Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/34352e3137392e372e302f32342d3234203d3e20323639313230.roa
File:                     34352e3137392e372e302f32342d3234203d3e20323639313230.roa (raw, json)
Hash identifier:          GPe+gLhKd/4H6WOD0+J7x4KH/u1lJtwNuRQo9NPPyc0=
Subject key identifier:   F0:6B:41:8A:92:07:23:63:75:D7:8C:DC:A4:22:D8:92:A8:7B:8C:16
Certificate issuer:       /CN=99D9815999A6E537F44A7D30D9A17CE7453F2F16
Certificate serial:       03E42F6A8511C985486DFB2FF2F8604F673DC01D
Authority key identifier: 99:D9:81:59:99:A6:E5:37:F4:4A:7D:30:D9:A1:7C:E7:45:3F:2F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/34352e3137392e372e302f32342d3234203d3e20323639313230.roa
Signing time:             Wed 03 Apr 2024 23:36:41 +0000
ROA not before:           Wed 03 Apr 2024 23:31:41 +0000
ROA not after:            Wed 02 Apr 2025 23:36:41 +0000
asID:                     269120
IP address blocks:        45.179.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.crl
                          rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 20:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e4:2f:6a:85:11:c9:85:48:6d:fb:2f:f2:f8:60:4f:67:3d:c0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D9815999A6E537F44A7D30D9A17CE7453F2F16
        Validity
            Not Before: Apr  3 23:31:41 2024 GMT
            Not After : Apr  2 23:36:41 2025 GMT
        Subject: CN=F06B418A9207236375D78CDCA422D892A87B8C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:86:d8:cb:5e:4c:91:69:0e:ce:f7:a5:21:
                    fb:ad:11:64:dd:62:23:1b:c0:ae:27:36:7a:e4:ae:
                    d5:18:9c:f1:3b:a1:81:b6:fb:62:77:a2:dd:39:98:
                    b8:42:1f:82:de:ef:12:11:74:3e:2a:dc:6a:b3:57:
                    f6:c4:4c:22:37:3e:ed:8d:32:49:82:a5:c8:f6:58:
                    3f:e5:22:5b:22:6a:26:50:38:8c:2b:40:0b:e3:af:
                    d7:a8:b8:24:ca:06:93:1f:cb:1c:95:57:5f:14:a2:
                    b3:e6:b6:17:57:39:30:ff:ed:a0:fd:17:b3:98:76:
                    73:c8:74:55:5c:fd:6b:c0:cb:f3:0c:d1:6d:52:61:
                    f5:3b:fa:32:b4:1c:6a:a5:3e:56:08:dc:e8:2a:ec:
                    d4:d8:1f:33:40:ac:80:8f:85:e2:2c:21:71:9e:54:
                    3b:83:3d:03:42:d8:37:18:6b:2a:f9:79:7a:06:93:
                    98:93:11:b8:7b:c1:fe:f6:1f:8c:f8:2c:82:e3:3c:
                    47:6b:59:c6:fe:30:d2:5f:10:de:38:7c:03:1b:8b:
                    54:9d:cd:f7:34:d6:2e:32:02:a7:d3:7f:cf:f8:36:
                    16:f9:e6:84:d4:5b:b3:b0:38:cf:68:b7:7f:ff:87:
                    69:f4:4d:cf:ef:89:4d:ba:58:67:f8:b9:b9:b4:5f:
                    07:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6B:41:8A:92:07:23:63:75:D7:8C:DC:A4:22:D8:92:A8:7B:8C:16
            X509v3 Authority Key Identifier:
                keyid:99:D9:81:59:99:A6:E5:37:F4:4A:7D:30:D9:A1:7C:E7:45:3F:2F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/34352e3137392e372e302f32342d3234203d3e20323639313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:71:5e:eb:fd:3f:cd:2c:b2:6f:e8:d3:c7:82:92:7f:20:7a:
         e9:75:5b:01:60:b4:cd:34:b7:08:9d:49:0c:3a:37:9f:15:cb:
         9b:8e:cf:23:38:19:c4:5a:1f:8e:75:82:72:df:05:ce:e2:38:
         d5:55:a3:bf:2a:3e:5b:f8:04:41:17:00:5b:60:b8:92:7b:b0:
         8c:29:66:e7:16:89:a3:12:f4:47:04:72:70:b8:cb:2d:f8:97:
         20:75:1b:89:62:15:62:23:8f:a9:11:2e:9f:d3:3b:8f:c7:ec:
         e0:3e:02:bc:c5:88:33:69:c7:91:2f:aa:70:a9:56:e9:fb:82:
         5f:84:fc:21:e8:9a:ef:2d:e9:ba:43:f1:cb:b2:3a:c1:aa:3e:
         7f:7e:ac:f1:7e:65:a5:5c:8a:88:be:0e:50:d1:1f:30:55:4f:
         5f:94:38:1a:58:fd:ad:43:47:4f:3f:f0:11:6a:86:17:5c:e4:
         31:f0:8e:71:d2:ac:14:7b:8c:a5:1c:75:be:72:12:19:85:08:
         89:b2:11:5f:05:9a:83:d4:c2:52:a5:80:60:b5:3a:02:b9:90:
         30:88:b6:21:80:db:69:15:ef:d3:9c:ab:bb:2e:e8:c7:1b:b5:
         23:df:7a:a6:19:9d:a5:b8:3a:21:12:bc:0d:f1:16:30:f4:4e:
         d7:2b:46:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:26:44 2024 by rpki-client on console-fra.rpki-client.org