Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132322e302f32342d3234203d3e20323639343233.roa
File:                     34352e3138362e3132322e302f32342d3234203d3e20323639343233.roa (raw, json)
Hash identifier:          Vt3oDBgfk5GWbyNvc1wUgX71I0MtEtTkJj+zN2Pvztc=
Subject key identifier:   2B:B2:21:D5:0B:16:81:C7:F5:09:A6:11:E7:CC:EF:8C:50:6F:AC:CB
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       7E58B8220E068024ED915C9BB23BFB334A4C1576
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132322e302f32342d3234203d3e20323639343233.roa
Signing time:             Thu 02 May 2024 17:58:56 +0000
ROA not before:           Thu 02 May 2024 17:53:56 +0000
ROA not after:            Thu 01 May 2025 17:58:56 +0000
asID:                     269423
IP address blocks:        45.186.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:58:b8:22:0e:06:80:24:ed:91:5c:9b:b2:3b:fb:33:4a:4c:15:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: May  2 17:53:56 2024 GMT
            Not After : May  1 17:58:56 2025 GMT
        Subject: CN=2BB221D50B1681C7F509A611E7CCEF8C506FACCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5e:e4:f0:57:15:2a:c2:4b:80:49:b1:48:da:
                    32:4d:38:5c:8c:27:96:da:25:7d:f8:c5:28:31:7c:
                    ee:2b:ac:3e:aa:ac:47:0b:32:f2:43:a0:da:a7:22:
                    18:a8:48:18:a2:38:4c:2b:b5:88:3d:dd:4a:5a:2d:
                    55:c8:1e:27:fb:68:17:b1:3f:52:7f:84:92:6c:4a:
                    ba:bd:48:bf:73:79:bf:ba:13:0e:f0:5c:42:e5:c7:
                    91:3b:b2:31:e0:4a:aa:29:23:f0:e1:86:78:05:8c:
                    b8:8d:08:af:a7:99:22:d2:7d:a5:2e:42:ff:54:49:
                    29:fd:9a:fd:5f:79:85:24:d6:39:3d:04:f6:32:bf:
                    01:8d:b8:51:05:95:93:48:78:3d:62:e3:04:11:3d:
                    96:0c:bf:0d:df:20:f2:2c:e1:f1:4e:90:ce:a5:6b:
                    a1:d9:87:ce:30:f9:08:8a:14:a1:96:77:66:fc:e8:
                    dc:9a:1b:15:72:c8:4a:bf:8c:d7:82:52:9d:aa:7e:
                    bc:65:6d:ab:23:43:bc:52:4a:fb:54:c6:54:4c:14:
                    2a:88:eb:a8:ff:b0:0a:73:4b:0f:50:56:6f:b2:e0:
                    a3:77:5d:cb:c9:18:48:4f:0a:b8:d1:75:ee:c1:89:
                    69:06:27:01:44:4b:fd:a2:e3:04:03:5b:4f:cf:7a:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B2:21:D5:0B:16:81:C7:F5:09:A6:11:E7:CC:EF:8C:50:6F:AC:CB
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132322e302f32342d3234203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:94:cb:72:7d:14:7c:0d:27:2e:7c:16:b5:2f:25:4b:04:f7:
         4c:c4:23:50:f7:30:48:24:c4:2c:3d:09:60:cc:9f:e8:ff:02:
         76:cf:07:a1:70:14:aa:fd:98:df:c2:e5:bc:aa:8b:d6:56:9a:
         3b:64:6c:16:35:1e:03:7d:35:3a:1d:5b:57:aa:04:bb:a1:a3:
         e5:61:7a:e9:01:de:85:96:db:72:a5:18:e4:ee:a7:b3:c0:bf:
         0e:19:f6:b7:5f:9c:7a:89:1b:8e:55:50:59:45:0e:be:15:51:
         2e:fc:69:33:c2:42:6b:92:91:b9:b4:1d:c9:6b:ae:fc:ae:f6:
         c4:b5:eb:c0:23:f3:49:13:d2:62:b2:60:0f:cc:57:66:fe:dd:
         af:2f:89:7f:28:b8:42:4b:44:30:b1:d1:9e:7b:ee:bf:3d:81:
         59:ac:c8:d2:c5:3a:db:18:dc:aa:c1:7c:0b:50:0f:e2:53:72:
         9c:cf:9f:41:3c:5c:ee:b4:01:95:ca:82:80:ce:4c:70:73:72:
         e8:9d:35:6b:82:3b:e8:35:f2:32:04:b5:3d:75:6d:96:39:a9:
         67:0c:63:56:2a:5d:ec:7c:fb:48:bf:cf:e0:bf:cd:5f:f9:da:
         7b:94:e7:e1:32:99:ab:af:87:98:31:2a:96:52:6a:38:af:22:
         f7:9c:e0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:20 2024 by rpki-client on console-ams.rpki-client.org