Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/1/34352e3138322e37322e302f32322d3234203d3e20323639323236.roa
File:                     34352e3138322e37322e302f32322d3234203d3e20323639323236.roa (raw, json)
Hash identifier:          bQjGEXmHZ/RE9iFS/o5z+W55SKltmNC7WX2w8e6F3ZQ=
Subject key identifier:   5C:58:EA:7C:B0:D0:BF:FF:25:AD:D6:42:B9:08:1B:4F:13:08:5B:7E
Certificate issuer:       /CN=3F7667D2CA97F4875AB3986F0D03936A276296AF
Certificate serial:       675AA651EEB1B9DA241AE33E741C508D7CD09CB6
Authority key identifier: 3F:76:67:D2:CA:97:F4:87:5A:B3:98:6F:0D:03:93:6A:27:62:96:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7667D2CA97F4875AB3986F0D03936A276296AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/1/34352e3138322e37322e302f32322d3234203d3e20323639323236.roa
Signing time:             Fri 08 Nov 2024 01:06:07 +0000
ROA not before:           Fri 08 Nov 2024 01:01:07 +0000
ROA not after:            Fri 07 Nov 2025 01:06:07 +0000
asID:                     269226
IP address blocks:        45.182.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/1/3F7667D2CA97F4875AB3986F0D03936A276296AF.crl
                          rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/1/3F7667D2CA97F4875AB3986F0D03936A276296AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7667D2CA97F4875AB3986F0D03936A276296AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5a:a6:51:ee:b1:b9:da:24:1a:e3:3e:74:1c:50:8d:7c:d0:9c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F7667D2CA97F4875AB3986F0D03936A276296AF
        Validity
            Not Before: Nov  8 01:01:07 2024 GMT
            Not After : Nov  7 01:06:07 2025 GMT
        Subject: CN=5C58EA7CB0D0BFFF25ADD642B9081B4F13085B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6f:81:7f:18:95:9d:e7:0e:48:ed:63:48:dd:
                    7d:9b:12:db:d1:88:3d:1a:71:aa:70:d8:f0:58:35:
                    8a:be:1c:50:af:40:64:a0:e2:f7:d0:17:d1:19:f8:
                    a9:c4:96:74:15:68:68:84:a8:c0:de:02:00:8d:16:
                    d9:46:a9:4b:81:57:26:e0:20:92:04:31:15:a9:48:
                    45:18:1f:af:6d:0e:47:b0:21:1a:77:dc:ba:53:d2:
                    e5:1f:c0:93:28:ce:37:49:72:bb:1d:fd:cc:fc:6a:
                    de:ba:64:66:d8:94:7a:25:b7:6b:79:8e:ef:a9:c4:
                    44:53:5d:2a:b4:ef:8a:73:a8:98:ba:8d:3d:70:f5:
                    cf:c9:4d:45:9d:91:bd:5b:51:e7:88:e4:95:d8:8f:
                    87:f1:f5:4e:c1:1e:2f:47:01:b5:07:52:02:d6:bf:
                    16:99:f8:7b:15:66:16:2a:c2:2f:4f:c8:ac:31:e4:
                    8e:91:6f:18:3a:cc:39:45:d5:32:2c:8a:31:d6:e6:
                    1c:dd:5f:53:23:5e:06:0d:d7:a5:3d:db:63:28:be:
                    da:b8:92:cf:ee:d9:b1:39:e5:13:68:d5:32:d2:59:
                    00:42:28:86:33:db:43:56:39:0c:87:7a:91:a0:65:
                    8c:79:eb:4d:29:1d:c8:d9:8a:b2:cb:24:af:b9:f0:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:58:EA:7C:B0:D0:BF:FF:25:AD:D6:42:B9:08:1B:4F:13:08:5B:7E
            X509v3 Authority Key Identifier:
                keyid:3F:76:67:D2:CA:97:F4:87:5A:B3:98:6F:0D:03:93:6A:27:62:96:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/1/3F7667D2CA97F4875AB3986F0D03936A276296AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7667D2CA97F4875AB3986F0D03936A276296AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/1/34352e3138322e37322e302f32322d3234203d3e20323639323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:f2:f1:a7:9e:8d:86:57:2e:25:25:0a:75:6a:12:e9:25:93:
         ff:33:f2:e8:1e:3e:54:dd:5c:49:89:c2:96:92:6f:9a:f0:28:
         40:25:77:ba:25:84:57:c1:5f:a7:5e:aa:f1:6a:15:bb:d3:14:
         a9:2f:c4:5d:3e:6f:12:cc:92:9f:45:49:c4:13:b8:fa:a7:52:
         6a:9d:5e:c2:3b:c3:b1:a6:10:ed:75:2b:54:d3:6d:67:c4:f9:
         b4:6c:e6:22:2d:86:56:49:e4:d4:8e:0b:3d:3f:15:9e:92:26:
         92:18:d9:61:75:a3:da:40:a6:6e:8f:d3:e3:9c:62:00:1d:55:
         b7:81:7c:59:df:3a:4d:6f:b0:a9:a6:38:94:24:bb:2f:66:9b:
         c6:cf:bc:19:70:4a:60:09:05:13:80:99:81:f8:48:22:e3:37:
         12:cd:11:3d:d8:d8:04:84:29:a4:4a:d4:fa:af:36:fe:34:86:
         1e:11:a8:20:4d:23:9a:30:78:ce:82:e3:22:80:24:9c:a3:34:
         46:3b:d9:a7:af:a9:73:49:c4:4b:ad:72:eb:e9:66:78:65:b3:
         5f:0e:7b:4c:e6:1c:88:db:b3:2a:d7:54:fa:cf:ed:2b:d6:25:
         f9:0f:14:c4:4b:a8:22:11:12:0d:e5:13:b4:ca:e2:af:f2:5f:
         56:1a:04:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:16 2024 by rpki-client on console-fra.rpki-client.org