Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/34352e3137342e372e302f32342d3234203d3e20323638393134.roa
File:                     34352e3137342e372e302f32342d3234203d3e20323638393134.roa (raw, json)
Hash identifier:          n8pDZsFuPJh2kf7X0EgIsQfTWlENqlhJMTzvEpIduYM=
Subject key identifier:   52:C2:4B:0D:DD:B3:FF:8F:3E:E9:8A:6A:03:28:11:DF:46:22:55:E5
Certificate issuer:       /CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
Certificate serial:       7E5811A13F3AB6A611123C955E66006E50AB5787
Authority key identifier: 65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/34352e3137342e372e302f32342d3234203d3e20323638393134.roa
Signing time:             Mon 18 Nov 2024 17:13:28 +0000
ROA not before:           Mon 18 Nov 2024 17:08:28 +0000
ROA not after:            Mon 17 Nov 2025 17:13:28 +0000
asID:                     268914
IP address blocks:        45.174.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 02:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:58:11:a1:3f:3a:b6:a6:11:12:3c:95:5e:66:00:6e:50:ab:57:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
        Validity
            Not Before: Nov 18 17:08:28 2024 GMT
            Not After : Nov 17 17:13:28 2025 GMT
        Subject: CN=52C24B0DDDB3FF8F3EE98A6A032811DF462255E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b7:62:7d:5c:5a:90:58:00:dc:d0:ad:9f:95:
                    ea:fd:2a:73:49:b1:eb:fa:53:73:d7:7c:65:20:ac:
                    0a:31:30:a0:ea:92:28:84:b8:03:8b:99:1a:88:02:
                    a6:39:93:ce:e7:d3:5d:5f:bc:1a:09:64:02:97:0e:
                    5c:d0:00:2c:58:78:61:e5:98:ed:03:27:6a:75:82:
                    1a:e0:74:f4:58:c5:c0:d3:6c:86:98:74:ca:8e:49:
                    4d:f7:33:6c:34:3d:6d:0b:ec:97:de:41:b4:ea:99:
                    4e:a3:56:fa:d5:93:f2:17:6d:d9:b2:71:47:b0:3a:
                    d5:23:67:32:28:1c:d5:7c:9b:09:68:2f:be:5e:7d:
                    25:a6:bf:0c:cb:34:fc:f8:ee:69:5b:a2:9e:bb:28:
                    21:3f:fc:cc:ad:c8:4d:24:85:fb:70:19:23:9e:ba:
                    36:de:06:9c:ad:f3:03:92:90:a4:59:11:ea:41:54:
                    cb:d7:06:fb:b9:41:33:4a:1c:5f:20:1c:3d:2b:48:
                    75:0f:b1:62:51:b4:a8:00:1d:f4:5d:f7:da:9a:33:
                    82:57:d2:71:ee:33:0e:b9:f8:b2:76:e3:9e:12:59:
                    db:3b:a3:96:64:49:4d:f6:78:6b:c7:d3:0e:59:89:
                    88:0d:5a:6f:37:72:11:2b:e1:c9:68:fb:d7:a3:2b:
                    a2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C2:4B:0D:DD:B3:FF:8F:3E:E9:8A:6A:03:28:11:DF:46:22:55:E5
            X509v3 Authority Key Identifier:
                keyid:65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/34352e3137342e372e302f32342d3234203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:31:48:93:27:f8:86:51:aa:dc:ee:39:0e:21:e0:18:55:e7:
         8d:ff:ae:ea:0b:c4:c2:76:b3:31:89:77:d6:e3:49:3c:e1:2a:
         1e:00:0c:52:58:43:ac:28:ee:07:35:56:0c:50:19:43:c4:83:
         48:4a:b1:96:fc:13:b1:f1:13:12:c3:c9:4c:6e:be:e8:6d:ed:
         50:9e:35:60:0b:43:71:20:6e:98:36:88:6a:a4:f8:51:b2:8a:
         e8:3f:4d:12:9d:72:9b:e8:7e:0f:bb:78:c5:bf:1d:38:89:aa:
         6c:67:6d:8a:ee:dc:da:65:ea:2d:dd:15:62:a8:cd:eb:cf:d9:
         e9:f8:fc:18:5f:1c:e5:1a:ef:e1:1d:e1:3f:b4:de:82:d2:d8:
         c5:11:89:cd:10:d5:fd:60:63:4f:38:56:8c:af:8f:92:63:0c:
         14:df:69:f1:39:ef:e5:38:1d:a5:a4:b7:bd:53:42:e8:3e:fe:
         70:f9:6b:ed:b1:83:ff:b5:9b:09:a4:7b:77:50:e9:88:f0:e6:
         9a:b0:e1:a0:cc:a4:4f:ff:95:84:60:15:5d:9b:00:76:2d:20:
         02:b5:9e:0c:3a:c9:38:b3:15:62:99:97:06:18:75:49:21:b0:
         c3:ce:15:6a:0f:d5:ff:06:78:41:0d:9d:e6:c0:7d:58:d4:07:
         ad:b4:47:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:09:10 2025 by rpki-client