Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230342e302f32322d3232203d3e20323638303833.roa
File:                     34352e3136382e3230342e302f32322d3232203d3e20323638303833.roa (raw, json)
Hash identifier:          DYCiBQUi5IzgyBrkHPeERzd+qKRcDyDBLWuyaagdhyM=
Subject key identifier:   12:53:41:36:D4:D6:71:DE:76:41:A9:83:D8:59:9B:C7:47:87:E1:7B
Certificate issuer:       /CN=F079F5320F80269459179C5278F52BB945D6A636
Certificate serial:       290D4875C5011C3ABCA4A0AD76332D88D9B21373
Authority key identifier: F0:79:F5:32:0F:80:26:94:59:17:9C:52:78:F5:2B:B9:45:D6:A6:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F079F5320F80269459179C5278F52BB945D6A636.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230342e302f32322d3232203d3e20323638303833.roa
Signing time:             Tue 22 Oct 2024 21:14:45 +0000
ROA not before:           Tue 22 Oct 2024 21:09:45 +0000
ROA not after:            Tue 21 Oct 2025 21:14:45 +0000
asID:                     268083
IP address blocks:        45.168.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/F079F5320F80269459179C5278F52BB945D6A636.crl
                          rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/F079F5320F80269459179C5278F52BB945D6A636.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F079F5320F80269459179C5278F52BB945D6A636.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0d:48:75:c5:01:1c:3a:bc:a4:a0:ad:76:33:2d:88:d9:b2:13:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F079F5320F80269459179C5278F52BB945D6A636
        Validity
            Not Before: Oct 22 21:09:45 2024 GMT
            Not After : Oct 21 21:14:45 2025 GMT
        Subject: CN=12534136D4D671DE7641A983D8599BC74787E17B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:f8:09:29:c8:db:7c:d6:b9:e2:e4:46:57:
                    62:f2:2c:19:9b:8c:53:1c:e2:76:4e:6f:64:57:f0:
                    6f:e3:2b:28:a1:55:d0:94:5e:cf:3a:d4:6c:70:6f:
                    b8:11:8b:72:22:66:97:a2:94:4e:41:6e:89:59:f4:
                    b0:03:9f:df:2d:62:a7:62:58:b9:db:16:7a:e7:b7:
                    86:af:13:9d:21:88:38:e3:96:15:dc:6e:6f:64:c3:
                    14:ee:57:6c:3c:86:20:e2:e6:35:ae:6c:52:cb:62:
                    25:5d:34:69:27:7e:b1:f3:c4:0c:59:65:08:e7:74:
                    d0:04:3c:7b:86:c3:d9:18:10:5e:ed:80:1b:e3:28:
                    1c:4e:30:5a:6a:5a:a9:43:59:5e:d0:58:6a:4b:08:
                    00:b0:75:a0:2d:3b:89:8a:c6:25:25:08:ba:b9:bf:
                    6d:0c:2e:d5:b3:cd:02:2f:4b:28:3a:b4:97:e2:02:
                    e3:ba:fd:40:3f:ed:ba:a5:64:f0:6b:78:c7:58:76:
                    1c:98:a8:92:f7:cd:0e:ec:d8:a5:70:4c:d3:32:21:
                    28:ee:97:29:e6:c7:c8:a1:e3:0a:47:71:3b:ce:32:
                    be:70:56:7f:f5:ef:4f:47:d1:1c:aa:c0:f7:e1:73:
                    1f:96:66:c5:04:60:8c:64:2e:25:cd:c0:f6:52:3f:
                    b7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:53:41:36:D4:D6:71:DE:76:41:A9:83:D8:59:9B:C7:47:87:E1:7B
            X509v3 Authority Key Identifier:
                keyid:F0:79:F5:32:0F:80:26:94:59:17:9C:52:78:F5:2B:B9:45:D6:A6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/F079F5320F80269459179C5278F52BB945D6A636.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F079F5320F80269459179C5278F52BB945D6A636.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230342e302f32322d3232203d3e20323638303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:52:b8:24:63:02:c2:c8:1e:40:44:58:48:b7:09:0b:ba:80:
         ac:ea:7e:bc:4d:ce:42:aa:14:7c:7c:f5:c7:fd:cb:40:06:61:
         c5:be:95:38:de:f5:f2:2d:b1:01:60:05:75:3c:b8:84:31:32:
         37:b8:00:4c:8d:a5:be:6e:5d:44:63:b3:c6:fd:89:12:72:ee:
         f8:14:55:39:44:db:ba:d7:17:15:c5:f8:81:49:4f:ef:97:62:
         d3:db:6c:9f:a4:1b:6c:c1:71:33:59:da:b0:46:75:ae:50:ad:
         95:54:08:7c:51:8f:04:66:c7:31:51:c0:86:8b:40:65:f9:c0:
         f8:98:1e:d2:6d:e5:87:01:60:a4:9b:e1:80:66:06:e9:f3:ff:
         fc:9d:df:a9:67:f3:35:5d:29:d0:fb:20:69:8c:e9:65:ca:4c:
         96:fa:69:85:e2:f7:90:d0:19:ef:88:37:c6:2b:d3:40:bb:4c:
         17:85:01:a4:14:dd:ca:d9:04:79:4c:8d:fe:99:c4:3c:41:4b:
         fa:7a:c9:c9:6b:9a:1d:a3:e0:11:6d:d5:89:85:65:48:5f:26:
         dc:99:af:da:8c:57:ce:29:c2:2f:bf:09:6e:30:99:e3:90:14:
         3c:6e:86:9a:50:8a:dd:40:71:e5:cb:e4:bf:b7:6c:53:34:46:
         8f:d4:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:16:51 2024 by rpki-client on console-ams.rpki-client.org