Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230362e302f32332d3233203d3e20323638303833.roa
File:                     34352e3136382e3230362e302f32332d3233203d3e20323638303833.roa (raw, json)
Hash identifier:          Mih4LwSh7tomB6bXgD4D2ruaLc+UxzoXk4SO1a+P7Ig=
Subject key identifier:   EF:B2:EE:BB:40:C6:63:51:23:B7:A5:FB:0D:C7:9A:92:F4:11:8F:78
Certificate issuer:       /CN=F079F5320F80269459179C5278F52BB945D6A636
Certificate serial:       198F8B1767B124C5C3DC6419F6740C430D9AF16E
Authority key identifier: F0:79:F5:32:0F:80:26:94:59:17:9C:52:78:F5:2B:B9:45:D6:A6:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F079F5320F80269459179C5278F52BB945D6A636.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230362e302f32332d3233203d3e20323638303833.roa
Signing time:             Tue 22 Oct 2024 21:14:45 +0000
ROA not before:           Tue 22 Oct 2024 21:09:45 +0000
ROA not after:            Tue 21 Oct 2025 21:14:45 +0000
asID:                     268083
IP address blocks:        45.168.206.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/F079F5320F80269459179C5278F52BB945D6A636.crl
                          rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/F079F5320F80269459179C5278F52BB945D6A636.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F079F5320F80269459179C5278F52BB945D6A636.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8f:8b:17:67:b1:24:c5:c3:dc:64:19:f6:74:0c:43:0d:9a:f1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F079F5320F80269459179C5278F52BB945D6A636
        Validity
            Not Before: Oct 22 21:09:45 2024 GMT
            Not After : Oct 21 21:14:45 2025 GMT
        Subject: CN=EFB2EEBB40C6635123B7A5FB0DC79A92F4118F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:92:9d:6b:3a:ba:52:51:9c:c6:d8:86:35:
                    60:49:2c:8c:af:fd:c2:9f:d3:85:1c:94:0f:22:a1:
                    10:05:ac:b5:0e:3d:f8:66:0e:64:37:9a:f7:01:92:
                    cd:a4:ee:18:ec:d4:12:22:56:df:3c:9b:90:6a:cc:
                    41:a2:b4:03:b9:70:cb:32:54:cc:c8:44:9a:35:15:
                    cb:26:e0:c5:29:c8:1e:46:96:60:26:a3:2a:2f:e7:
                    49:d3:59:36:9a:a1:37:5a:66:a4:01:c8:f9:c7:71:
                    42:c4:01:ab:da:7f:a5:5c:ff:76:5a:34:a1:ac:a2:
                    62:e3:37:53:26:f5:28:e4:44:95:d9:86:e0:12:ef:
                    6e:74:08:93:ae:9d:86:f4:22:04:16:42:55:a8:74:
                    0c:e6:76:f4:b5:c4:b3:94:73:3f:20:f5:7c:7c:59:
                    14:9d:a3:87:53:ae:26:eb:18:c1:a7:d9:38:be:ad:
                    dd:b8:e6:78:ff:a1:bc:7a:f7:94:7f:20:8f:99:a7:
                    16:aa:54:6d:36:98:f2:48:ba:f8:6f:51:4d:df:e2:
                    84:8f:96:06:2e:62:47:34:5f:2e:07:70:74:a6:35:
                    05:ab:25:97:f3:1b:0a:82:e8:3d:b7:f5:93:b6:43:
                    ad:72:7d:35:e0:53:f9:7d:fb:29:fd:d4:ee:09:c7:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B2:EE:BB:40:C6:63:51:23:B7:A5:FB:0D:C7:9A:92:F4:11:8F:78
            X509v3 Authority Key Identifier:
                keyid:F0:79:F5:32:0F:80:26:94:59:17:9C:52:78:F5:2B:B9:45:D6:A6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/F079F5320F80269459179C5278F52BB945D6A636.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F079F5320F80269459179C5278F52BB945D6A636.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230362e302f32332d3233203d3e20323638303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:a4:32:35:d8:21:c2:52:57:b5:68:48:00:2d:0d:74:1f:0c:
         f6:b2:a1:1d:2c:71:4d:ab:e9:5f:e2:49:2d:4d:74:e5:0e:81:
         26:90:2e:85:8c:ca:69:2b:a3:55:5f:14:a9:e4:13:e8:35:3a:
         b5:06:01:47:89:4a:25:b5:10:bc:65:48:dd:25:75:fc:72:33:
         45:42:59:38:39:0d:4d:e9:c9:16:8b:3f:c7:df:cf:9e:9b:e2:
         30:bf:19:f8:77:54:67:62:7e:b1:55:f9:c7:8a:a3:d7:5c:97:
         6a:d0:ec:e6:67:17:5e:e2:a5:07:e9:4e:03:d4:e2:ec:55:74:
         0a:a4:da:0d:f3:12:ff:ec:87:ea:8a:e1:a7:06:73:aa:0c:2f:
         c6:7f:5a:79:88:d6:9a:fb:45:e5:3d:7f:a4:45:27:43:6c:de:
         80:ac:a7:93:7e:18:5a:2d:af:20:40:cf:b7:f7:7b:c3:b4:67:
         1d:7e:b2:57:94:c8:f8:d3:7a:aa:6f:48:93:e9:d4:30:5b:09:
         26:73:bd:6b:c0:83:85:a4:1f:13:0c:ae:31:9f:62:b3:cd:c4:
         ca:7a:fc:60:b6:a2:60:09:7d:0c:20:3b:66:67:fb:12:c5:d4:
         82:2d:46:b0:f3:30:6e:2b:d6:5e:b0:9a:9b:ee:c3:4d:5e:07:
         04:e5:2f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:27 2024 by rpki-client on console-fra.rpki-client.org