Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hT7Dhe9ubfqqFRBiNhZ9rcvMmUszj284ao3JpyWN5W9/0/34352e3136372e37362e302f32322d3332203d3e20323637393937.roa
File:                     34352e3136372e37362e302f32322d3332203d3e20323637393937.roa (raw, json)
Hash identifier:          p3AlOduhaG7CDRWp2oBa9/fH+cAtWgDVgskoJznB6qw=
Subject key identifier:   B8:AD:2B:5B:59:EE:CA:4F:F5:89:A9:6B:D3:A4:28:15:B9:0E:FE:58
Certificate issuer:       /CN=97895F838BCB6B5A4986583A94D5A8FF203198E9
Certificate serial:       327044B6A8E141F0383E641995380AFAE61D0BBE
Authority key identifier: 97:89:5F:83:8B:CB:6B:5A:49:86:58:3A:94:D5:A8:FF:20:31:98:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97895F838BCB6B5A4986583A94D5A8FF203198E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hT7Dhe9ubfqqFRBiNhZ9rcvMmUszj284ao3JpyWN5W9/0/34352e3136372e37362e302f32322d3332203d3e20323637393937.roa
Signing time:             Mon 14 Oct 2024 13:42:43 +0000
ROA not before:           Mon 14 Oct 2024 13:37:43 +0000
ROA not after:            Mon 13 Oct 2025 13:42:43 +0000
asID:                     267997
IP address blocks:        45.167.76.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5hT7Dhe9ubfqqFRBiNhZ9rcvMmUszj284ao3JpyWN5W9/0/97895F838BCB6B5A4986583A94D5A8FF203198E9.crl
                          rsync://rpki-repo.registro.br/repo/5hT7Dhe9ubfqqFRBiNhZ9rcvMmUszj284ao3JpyWN5W9/0/97895F838BCB6B5A4986583A94D5A8FF203198E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97895F838BCB6B5A4986583A94D5A8FF203198E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:70:44:b6:a8:e1:41:f0:38:3e:64:19:95:38:0a:fa:e6:1d:0b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97895F838BCB6B5A4986583A94D5A8FF203198E9
        Validity
            Not Before: Oct 14 13:37:43 2024 GMT
            Not After : Oct 13 13:42:43 2025 GMT
        Subject: CN=B8AD2B5B59EECA4FF589A96BD3A42815B90EFE58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3b:96:c4:32:bf:70:48:3f:ca:36:fa:6a:90:
                    d2:c5:32:c7:54:74:a5:96:b4:d9:f5:3e:9c:aa:82:
                    1e:52:c3:11:40:71:1a:03:14:e4:ce:d7:0f:c9:6e:
                    3b:f7:1f:4a:ed:2a:e2:91:8e:11:8d:2d:98:fa:7d:
                    17:2e:9f:fd:87:25:2c:25:b4:71:3f:12:5a:c5:25:
                    69:8e:8b:39:a0:ee:93:7e:bd:09:8e:98:a0:7b:a0:
                    d9:1a:3b:fe:aa:81:ef:c2:98:11:c7:be:0f:b5:5e:
                    3a:ff:00:b1:ea:e3:ad:13:33:74:d3:18:2c:e4:31:
                    64:5c:6c:d4:11:45:b6:0d:5f:e0:9b:02:37:48:13:
                    14:35:12:3d:94:da:27:ef:bf:4a:31:02:44:98:b2:
                    32:52:4b:6f:27:84:c7:c1:0c:b3:39:c2:92:54:49:
                    96:a4:a5:0a:fe:c0:b2:32:b2:0c:eb:fd:45:c5:92:
                    61:e0:40:00:8b:fa:06:23:45:c5:53:cf:8a:9e:7c:
                    3d:52:2a:78:5e:20:c0:a4:9b:73:b3:22:be:b2:1d:
                    50:9b:d8:0f:87:ce:38:f1:38:9c:86:0b:ac:2f:87:
                    da:11:64:cd:1c:b6:4c:d9:35:32:4d:a0:66:ee:7d:
                    20:16:a3:50:9e:84:73:e5:f5:f1:eb:4a:dc:f3:53:
                    c7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AD:2B:5B:59:EE:CA:4F:F5:89:A9:6B:D3:A4:28:15:B9:0E:FE:58
            X509v3 Authority Key Identifier:
                keyid:97:89:5F:83:8B:CB:6B:5A:49:86:58:3A:94:D5:A8:FF:20:31:98:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hT7Dhe9ubfqqFRBiNhZ9rcvMmUszj284ao3JpyWN5W9/0/97895F838BCB6B5A4986583A94D5A8FF203198E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97895F838BCB6B5A4986583A94D5A8FF203198E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hT7Dhe9ubfqqFRBiNhZ9rcvMmUszj284ao3JpyWN5W9/0/34352e3136372e37362e302f32322d3332203d3e20323637393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:55:a8:eb:15:cb:8e:5d:88:d6:80:bc:33:a0:de:32:ac:fb:
         1c:96:8b:bf:f0:ed:d9:67:48:50:5e:0f:3e:a3:92:cd:33:3c:
         9b:b7:8f:58:47:5f:29:75:45:7f:72:95:2a:3c:ba:70:42:6e:
         2a:13:f2:19:05:e6:db:86:59:4e:a7:99:d3:7f:6c:81:f6:dd:
         da:10:57:14:21:93:70:19:19:2b:3f:09:62:a3:cf:7d:de:e8:
         26:85:ae:1c:b7:30:f1:ec:29:fa:09:c3:20:2d:c9:16:a8:c2:
         fa:a4:10:e2:c8:34:5c:e7:7b:25:42:74:4c:8b:ad:21:7e:7d:
         0d:d7:cf:d2:91:ab:a3:a5:87:ea:b6:d1:f7:52:df:c0:58:03:
         d4:aa:ff:ad:b2:56:d7:3c:d6:84:56:e0:ac:39:50:38:7f:ca:
         3c:e8:c7:c5:fb:f3:56:f3:7e:7a:41:96:67:fd:7b:b4:2d:29:
         23:4b:0e:1c:d0:d1:02:97:ae:78:85:f2:37:d2:e4:b3:1c:88:
         81:a2:dc:ee:a1:0b:8a:26:f6:67:95:67:41:e3:e2:51:f2:64:
         82:fe:ac:95:a6:24:57:df:d2:b9:f7:e6:5b:bc:a5:77:40:7c:
         ae:a2:24:64:3c:0e:8d:64:c9:18:17:2d:5e:6d:22:ae:1e:f8:
         fc:40:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:40 2024 by rpki-client on console-ams.rpki-client.org