Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa
File:                     34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier:          BjKhPs4DUwJXq0WKR3TpHtVbLQVg4p0MECUqxRHAQBQ=
Subject key identifier:   98:63:A3:41:FA:C9:31:A9:36:E5:78:AC:16:6A:4F:5C:90:12:6E:32
Certificate issuer:       /CN=861E87488AE3835CA52A40FC3F26AB08171FAFDD
Certificate serial:       02F7A19BAA4DB389512907DFA22D50A27A231C49
Authority key identifier: 86:1E:87:48:8A:E3:83:5C:A5:2A:40:FC:3F:26:AB:08:17:1F:AF:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa
Signing time:             Thu 04 Apr 2024 00:34:11 +0000
ROA not before:           Thu 04 Apr 2024 00:29:11 +0000
ROA not after:            Thu 03 Apr 2025 00:34:11 +0000
asID:                     53107
IP address blocks:        45.171.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.crl
                          rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f7:a1:9b:aa:4d:b3:89:51:29:07:df:a2:2d:50:a2:7a:23:1c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=861E87488AE3835CA52A40FC3F26AB08171FAFDD
        Validity
            Not Before: Apr  4 00:29:11 2024 GMT
            Not After : Apr  3 00:34:11 2025 GMT
        Subject: CN=9863A341FAC931A936E578AC166A4F5C90126E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:ad:3a:22:c9:2e:71:71:32:d5:b4:54:ec:
                    af:7a:f8:9d:55:6b:9f:87:6a:f9:97:6a:6d:67:0c:
                    26:08:5a:27:26:c8:d1:d0:d1:00:41:e1:4d:f4:44:
                    db:a4:9d:3b:11:c2:ba:11:f5:94:72:5d:8e:e2:3b:
                    e0:13:34:87:72:17:26:6c:a8:91:89:36:b0:1e:1a:
                    44:83:8d:30:14:87:02:17:d6:1c:58:8c:4e:b3:b3:
                    f1:3d:6a:01:44:08:8c:f0:7b:e0:24:72:a2:41:62:
                    8b:6e:9d:74:8b:4e:0c:92:7b:2e:6b:c8:4f:e5:0e:
                    be:f1:9d:fd:ba:92:5f:2f:cd:d7:48:22:61:43:e2:
                    a9:42:e7:e9:54:3f:b5:60:b5:e3:f8:82:c2:d4:72:
                    b8:dc:8a:5a:67:e4:93:65:41:27:58:db:e3:98:e7:
                    ff:31:72:92:69:92:f7:79:fb:fa:a0:9a:8f:48:88:
                    e0:3f:d8:db:43:02:d5:ff:74:e4:44:b6:43:bc:bd:
                    27:13:49:4e:d7:12:61:c7:b8:99:a0:95:10:d2:11:
                    db:36:3d:09:b6:d6:ff:ef:3c:b0:21:17:2c:4a:de:
                    d0:86:49:6c:2a:bb:d7:3a:fd:0c:1f:a0:e2:05:3a:
                    d4:a6:df:9b:69:a9:b3:9b:da:fc:77:13:82:9e:9a:
                    2c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:63:A3:41:FA:C9:31:A9:36:E5:78:AC:16:6A:4F:5C:90:12:6E:32
            X509v3 Authority Key Identifier:
                keyid:86:1E:87:48:8A:E3:83:5C:A5:2A:40:FC:3F:26:AB:08:17:1F:AF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:ae:c0:63:89:ad:47:fe:bf:af:1a:34:00:9f:0a:2c:05:
         59:2d:8e:c4:e2:ca:7d:47:f8:41:5e:3b:d4:33:d4:9b:19:4d:
         96:13:11:34:05:e4:2a:a3:45:bf:1b:bd:13:d5:60:bb:24:05:
         a2:c2:ee:06:30:9d:da:01:6d:9d:30:37:9b:3a:ab:d9:6e:cc:
         0a:c1:07:bb:aa:66:27:28:17:ef:be:20:f0:d3:36:8b:c0:a5:
         13:f6:9c:05:09:ff:fb:1a:8c:03:c8:0b:8d:3e:bd:49:2b:99:
         53:c9:f1:f5:4e:52:b4:14:25:ed:cd:81:b9:12:e3:4c:a5:d2:
         6d:45:09:63:e8:f8:af:9d:10:87:fd:bd:0e:9a:37:c8:52:09:
         9d:a2:c2:f0:b8:9e:8a:7e:63:76:18:cf:a4:ab:28:25:d9:2c:
         e4:f7:23:98:7a:04:c2:3f:9c:68:ca:f5:16:7d:30:8f:14:06:
         fe:fc:8d:a8:0c:cd:63:30:3a:e0:a5:61:d8:eb:9d:a9:98:bf:
         24:f6:d7:fa:99:47:85:f5:57:23:0a:d7:2b:22:ca:9b:09:53:
         77:bf:fd:1c:e7:8d:50:e0:6e:0a:38:67:08:19:5a:31:f4:de:
         96:6d:a0:3a:8f:12:ba:67:f2:ab:7d:70:7e:32:e4:0e:8c:d7:
         a0:e9:c6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:58 2024 by rpki-client on console-ams.rpki-client.org