Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qhpYNimS7SbDyhAb1SRjnBNuseBWPYbZF6eyvine43n/0/34352e3138332e3233322e302f32322d3234203d3e20323639323934.roa
File:                     34352e3138332e3233322e302f32322d3234203d3e20323639323934.roa (raw, json)
Hash identifier:          FzcKMR9ilNAGKBQk1nWlWzJeIk2wQIK+mB2oRbwpx58=
Subject key identifier:   57:22:DF:05:12:B3:2F:1E:94:A6:43:29:FB:19:A9:68:EF:49:8E:8A
Certificate issuer:       /CN=7EAD5172054B440D42C3F71E33909EEC94AB2A9F
Certificate serial:       579C694CD4EC90B597785A24EB1EEA86BD8EC26A
Authority key identifier: 7E:AD:51:72:05:4B:44:0D:42:C3:F7:1E:33:90:9E:EC:94:AB:2A:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EAD5172054B440D42C3F71E33909EEC94AB2A9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qhpYNimS7SbDyhAb1SRjnBNuseBWPYbZF6eyvine43n/0/34352e3138332e3233322e302f32322d3234203d3e20323639323934.roa
Signing time:             Mon 01 Jul 2024 17:58:04 +0000
ROA not before:           Mon 01 Jul 2024 17:53:04 +0000
ROA not after:            Mon 30 Jun 2025 17:58:04 +0000
asID:                     269294
IP address blocks:        45.183.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5qhpYNimS7SbDyhAb1SRjnBNuseBWPYbZF6eyvine43n/0/7EAD5172054B440D42C3F71E33909EEC94AB2A9F.crl
                          rsync://rpki-repo.registro.br/repo/5qhpYNimS7SbDyhAb1SRjnBNuseBWPYbZF6eyvine43n/0/7EAD5172054B440D42C3F71E33909EEC94AB2A9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EAD5172054B440D42C3F71E33909EEC94AB2A9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9c:69:4c:d4:ec:90:b5:97:78:5a:24:eb:1e:ea:86:bd:8e:c2:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EAD5172054B440D42C3F71E33909EEC94AB2A9F
        Validity
            Not Before: Jul  1 17:53:04 2024 GMT
            Not After : Jun 30 17:58:04 2025 GMT
        Subject: CN=5722DF0512B32F1E94A64329FB19A968EF498E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:07:9b:7a:57:6c:99:57:a8:d3:76:f8:9e:e1:
                    49:d9:b9:14:32:ab:32:cf:98:3d:da:43:d0:18:66:
                    d5:e5:82:04:48:18:a8:04:66:69:2f:3f:15:6f:b6:
                    3a:79:26:ca:e5:fe:d0:b2:99:56:db:28:a7:ad:b8:
                    c8:9f:ce:be:4e:f4:92:d3:9f:33:1a:15:1f:a9:77:
                    87:d4:b3:bd:ee:c2:1d:f4:78:a5:13:c1:b7:1c:d2:
                    c9:cf:35:6f:ba:a6:a9:96:b0:26:04:d8:a5:73:5f:
                    e3:2c:ab:a4:6c:9b:03:e9:0a:be:87:bf:0a:c1:8e:
                    34:38:bc:ab:2a:6d:9f:66:91:a1:3d:50:c2:17:5a:
                    68:59:f6:83:fa:c2:24:08:d8:52:a6:51:7b:c3:57:
                    4d:b9:88:16:cf:56:ca:fc:9f:43:13:d9:00:27:49:
                    a9:12:20:51:67:30:d5:f7:f9:8e:47:92:e3:e9:93:
                    9c:f1:71:de:3c:06:4e:78:f3:d5:bf:b4:a1:46:f6:
                    ac:22:6a:75:36:7e:c0:3d:35:ac:c7:6d:1d:8e:eb:
                    50:a7:34:6a:c7:09:e0:25:42:d9:03:ec:71:d6:e6:
                    52:7d:83:da:da:a1:15:cf:ad:a9:36:e0:4d:e4:ad:
                    44:e9:10:8e:9e:00:e6:f9:b2:d4:76:45:5d:ed:4c:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:22:DF:05:12:B3:2F:1E:94:A6:43:29:FB:19:A9:68:EF:49:8E:8A
            X509v3 Authority Key Identifier:
                keyid:7E:AD:51:72:05:4B:44:0D:42:C3:F7:1E:33:90:9E:EC:94:AB:2A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qhpYNimS7SbDyhAb1SRjnBNuseBWPYbZF6eyvine43n/0/7EAD5172054B440D42C3F71E33909EEC94AB2A9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EAD5172054B440D42C3F71E33909EEC94AB2A9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qhpYNimS7SbDyhAb1SRjnBNuseBWPYbZF6eyvine43n/0/34352e3138332e3233322e302f32322d3234203d3e20323639323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:82:1e:23:0a:34:82:f6:e4:50:2c:13:70:3a:06:8d:db:84:
         10:32:44:30:5f:b4:f9:55:c6:b0:c1:10:35:1d:74:97:de:21:
         dd:a7:95:04:8c:36:4d:28:ae:a8:cf:27:1c:20:ae:57:e1:e0:
         2f:45:41:00:dc:cf:55:40:cc:f3:d1:c9:66:ff:f9:81:fc:08:
         08:33:95:61:a4:6d:2d:39:21:ee:8d:f2:3f:fc:b5:a8:74:60:
         18:8a:01:c3:36:61:23:80:f8:f6:b4:32:12:bd:ff:1c:1a:c2:
         13:6e:5b:b9:8a:c9:a6:e5:9e:21:e4:3f:00:ae:50:1b:8c:66:
         88:9e:b4:3e:cc:07:e5:11:a0:26:2c:ac:35:2e:79:b0:24:ee:
         c7:03:9f:3e:73:9a:bd:74:63:d9:e6:cd:ec:f8:56:ca:46:0b:
         22:22:c0:b1:d1:8e:d4:c4:79:14:3f:0f:4c:7a:25:52:9d:e2:
         8f:8f:7e:de:3e:1e:0f:e8:f2:74:c9:69:b7:0c:4a:75:d4:6e:
         08:0b:20:59:5d:53:1f:67:2d:ad:23:fe:fa:d5:b1:7d:2d:02:
         49:ca:58:a0:63:34:3f:14:bb:60:c8:ce:85:43:1d:e2:2f:ec:
         56:9a:30:8b:08:10:16:a5:b5:1f:5b:31:a2:52:e8:c5:b7:ed:
         61:3c:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:41:59 2024 by rpki-client on console-fra.rpki-client.org