Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa
File:                     34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa (raw, json)
Hash identifier:          kyMJBynHOcVeATEJY03HoHqpgnQSke4b25pfpqYdKvc=
Subject key identifier:   9B:CF:C5:0B:4E:7A:6B:57:7B:78:88:B2:14:51:A2:75:75:CB:CC:6D
Certificate issuer:       /CN=D3AE6A7BDDA4E543251721F57BC891CFA1E85391
Certificate serial:       6BADFF1651319D807A36DAE2070B1F1C567D168A
Authority key identifier: D3:AE:6A:7B:DD:A4:E5:43:25:17:21:F5:7B:C8:91:CF:A1:E8:53:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3AE6A7BDDA4E543251721F57BC891CFA1E85391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa
Signing time:             Wed 02 Oct 2024 15:09:25 +0000
ROA not before:           Wed 02 Oct 2024 15:04:25 +0000
ROA not after:            Wed 01 Oct 2025 15:09:25 +0000
asID:                     268063
IP address blocks:        45.168.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/D3AE6A7BDDA4E543251721F57BC891CFA1E85391.crl
                          rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/D3AE6A7BDDA4E543251721F57BC891CFA1E85391.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3AE6A7BDDA4E543251721F57BC891CFA1E85391.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ad:ff:16:51:31:9d:80:7a:36:da:e2:07:0b:1f:1c:56:7d:16:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3AE6A7BDDA4E543251721F57BC891CFA1E85391
        Validity
            Not Before: Oct  2 15:04:25 2024 GMT
            Not After : Oct  1 15:09:25 2025 GMT
        Subject: CN=9BCFC50B4E7A6B577B7888B21451A27575CBCC6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:10:93:9a:97:41:ec:1f:3e:d2:f9:01:7b:
                    24:5d:33:56:42:d5:e4:2e:0a:6f:c6:7a:8c:15:80:
                    6f:a5:af:ca:d4:d0:bf:fb:ce:30:0f:15:53:59:a6:
                    0d:f8:1f:84:d5:b5:d9:9d:01:0d:d2:57:1b:27:2e:
                    8a:f3:c9:c0:48:16:95:de:24:c8:a0:be:cd:d0:5f:
                    36:a6:32:15:83:6e:9e:d2:45:ff:6e:b1:a1:ab:d2:
                    14:fa:f7:1b:a7:91:22:bf:6c:1e:2a:bb:27:62:17:
                    92:47:b4:58:97:d6:d6:07:2d:53:63:16:db:42:8b:
                    ec:1a:51:19:36:43:60:38:06:a4:dd:f8:f0:93:87:
                    95:d7:10:01:02:d2:77:b7:28:dc:78:31:50:01:95:
                    ca:1d:ec:54:72:c8:10:65:46:0c:c9:0c:d0:f4:86:
                    74:bf:a4:c4:01:45:34:dc:3d:47:29:70:75:4d:9c:
                    92:f4:a1:72:df:8c:7b:eb:bc:3e:e2:5f:53:a3:29:
                    e8:5a:ae:bc:cb:56:85:14:bd:f4:d7:bd:7c:f7:ea:
                    07:41:47:16:a6:70:87:56:2d:ef:3a:1a:1b:2e:5b:
                    10:2d:97:e1:9c:b4:59:c5:58:37:ff:29:4e:4f:3f:
                    7f:bb:d2:f0:22:ff:d3:13:b2:36:6d:2b:ee:fb:64:
                    9c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CF:C5:0B:4E:7A:6B:57:7B:78:88:B2:14:51:A2:75:75:CB:CC:6D
            X509v3 Authority Key Identifier:
                keyid:D3:AE:6A:7B:DD:A4:E5:43:25:17:21:F5:7B:C8:91:CF:A1:E8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/D3AE6A7BDDA4E543251721F57BC891CFA1E85391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3AE6A7BDDA4E543251721F57BC891CFA1E85391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:c9:4b:c6:a6:49:c7:67:00:92:0f:6f:da:6a:2f:15:a7:e3:
         25:82:34:72:13:0b:d9:65:d7:39:dd:64:d3:f6:a3:76:82:2c:
         7b:7e:3e:99:6e:8d:0b:be:bc:77:ed:56:a6:f1:e1:1a:e3:72:
         3a:72:e0:5d:1e:6d:01:b2:5c:d1:34:71:70:43:dd:51:d5:77:
         36:b7:be:2f:db:2f:52:8e:f7:9a:21:ea:1b:8b:2d:06:a6:ba:
         41:bb:aa:79:4b:0a:54:0d:33:df:c5:c1:24:b9:7e:e5:f1:78:
         c9:26:08:8d:4d:3d:55:56:fc:29:8e:4c:76:03:2d:5e:e5:2e:
         17:8e:be:33:21:3d:7b:79:eb:e5:87:f6:b2:48:52:d3:b3:83:
         90:94:30:1e:0a:53:ed:00:ec:01:d8:9f:81:60:d2:f9:05:fb:
         28:25:47:0e:a0:ff:4b:c2:73:bb:b2:56:58:6f:d0:b2:20:57:
         b7:c5:17:1c:f8:53:62:29:62:9e:c5:04:6c:d6:60:ec:a3:a0:
         20:0b:21:3b:1f:cc:29:36:90:07:b8:62:87:4f:a6:07:4a:14:
         de:91:37:eb:5d:c9:ac:ce:5b:26:9a:8b:07:13:b5:b6:89:c2:
         c8:3b:50:f8:bc:8a:b4:10:0a:29:ea:9c:94:75:b5:18:09:7f:
         d3:36:4f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:40 2024 by rpki-client on console-fra.rpki-client.org