Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/34352e3136302e3130322e302f32342d3332203d3e20323638343036.roa
File:                     34352e3136302e3130322e302f32342d3332203d3e20323638343036.roa (raw, json)
Hash identifier:          MEVmChHcJgUUFTMI1fCQAH8h+1rswNDcnegqyqgjlxA=
Subject key identifier:   88:BF:C1:C9:C3:D0:97:5B:09:5D:0B:8D:7A:5B:63:45:9B:85:7D:7D
Certificate issuer:       /CN=4852815508EC2F58157FB70DFE5F018163E5DD67
Certificate serial:       59AFCEC4281F3ACCF3CB1B48FF692F91AF6D2AE8
Authority key identifier: 48:52:81:55:08:EC:2F:58:15:7F:B7:0D:FE:5F:01:81:63:E5:DD:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4852815508EC2F58157FB70DFE5F018163E5DD67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/34352e3136302e3130322e302f32342d3332203d3e20323638343036.roa
Signing time:             Fri 05 Jul 2024 14:51:14 +0000
ROA not before:           Fri 05 Jul 2024 14:46:14 +0000
ROA not after:            Fri 04 Jul 2025 14:51:14 +0000
asID:                     268406
IP address blocks:        45.160.102.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/4852815508EC2F58157FB70DFE5F018163E5DD67.crl
                          rsync://rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/4852815508EC2F58157FB70DFE5F018163E5DD67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4852815508EC2F58157FB70DFE5F018163E5DD67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 12:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:af:ce:c4:28:1f:3a:cc:f3:cb:1b:48:ff:69:2f:91:af:6d:2a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4852815508EC2F58157FB70DFE5F018163E5DD67
        Validity
            Not Before: Jul  5 14:46:14 2024 GMT
            Not After : Jul  4 14:51:14 2025 GMT
        Subject: CN=88BFC1C9C3D0975B095D0B8D7A5B63459B857D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5e:3c:e9:c3:16:98:50:12:92:15:95:2d:47:
                    d2:40:6a:3d:a3:47:3e:f7:69:0e:2c:11:f6:c4:41:
                    c6:eb:5c:85:a7:8b:63:ef:b5:06:4f:f7:63:dc:c1:
                    d9:1f:35:10:1a:f1:4b:2b:c1:db:a3:48:8f:6b:41:
                    d9:84:4c:b8:9d:be:d6:d2:97:70:79:01:7c:b3:61:
                    59:77:66:11:28:df:95:5a:6d:04:02:8d:07:22:1c:
                    06:d0:2b:a2:d2:00:f9:e9:70:67:ca:ae:7d:2c:26:
                    33:77:1a:d5:84:ed:88:67:03:4c:05:89:e2:44:3f:
                    49:e9:9f:28:9a:7f:c6:b7:86:65:76:49:90:bd:f5:
                    f2:0e:55:b3:46:90:c2:89:43:35:08:77:0d:f0:48:
                    f3:85:be:7e:7d:1b:68:4d:34:c3:29:38:ec:60:b2:
                    6c:1d:4f:bf:bc:d4:74:df:af:8b:a4:7a:dc:81:8b:
                    f1:14:46:ce:c9:b5:4f:e6:bf:3a:33:07:1f:fa:08:
                    48:da:ad:e8:75:d5:2f:08:05:b1:56:f5:33:08:16:
                    5a:4a:09:1f:66:25:9b:dd:00:8b:8d:a6:86:ec:68:
                    df:9d:95:2f:12:0c:15:d7:43:fa:ca:6e:85:50:bf:
                    e3:9b:6f:4d:f9:31:2e:87:1a:3a:d0:c4:f8:21:ae:
                    58:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BF:C1:C9:C3:D0:97:5B:09:5D:0B:8D:7A:5B:63:45:9B:85:7D:7D
            X509v3 Authority Key Identifier:
                keyid:48:52:81:55:08:EC:2F:58:15:7F:B7:0D:FE:5F:01:81:63:E5:DD:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/4852815508EC2F58157FB70DFE5F018163E5DD67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4852815508EC2F58157FB70DFE5F018163E5DD67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/34352e3136302e3130322e302f32342d3332203d3e20323638343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:e1:40:a0:5f:67:6d:75:96:fa:18:9e:e2:f2:61:f8:70:8e:
         3e:5f:45:fc:fe:ba:85:b0:c7:aa:7b:af:16:b6:62:da:4b:34:
         7f:fb:47:39:53:73:f5:87:3d:ab:59:f9:29:89:73:72:06:79:
         ad:92:54:45:3a:33:c8:0f:7b:ff:7a:d6:30:fc:e3:9f:d6:a1:
         26:37:f7:b9:56:1d:bd:90:78:57:87:6f:5e:54:58:af:2e:b8:
         36:9b:55:7a:a4:68:23:15:2d:16:f5:06:74:e3:54:61:ca:f6:
         be:88:71:0f:fd:44:6b:57:cf:91:9c:c9:26:f6:23:1c:33:9f:
         0c:c1:b4:55:1b:50:95:d5:70:51:7b:21:76:a7:19:34:8e:90:
         e1:b2:c6:84:cc:a3:7c:44:1f:1b:53:fb:a4:d7:35:ce:1c:46:
         3d:2d:bd:d5:af:84:64:0b:3c:e9:b4:19:19:73:ac:60:8a:99:
         c4:0f:a6:ba:3b:4a:10:f8:f3:fd:b3:b4:0a:cf:c9:08:2c:b1:
         d9:33:01:78:75:3b:6f:bc:da:c5:3c:a9:ed:eb:e6:90:8e:3f:
         78:1f:00:05:78:d8:82:32:10:21:8d:f5:cb:2e:c2:5a:89:bb:
         32:31:ce:2f:c8:eb:75:6b:93:9b:c1:19:c0:f0:6d:de:e5:6e:
         8a:38:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:09:19 2024 by rpki-client on console-fra.rpki-client.org