Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132302e302f32342d3234203d3e20323639343233.roa
File:                     34352e3138362e3132302e302f32342d3234203d3e20323639343233.roa (raw, json)
Hash identifier:          1OZATLAbobjruhpOnXjbnc7E8GUrr0Y5tz1iB/47xuM=
Subject key identifier:   20:D7:DD:8B:D3:41:C6:91:0A:0A:39:51:02:2B:34:7E:0C:7A:9A:B3
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       1E67604864C99E1AD73386BF01DD1E9428FDF8B4
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132302e302f32342d3234203d3e20323639343233.roa
Signing time:             Thu 02 May 2024 17:58:55 +0000
ROA not before:           Thu 02 May 2024 17:53:55 +0000
ROA not after:            Thu 01 May 2025 17:58:55 +0000
asID:                     269423
IP address blocks:        45.186.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:67:60:48:64:c9:9e:1a:d7:33:86:bf:01:dd:1e:94:28:fd:f8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: May  2 17:53:55 2024 GMT
            Not After : May  1 17:58:55 2025 GMT
        Subject: CN=20D7DD8BD341C6910A0A3951022B347E0C7A9AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:c2:63:1c:80:c7:21:a8:a9:ad:d6:28:b5:
                    f3:93:13:c8:fe:92:dd:ee:03:ba:3f:59:7a:e0:06:
                    00:9b:6d:b7:52:e2:56:7d:35:96:93:27:ba:83:9f:
                    bd:88:e4:9b:38:04:89:c3:c7:b7:4e:77:95:d3:d9:
                    ce:df:82:54:55:d5:cd:3d:60:41:31:23:59:a4:35:
                    5b:96:61:49:e3:39:e0:65:1a:37:9a:03:6e:bf:76:
                    da:4a:fc:f0:d9:77:ff:02:63:5f:3e:ea:d5:60:c3:
                    2c:68:ca:cd:fb:60:da:79:de:79:89:4b:39:b4:7c:
                    1e:68:fc:8a:39:6c:ed:f3:fe:c7:80:c3:d7:7e:c8:
                    9f:e6:f3:d6:e7:d2:f0:fa:c7:d1:36:b4:1b:c6:0d:
                    4f:58:f4:ef:62:f0:91:e0:a5:01:eb:04:66:9c:07:
                    a9:47:ec:24:16:b5:fb:27:e1:fc:98:6e:6d:81:1c:
                    81:4d:06:f1:9d:a3:f7:6f:a4:71:ef:dc:59:18:62:
                    02:9e:05:42:e5:84:4a:6b:bc:f7:de:fc:d9:91:35:
                    05:84:8d:9f:6d:ee:bc:23:dc:c7:3d:14:46:e3:a6:
                    95:5b:54:e7:eb:ac:0f:0a:d4:0d:1a:1a:1f:86:db:
                    e3:b4:c2:1b:38:6b:b3:cd:87:e8:13:af:56:da:85:
                    cf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D7:DD:8B:D3:41:C6:91:0A:0A:39:51:02:2B:34:7E:0C:7A:9A:B3
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132302e302f32342d3234203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:11:d8:9f:c1:52:f8:9d:3d:63:8e:dc:78:65:b7:3e:61:a5:
         dc:67:bc:73:b2:ee:7d:6c:d1:09:2c:ed:88:d9:37:24:0a:85:
         d5:f9:dd:ef:b4:e5:a5:de:8c:e7:aa:d3:f7:a8:e2:dd:86:1b:
         23:5a:df:e4:3d:08:3d:b3:1d:a4:77:49:67:bf:ff:49:b8:07:
         23:69:46:14:95:16:ba:4d:a9:b2:25:73:6d:d3:43:5b:a5:17:
         5b:ec:4b:d9:bd:f2:95:9a:2b:ba:50:ac:29:59:ba:73:7e:35:
         a9:e8:28:c2:69:4f:ed:ed:12:c0:89:ea:00:c2:1d:d7:d5:69:
         c6:b4:cc:fb:96:c1:e6:c1:5d:ef:a6:b4:40:fd:b0:43:51:31:
         0e:0d:54:f2:1d:2c:c4:4a:27:23:f2:96:d2:99:7e:45:7d:5f:
         50:d6:53:e2:1e:9b:03:66:cb:81:80:a5:c5:b7:94:c3:8a:de:
         20:25:c4:60:e7:8d:ed:38:fe:96:0e:53:db:98:77:14:ce:54:
         68:46:25:70:85:3c:3f:71:3b:05:b5:17:45:33:e8:fc:65:45:
         6b:2f:1d:bf:2b:e0:73:bc:ad:19:26:56:45:31:64:23:4f:12:
         01:71:ae:5a:fe:72:62:95:88:c2:0a:ba:0b:28:a8:1b:60:3e:
         94:e2:19:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:25 2024 by rpki-client on console-fra.rpki-client.org