Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa
File:                     34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa (raw, json)
Hash identifier:          z09pKrP9RB6T+j7QkTXPfs+YzlByQppsa149GuhLlLw=
Subject key identifier:   3A:E1:6E:7E:E1:59:6E:A5:C3:FD:9A:0D:C4:81:29:78:5B:A7:E6:B9
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       742251AF18EE506507D9C68FC883D0284B01C77F
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa
Signing time:             Thu 02 May 2024 17:58:55 +0000
ROA not before:           Thu 02 May 2024 17:53:55 +0000
ROA not after:            Thu 01 May 2025 17:58:55 +0000
asID:                     269423
IP address blocks:        45.186.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:22:51:af:18:ee:50:65:07:d9:c6:8f:c8:83:d0:28:4b:01:c7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: May  2 17:53:55 2024 GMT
            Not After : May  1 17:58:55 2025 GMT
        Subject: CN=3AE16E7EE1596EA5C3FD9A0DC48129785BA7E6B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:71:ba:4b:97:fc:15:5f:fd:63:fd:6f:56:
                    19:2a:bc:3f:6a:6a:ba:90:b6:4f:a3:64:58:37:8a:
                    23:9a:c0:8d:d1:78:60:6a:4f:ab:1c:b5:dd:cd:4c:
                    6d:2a:0b:bf:8d:8d:ea:61:78:a3:cb:cb:5d:47:4d:
                    16:34:37:59:9d:02:86:4a:de:0d:9b:43:80:89:55:
                    0d:3a:60:2b:a4:1e:d9:00:7c:9a:7e:17:3d:44:1e:
                    26:f1:7a:0c:1b:47:8b:77:ed:65:56:6c:ea:f4:47:
                    ae:89:32:7e:d2:c2:de:62:b4:9d:9d:9d:9a:d5:69:
                    0f:0f:27:b6:b6:eb:ff:d6:f8:d4:25:9c:4b:62:a6:
                    35:ec:c8:f7:32:64:f1:8e:5d:aa:d6:2f:02:05:1b:
                    d3:c2:c6:ef:20:01:26:34:9e:dc:f3:e1:dd:94:21:
                    c6:41:c7:d7:a7:91:66:80:0d:d1:ec:54:b6:2a:17:
                    4e:2d:d9:3a:5b:6e:30:55:05:e2:af:2e:d0:98:b2:
                    e8:ef:97:1f:67:aa:93:f2:97:2e:53:b0:aa:9e:19:
                    c6:41:d8:09:1b:05:20:42:5b:e6:6b:88:a6:4d:75:
                    0d:1f:d8:d1:b5:b6:b1:be:6c:a9:55:18:26:82:50:
                    77:0c:7a:0a:d8:8b:4b:40:3a:01:63:70:a3:5a:e4:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E1:6E:7E:E1:59:6E:A5:C3:FD:9A:0D:C4:81:29:78:5B:A7:E6:B9
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:65:85:de:51:02:a9:4b:9e:ef:26:3a:3f:e4:fa:b0:d4:0e:
         de:89:87:b1:23:a8:9c:a7:c9:25:ef:7d:18:b2:26:13:44:da:
         4a:0c:6d:5d:91:19:ed:39:53:20:1a:ae:ed:cc:d9:f1:a8:72:
         70:4f:32:77:17:0a:d5:f2:b7:66:5d:0c:12:ec:6f:a1:78:fa:
         a2:8d:6c:05:4b:6c:15:7b:69:b6:a7:bd:9c:a1:8c:eb:6b:5d:
         b4:dc:74:d6:e5:e8:7c:fb:60:df:00:46:3b:6f:16:7d:79:dd:
         11:64:2e:ce:d2:78:a5:4b:db:83:3f:40:5c:c4:f9:4e:66:1d:
         dd:99:c9:1c:9c:ae:b0:7c:70:6d:f3:f0:cc:f4:ad:0a:fc:d5:
         52:c0:0e:5a:1f:60:cf:52:1f:53:05:d3:c2:b4:27:b3:a5:c5:
         c7:2a:5f:fa:e8:6d:fe:e0:7a:86:4f:92:84:21:dd:bf:b6:6b:
         ed:14:c6:d2:f0:b3:b9:5d:a5:99:1c:bf:eb:d1:73:15:8e:78:
         c8:cb:97:98:68:11:84:d8:9c:cc:5f:b9:f9:e4:bb:99:f6:d6:
         f2:af:d5:c2:50:40:22:63:7e:e7:da:a3:b1:7b:0b:6e:06:39:
         11:1b:f9:3a:02:37:ad:f6:0d:fb:0b:6a:5f:0e:9a:89:13:df:
         3b:35:fa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:32 2024 by rpki-client on console-ams.rpki-client.org