:27:ac:d7:94:12:68:94:a6:6a:5e:fb:40:81:
                    4d:7c:34:c0:71:6f:c3:fa:e6:44:d4:4d:20:6d:de:
                    d7:02:81:60:19:5c:3c:6c:ac:d3:87:72:a9:9c:21:
                    ca:3e:db:f5:76:d3:16:50:f1:a7:ba:bb:66:31:41:
                    86:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:30:2E:F6:4A:AD:7A:93:C5:52:67:47:B6:05:C9:BD:35:A4:C4:F4
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132302e302f32332d3233203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:59:df:b0:5d:92:6f:97:94:98:6d:42:b8:2b:7d:27:b0:3d:
         86:f4:a9:ca:80:5d:61:a5:ae:5c:10:64:03:6e:48:60:ce:a5:
         59:94:af:b7:cc:5d:0d:ec:2d:3b:2f:33:9b:fd:91:08:11:ab:
         4a:a9:a0:c9:02:00:a7:2e:11:29:0c:c0:b8:49:d6:20:02:3f:
         a1:6f:c9:e6:73:f1:dc:43:a3:1c:78:2b:ef:c5:ee:ab:60:ba:
         a0:6e:91:a8:dd:c8:d6:2e:1e:89:f9:f2:29:e4:aa:32:06:62:
         8b:bb:95:ab:9a:09:c9:ce:fb:94:2a:c2:22:e1:1a:2d:0b:f6:
         37:24:e1:c0:ac:0e:f9:f2:99:21:e6:32:06:f1:44:0e:4d:b8:
         29:33:8e:fc:b3:c7:8f:35:82:f1:fe:14:bb:3b:03:f7:0e:a0:
         91:19:ce:41:06:e7:5b:0d:8b:be:76:b0:35:48:dc:ed:0a:f1:
         15:3f:24:3d:c1:2d:de:be:72:42:40:34:46:30:5c:39:b2:f5:
         44:e6:77:60:3a:19:90:01:5d:9d:6a:c1:2d:05:d8:c2:13:9b:
         98:1e:f5:4e:e2:95:06:50:e5:8d:38:9c:a7:eb:1c:f9:e7:0e:
         e2:21:47:a5:fe:a1:93:61:36:5a:90:29:b0:0c:38:df:3c:1b:
         e0:6a:0b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:25 2024 by rpki-client on console-fra.rpki-client.org