Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37352e302f32342d3332203d3e203631353931.roa
File:                     34352e3233372e37352e302f32342d3332203d3e203631353931.roa (raw, json)
Hash identifier:          6SnkEVAmILkiiL9UMRQxxgIuyh+QZ7cfsB4CujVOGvU=
Subject key identifier:   BB:D5:DF:57:0F:71:60:73:18:1B:2A:F6:26:CF:4B:A5:9B:7A:04:59
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       10C7F5AA71DA1EE4381EA3C5E57A8501A769C63B
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37352e302f32342d3332203d3e203631353931.roa
Signing time:             Mon 12 Aug 2024 20:46:39 +0000
ROA not before:           Mon 12 Aug 2024 20:41:39 +0000
ROA not after:            Mon 11 Aug 2025 20:46:39 +0000
asID:                     61591
IP address blocks:        45.237.75.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c7:f5:aa:71:da:1e:e4:38:1e:a3:c5:e5:7a:85:01:a7:69:c6:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Aug 12 20:41:39 2024 GMT
            Not After : Aug 11 20:46:39 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:17:f7:e4:f2:e4:0f:75:d1:ed:c3:46:39:d5:
                    d9:1f:cd:44:30:bd:8d:d9:b1:76:a3:f2:9b:4f:02:
                    53:d0:9a:3e:b9:43:11:ab:7c:cc:27:8f:17:d8:ae:
                    e4:24:4f:d0:d2:e5:71:8a:9f:ce:20:7c:b3:4a:ae:
                    40:ea:89:83:5b:9d:eb:a5:ed:2a:39:e8:64:35:90:
                    53:e1:a1:80:cb:70:a0:ab:58:49:74:39:79:33:62:
                    28:2d:32:66:04:ab:32:a4:f8:93:8c:dc:f8:a5:40:
                    97:81:b2:d2:cc:f7:5f:73:b9:20:93:61:12:3b:83:
                    ab:41:ab:af:25:0e:d0:8d:3a:b9:a3:52:bd:ba:47:
                    e2:83:66:bf:56:1c:af:0c:0d:f0:0c:d0:9c:ec:68:
                    8d:b6:e4:68:81:25:77:59:0f:ea:e0:c7:d9:95:2f:
                    14:09:ab:20:28:0d:56:57:c7:c7:fb:7a:e7:9d:8c:
                    66:d5:31:d9:d7:f1:89:a2:a0:d7:7d:68:47:85:bf:
                    73:83:b5:21:96:34:b1:40:27:b5:e5:0e:1e:49:f2:
                    c6:8e:c6:44:1f:46:d9:0c:bd:09:c9:18:44:1b:85:
                    8e:ae:55:56:c5:4f:5c:7d:56:30:d8:2c:b5:cf:04:
                    4a:bd:be:79:5e:2c:1b:a4:e8:28:62:83:62:0f:c6:
                    18:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D5:DF:57:0F:71:60:73:18:1B:2A:F6:26:CF:4B:A5:9B:7A:04:59
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37352e302f32342d3332203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:b6:25:38:4b:f7:5a:74:f9:04:34:e9:c7:d0:4f:54:de:80:
         56:dd:46:8e:b0:dc:fb:1c:f6:6a:d4:69:17:2e:a6:86:a1:6d:
         37:0b:fa:5a:6f:e7:13:9f:82:e2:0e:a1:bd:b5:d0:a2:da:6b:
         3f:b6:13:45:77:4d:b9:7d:a2:3d:3d:55:ca:23:91:fa:cf:f1:
         7e:ce:85:20:f8:ff:e8:4c:1c:aa:7e:b1:b0:2a:8d:24:c3:29:
         05:d7:ca:7e:52:72:7c:c6:33:2f:17:ca:2e:b7:ab:6c:4d:43:
         1d:43:54:4c:75:85:20:8f:83:f5:03:c0:36:e5:da:85:27:bc:
         bb:53:c5:a1:83:29:10:a0:d0:93:72:2e:61:6c:55:05:43:62:
         45:5c:d5:f6:93:b0:2b:59:e0:5b:b5:e3:4b:0b:ec:be:31:b4:
         42:23:bf:ec:bb:0b:11:28:4c:02:8e:da:7e:97:54:22:a5:25:
         6c:0d:00:03:d0:93:84:7a:7f:07:71:f4:d5:79:dc:3d:48:31:
         bb:ec:10:51:1f:c7:83:e2:dd:06:4c:f3:44:e8:8a:c3:74:74:
         23:53:2a:31:62:e1:29:01:5b:6f:c3:1b:07:35:71:fa:4e:3a:
         3b:d8:96:be:08:85:27:fc:64:67:c3:e9:49:7a:0d:6c:aa:c3:
         4d:ae:98:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:31 2024 by rpki-client on console-fra.rpki-client.org