Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231392e302f32342d3234203d3e20323638373332.roa
File:                     34352e3137312e3231392e302f32342d3234203d3e20323638373332.roa (raw, json)
Hash identifier:          bidH8kDaR7o70NT78xXCCmfRyR2c++1g2sybVsJ9elQ=
Subject key identifier:   A4:4D:94:AE:2B:0F:3A:A7:11:26:C6:BE:A4:9D:30:D7:5F:CA:2F:B7
Certificate issuer:       /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial:       693563A6C949C7EF9E2C0BEE9D610CF563DAA94F
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231392e302f32342d3234203d3e20323638373332.roa
Signing time:             Wed 03 Apr 2024 18:30:10 +0000
ROA not before:           Wed 03 Apr 2024 18:25:10 +0000
ROA not after:            Wed 02 Apr 2025 18:30:10 +0000
asID:                     268732
IP address blocks:        45.171.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
                          rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:35:63:a6:c9:49:c7:ef:9e:2c:0b:ee:9d:61:0c:f5:63:da:a9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
        Validity
            Not Before: Apr  3 18:25:10 2024 GMT
            Not After : Apr  2 18:30:10 2025 GMT
        Subject: CN=A44D94AE2B0F3AA71126C6BEA49D30D75FCA2FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:b8:60:2e:24:7b:83:77:40:44:c0:b3:2d:
                    d8:a0:c1:a0:23:70:3e:60:cc:93:6d:11:33:f1:c9:
                    0c:85:c6:88:4f:0c:a4:22:ca:ab:e8:6b:3a:d3:13:
                    80:2d:f1:22:c5:fe:be:fc:fa:52:49:f8:82:8a:86:
                    1e:7b:82:16:ec:51:51:42:15:1b:ca:e0:77:38:1c:
                    d8:6c:e9:8e:f5:b8:69:48:97:24:6e:4f:82:a3:f5:
                    95:b7:44:cf:d2:2f:e5:c7:78:b3:2a:7e:26:15:62:
                    5e:c2:7d:fa:f3:a6:7c:61:aa:99:1c:87:88:2f:1e:
                    2d:f9:cc:95:4e:b4:fc:5e:ee:4b:76:7a:88:d7:98:
                    a7:3b:89:a4:9a:a5:bc:a1:d6:e2:05:e5:0b:be:4f:
                    dd:e3:98:fb:cc:92:4c:aa:10:6c:01:db:9f:d2:8e:
                    66:1c:70:3f:bb:aa:1a:71:86:fa:03:57:c9:22:de:
                    19:59:bb:ba:bf:7d:3b:ba:10:c8:8b:96:03:30:dc:
                    3b:67:fe:22:e3:8b:ce:fc:ca:e5:b3:24:2b:98:38:
                    a4:61:5d:c7:d3:66:23:6b:85:08:0b:cd:b6:0e:89:
                    a3:4e:07:6c:02:f0:a2:f1:a4:6c:ac:b2:1a:9d:bd:
                    9e:ac:8a:68:32:c7:19:78:6d:98:25:96:ea:ae:8e:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4D:94:AE:2B:0F:3A:A7:11:26:C6:BE:A4:9D:30:D7:5F:CA:2F:B7
            X509v3 Authority Key Identifier:
                keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231392e302f32342d3234203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:35:99:0b:97:d8:b5:7f:4a:8b:c7:62:8f:eb:ac:51:a8:f2:
         43:04:0e:a9:6d:a7:ed:97:0e:27:04:99:d7:09:11:22:81:d4:
         39:05:a0:e7:cd:f5:77:4c:3f:4b:5a:49:b0:f0:62:ca:7e:c2:
         a6:85:5b:63:ae:a3:5d:ba:0b:f9:94:4e:99:b5:14:67:4d:ae:
         9e:db:d3:51:7d:ee:b4:72:fb:06:04:b3:cd:33:41:0f:cd:a6:
         2e:87:d8:e8:f8:c1:cb:8d:73:e9:c9:a8:ae:87:0f:b0:b0:0d:
         5d:1e:3d:ee:b7:83:cd:83:49:4c:a0:c3:7a:87:03:a4:6b:52:
         99:7f:30:8d:f4:dc:d8:86:b4:3f:68:8d:2d:02:39:59:82:86:
         21:7c:81:3e:d9:cb:dd:a9:e3:ce:46:43:05:42:81:f1:90:e5:
         29:86:99:3d:ab:99:83:91:63:95:9c:ff:0a:ca:5c:1a:0c:79:
         7a:80:b6:20:8b:03:d6:4c:4d:f9:d6:e6:2a:17:fd:40:c7:c5:
         e9:fb:f6:bd:de:a6:13:b6:f3:61:1f:b1:8a:26:6b:3f:43:c1:
         60:ab:65:9b:21:6f:a8:3c:81:6f:67:d4:01:fe:03:f4:a5:33:
         4e:63:9b:15:2f:5f:1f:39:b1:ba:10:63:2c:7a:90:ed:12:69:
         19:2e:2b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:58 2024 by rpki-client on console-ams.rpki-client.org