Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/34352e3137342e3130302e302f32322d3234203d3e20323638383438.roa
File:                     34352e3137342e3130302e302f32322d3234203d3e20323638383438.roa (raw, json)
Hash identifier:          Oav5VUdLG2MTqDkTR5KfNxoawMnJEPPksO4ClJC0d4E=
Subject key identifier:   74:AB:4C:CD:11:9E:0C:BB:C7:B5:8C:CE:75:2B:48:5E:0E:16:80:06
Certificate issuer:       /CN=75A5078D41E4C1C7E37424F8948507D935297BBD
Certificate serial:       2132C32457F686F1CBEC054176703128AB662088
Authority key identifier: 75:A5:07:8D:41:E4:C1:C7:E3:74:24:F8:94:85:07:D9:35:29:7B:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A5078D41E4C1C7E37424F8948507D935297BBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/34352e3137342e3130302e302f32322d3234203d3e20323638383438.roa
Signing time:             Mon 28 Oct 2024 16:13:59 +0000
ROA not before:           Mon 28 Oct 2024 16:08:59 +0000
ROA not after:            Mon 27 Oct 2025 16:13:59 +0000
asID:                     268848
IP address blocks:        45.174.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/75A5078D41E4C1C7E37424F8948507D935297BBD.crl
                          rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/75A5078D41E4C1C7E37424F8948507D935297BBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A5078D41E4C1C7E37424F8948507D935297BBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:32:c3:24:57:f6:86:f1:cb:ec:05:41:76:70:31:28:ab:66:20:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75A5078D41E4C1C7E37424F8948507D935297BBD
        Validity
            Not Before: Oct 28 16:08:59 2024 GMT
            Not After : Oct 27 16:13:59 2025 GMT
        Subject: CN=74AB4CCD119E0CBBC7B58CCE752B485E0E168006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:98:fe:bc:b1:3b:39:5f:be:7d:a7:c0:55:
                    e3:49:7b:7e:96:fe:a1:91:3e:5b:4d:c2:4f:95:8f:
                    0d:84:96:ff:3c:1a:8c:48:aa:8d:23:33:03:4c:95:
                    ef:10:e5:d2:85:ab:26:d1:43:a0:f6:1d:ea:89:c7:
                    7b:b6:7c:02:fb:4a:29:bf:03:43:c9:e0:b0:13:30:
                    98:ab:af:a9:ba:4e:33:04:ab:7e:7e:89:06:2f:c0:
                    cd:ae:76:c9:45:5f:1a:fc:59:a6:61:36:51:d7:40:
                    95:9d:44:57:3b:a0:31:7a:6d:72:3c:3e:ef:a2:0a:
                    d7:5c:1f:b8:20:04:f2:74:4a:e2:8b:41:c8:4d:f7:
                    e9:c0:e5:68:1f:8d:9e:81:4e:38:4d:81:64:d5:da:
                    e0:1b:d4:4e:85:f7:c2:19:c5:71:a7:a2:a4:61:f1:
                    5d:de:df:af:5a:c8:43:22:f8:ec:b5:cd:90:96:a3:
                    81:31:ef:1a:57:ac:03:db:6a:b8:7d:fe:e4:fd:cd:
                    81:6e:8a:e1:d2:e0:98:a4:5c:b9:2a:ef:cc:77:ca:
                    d3:bb:0f:4b:c4:46:93:06:49:38:ef:e6:ca:d6:3b:
                    7f:97:18:a1:dd:66:1f:fb:96:a9:72:49:4e:cf:f8:
                    c8:82:67:52:5b:43:f8:c6:85:32:6b:4c:de:d2:d9:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AB:4C:CD:11:9E:0C:BB:C7:B5:8C:CE:75:2B:48:5E:0E:16:80:06
            X509v3 Authority Key Identifier:
                keyid:75:A5:07:8D:41:E4:C1:C7:E3:74:24:F8:94:85:07:D9:35:29:7B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/75A5078D41E4C1C7E37424F8948507D935297BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A5078D41E4C1C7E37424F8948507D935297BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/34352e3137342e3130302e302f32322d3234203d3e20323638383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:84:cb:d4:d9:71:8a:b4:5f:b7:b6:ef:0a:b4:93:39:72:1f:
         63:6e:ac:a2:33:09:72:89:d6:3c:cf:53:8d:5d:31:d4:91:e2:
         d5:fe:25:98:69:36:5d:46:e1:c2:50:c1:97:5b:10:d0:12:13:
         d4:f4:0e:5c:b2:9b:f3:b3:c7:30:51:e1:6e:28:63:00:e5:d6:
         10:80:63:45:15:72:f4:01:6d:28:bb:aa:0e:b5:f6:b7:a2:b1:
         26:6a:df:b8:e5:f2:b6:07:99:5d:99:bd:bd:31:af:77:8e:03:
         32:2a:40:d6:17:7e:31:e0:01:90:cb:70:a1:5e:f5:0b:c8:30:
         93:a1:93:35:7a:7a:2c:fe:e5:4d:8c:a4:5f:2c:db:da:be:4a:
         50:4c:db:8c:3c:14:75:c1:cc:71:b1:34:9a:00:fe:60:bc:fb:
         87:d4:6c:a2:b1:71:54:59:b5:02:94:84:0f:52:70:e1:b1:71:
         45:6d:bc:90:01:32:29:af:df:80:c3:32:82:e0:2d:4a:bd:4b:
         54:1f:50:78:8d:78:b1:7e:29:4f:96:c7:82:15:f3:5c:1e:f5:
         55:98:bb:c7:ea:6d:81:e9:91:f9:59:2c:d4:64:ef:93:7c:92:
         20:96:36:f4:88:a0:29:4d:37:31:24:48:b1:dd:32:b4:7e:51:
         3e:46:e2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:46 2024 by rpki-client on console-fra.rpki-client.org