Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233382e302f32332d3233203d3e20323639353935.roa
File:                     34352e3138382e3233382e302f32332d3233203d3e20323639353935.roa (raw, json)
Hash identifier:          pyrJO1z4cxEUo+gckuiTxL2GPUfFwl+l3Qhi8YlLE4c=
Subject key identifier:   3D:AB:4E:BB:16:E7:86:DE:CF:C0:29:2C:81:C3:2C:44:03:82:4B:B2
Certificate issuer:       /CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
Certificate serial:       666740A25A19B5BC51FA36E51E110144C9FA32DE
Authority key identifier: 79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233382e302f32332d3233203d3e20323639353935.roa
Signing time:             Wed 05 Jun 2024 17:49:58 +0000
ROA not before:           Wed 05 Jun 2024 17:44:58 +0000
ROA not after:            Wed 04 Jun 2025 17:49:58 +0000
asID:                     269595
IP address blocks:        45.188.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:67:40:a2:5a:19:b5:bc:51:fa:36:e5:1e:11:01:44:c9:fa:32:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
        Validity
            Not Before: Jun  5 17:44:58 2024 GMT
            Not After : Jun  4 17:49:58 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:11:48:a3:9b:62:af:9b:aa:9e:2f:3e:98:3d:
                    bb:b3:1f:8d:9c:69:06:13:29:7d:2c:2d:75:7e:27:
                    16:aa:a8:3b:37:3a:68:21:6e:98:0f:7a:29:6b:91:
                    e0:b3:9e:63:8c:c1:88:03:15:5e:6f:56:3f:ac:23:
                    9f:80:3c:b5:70:e0:3a:98:ce:ed:7d:3d:89:e0:b2:
                    52:ba:82:42:3f:07:b9:3f:aa:29:30:1a:10:34:cc:
                    fc:84:d3:71:30:37:1c:58:82:91:97:04:a2:79:a8:
                    b1:6f:cc:33:c4:b2:f8:7f:d3:7c:9e:e8:25:93:55:
                    63:5d:b9:fa:ab:89:94:5e:4c:14:c5:12:7a:ff:92:
                    7f:7f:8e:10:ff:1f:30:76:bf:cc:c4:b6:00:70:6e:
                    67:d8:60:b6:47:33:7f:8d:3a:be:b9:04:d2:42:b2:
                    97:f1:1e:04:b9:63:ad:dd:b5:9d:a9:b5:9f:ad:21:
                    55:cc:b2:a9:43:64:2e:8e:8d:18:de:3b:aa:b9:52:
                    b6:c2:3f:f7:60:14:9e:0b:50:65:36:5e:c8:ca:ff:
                    b7:ec:9d:d3:2f:4b:44:5f:b4:18:fc:26:73:16:1b:
                    ac:bf:17:9e:1b:e3:70:a1:05:7b:d4:04:63:8d:39:
                    89:76:87:2c:d0:55:1d:17:60:dc:39:3e:88:6a:48:
                    a1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AB:4E:BB:16:E7:86:DE:CF:C0:29:2C:81:C3:2C:44:03:82:4B:B2
            X509v3 Authority Key Identifier:
                keyid:79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233382e302f32332d3233203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:c8:3b:de:16:ba:b7:1f:91:96:b4:7b:3a:a3:c1:dd:e0:e6:
         ff:e9:df:34:3e:75:b9:a8:90:f7:a3:79:b6:10:79:a7:5c:b5:
         ea:f8:92:44:74:f4:1c:b0:15:9d:ff:a4:69:26:ed:17:48:9e:
         55:89:bf:65:4c:83:f7:49:61:f4:61:92:38:d5:41:d0:4a:cf:
         f3:74:e7:15:6c:b4:cc:be:af:c9:c8:a9:66:a1:e8:6f:06:bb:
         4d:ff:08:e8:b4:13:ed:7e:a1:99:0c:dd:cd:3d:63:7b:49:62:
         59:e9:ac:2f:9d:0b:17:43:c5:a5:02:92:0a:75:5a:62:e8:56:
         ad:bf:c4:3c:ad:01:e4:d7:f9:b5:f7:e0:9d:58:e5:25:cd:2d:
         75:98:d8:12:af:ba:e4:60:75:3b:51:58:de:ac:7b:9c:6d:84:
         e3:22:a2:f1:fb:69:36:6b:5d:12:44:b0:03:00:0f:5e:47:be:
         34:4b:f4:95:e6:cf:b1:7b:fc:32:20:a3:81:53:db:57:d8:3b:
         40:4c:ec:e3:ce:b8:0a:ed:f0:fc:da:8d:3f:3c:30:a9:4b:00:
         87:79:50:b2:a1:2c:40:6b:4d:53:f6:a4:e4:0f:b7:0b:e0:d2:
         8d:46:c9:d5:70:d0:10:bf:a2:7f:7d:55:ec:f0:0f:02:38:a8:
         3d:1a:b8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org