Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3332203d3e20323638303239.roa
File:                     34352e3136382e35322e302f32322d3332203d3e20323638303239.roa (raw, json)
Hash identifier:          XjrusaT33M4Z0w/4Z4i2AmJbds57/sj239M0fXwXC6k=
Subject key identifier:   6D:2D:52:83:08:9F:77:19:BD:1A:00:E5:21:7B:F1:E6:35:DC:CD:C4
Certificate issuer:       /CN=5BCF4800DEF286925CD099151DD28B25A8A11EDB
Certificate serial:       7E692469DA30C4EDE6A4BBA42E36908C572B8C17
Authority key identifier: 5B:CF:48:00:DE:F2:86:92:5C:D0:99:15:1D:D2:8B:25:A8:A1:1E:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BCF4800DEF286925CD099151DD28B25A8A11EDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3332203d3e20323638303239.roa
Signing time:             Thu 04 Jul 2024 18:01:23 +0000
ROA not before:           Thu 04 Jul 2024 17:56:23 +0000
ROA not after:            Thu 03 Jul 2025 18:01:23 +0000
asID:                     268029
IP address blocks:        45.168.52.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5BCF4800DEF286925CD099151DD28B25A8A11EDB.crl
                          rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5BCF4800DEF286925CD099151DD28B25A8A11EDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BCF4800DEF286925CD099151DD28B25A8A11EDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:69:24:69:da:30:c4:ed:e6:a4:bb:a4:2e:36:90:8c:57:2b:8c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BCF4800DEF286925CD099151DD28B25A8A11EDB
        Validity
            Not Before: Jul  4 17:56:23 2024 GMT
            Not After : Jul  3 18:01:23 2025 GMT
        Subject: CN=6D2D5283089F7719BD1A00E5217BF1E635DCCDC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b2:99:76:c7:ef:bc:46:d1:4d:55:e1:73:87:
                    41:f1:ab:2d:56:8f:47:5c:ee:fb:e3:55:3b:9d:7f:
                    88:3f:25:88:42:0b:43:56:3e:59:92:aa:df:dc:7f:
                    98:a3:4d:1c:8a:63:0c:39:34:72:95:55:76:85:28:
                    f4:49:b7:a7:a9:53:af:d7:68:39:d7:20:25:a3:18:
                    c4:39:06:bb:5a:63:c9:55:e1:66:dc:e4:57:da:b5:
                    83:9f:ca:95:bf:bb:ec:a6:91:92:1e:79:0a:33:b3:
                    34:88:32:4f:c1:f2:2b:a0:0f:f7:b4:ad:a8:03:47:
                    40:b0:82:29:80:fd:53:35:5a:c8:d2:a3:93:31:31:
                    b7:88:c1:94:ec:34:3b:9e:c3:a3:9a:01:fa:7e:3a:
                    e2:6f:13:06:a1:73:5d:71:60:13:71:ae:77:af:55:
                    3d:08:8d:59:22:17:2f:1d:35:f0:d8:1a:77:7f:5c:
                    ff:79:c7:4a:a7:02:9c:d6:54:c4:bf:73:32:7d:12:
                    50:cf:75:52:3c:39:8b:a0:1e:7d:9b:62:6d:ad:0a:
                    b5:c9:98:48:b2:af:ea:a7:a6:58:0c:01:35:1d:8a:
                    db:84:e8:d4:cf:36:d9:e9:8c:7d:8b:eb:0d:71:08:
                    57:ec:cd:ba:02:39:07:c1:31:6b:6e:e0:eb:1f:c1:
                    66:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2D:52:83:08:9F:77:19:BD:1A:00:E5:21:7B:F1:E6:35:DC:CD:C4
            X509v3 Authority Key Identifier:
                keyid:5B:CF:48:00:DE:F2:86:92:5C:D0:99:15:1D:D2:8B:25:A8:A1:1E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5BCF4800DEF286925CD099151DD28B25A8A11EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BCF4800DEF286925CD099151DD28B25A8A11EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3332203d3e20323638303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:0f:e7:25:c5:d9:a5:63:02:38:6b:29:6e:1f:ec:8e:49:25:
         66:14:99:45:22:bb:b0:b8:83:7a:4f:fc:82:92:38:fd:75:5f:
         94:59:ef:b4:e1:c4:10:62:81:0a:d8:65:83:4f:65:63:c8:bc:
         1c:64:05:9c:5d:d2:90:81:2e:e4:25:66:0e:6d:9f:2b:15:f2:
         f3:4f:27:a0:23:f5:be:93:a8:47:30:51:0e:16:d2:d0:b8:3e:
         ae:16:dd:08:29:9b:17:f9:c1:cc:28:92:4d:18:80:3d:b8:42:
         34:0c:3c:9e:c1:00:ca:4d:79:9f:c2:b0:32:02:41:6d:1a:82:
         e6:bd:e7:e9:db:eb:77:d3:0e:2f:53:51:37:ca:ac:fb:d3:3b:
         d7:a5:7f:2b:ba:d6:38:29:00:8f:aa:40:66:8a:c4:9b:41:17:
         48:99:c7:51:32:c6:8e:36:25:1a:aa:bd:a0:9f:e8:22:8e:d6:
         13:9a:6c:f5:6a:1e:07:c5:d7:3a:f1:bf:4a:53:da:c9:c2:40:
         c4:1a:e7:43:32:78:80:22:2f:80:53:dd:ca:6b:c6:5c:a8:42:
         0d:b9:21:e1:38:16:da:71:e9:aa:72:b5:7f:19:e8:f3:f8:36:
         f0:ba:c4:89:e1:ef:6f:89:78:28:27:e4:90:b1:97:69:e0:a1:
         75:c1:27:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:09:23 2024 by rpki-client on console-fra.rpki-client.org