Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/34352e3233322e3134322e302f32342d3238203d3e20323637333239.roa
File:                     34352e3233322e3134322e302f32342d3238203d3e20323637333239.roa (raw, json)
Hash identifier:          9lJ2tmHaevmdkLANQ3KaZravSlBqafZUmrMivjOd+Dw=
Subject key identifier:   2C:D1:FB:3D:24:03:92:A9:1C:3E:59:BB:EE:F9:F6:7F:1C:48:7E:D7
Certificate issuer:       /CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
Certificate serial:       4F7C6DD563C51968E143CCBDE6CA95CC6040EA6B
Authority key identifier: 8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/34352e3233322e3134322e302f32342d3238203d3e20323637333239.roa
Signing time:             Thu 04 Apr 2024 04:01:08 +0000
ROA not before:           Thu 04 Apr 2024 03:56:08 +0000
ROA not after:            Thu 03 Apr 2025 04:01:08 +0000
asID:                     267329
IP address blocks:        45.232.142.0/24 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl
                          rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7c:6d:d5:63:c5:19:68:e1:43:cc:bd:e6:ca:95:cc:60:40:ea:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
        Validity
            Not Before: Apr  4 03:56:08 2024 GMT
            Not After : Apr  3 04:01:08 2025 GMT
        Subject: CN=2CD1FB3D240392A91C3E59BBEEF9F67F1C487ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:87:94:e1:95:34:c4:83:c8:21:dd:7e:16:
                    c8:a0:95:47:de:05:97:16:f9:7f:95:36:dc:fd:62:
                    3b:e2:de:18:00:53:16:1d:14:41:fc:1e:01:a5:c0:
                    e7:7a:e7:7e:fc:8e:ac:3f:ad:2d:a9:6f:84:b1:e4:
                    47:1e:6c:f1:1a:04:f4:0a:96:44:9a:ba:e2:20:7b:
                    2e:1f:26:32:a3:f3:25:51:d8:70:2c:62:2d:c8:40:
                    9e:1f:16:6c:1a:a1:ef:64:3e:a0:88:c3:e5:28:cf:
                    25:f8:65:e4:8c:56:16:de:c4:d8:cc:29:13:0d:69:
                    a5:d2:c4:1a:5e:c2:07:5d:6e:d8:3a:21:2f:4c:9f:
                    a5:71:6d:55:e3:03:49:2c:f6:20:d0:d7:5a:17:9d:
                    3a:49:fc:69:5d:8d:18:91:3b:1a:24:8d:83:8d:13:
                    a0:02:70:1a:3b:00:33:c9:95:96:15:22:b0:0c:cc:
                    f9:1a:8b:3b:40:c2:40:71:05:e2:36:9f:e2:b8:b0:
                    06:1f:0a:3b:1b:bc:0d:b8:92:cb:c1:6e:5f:6a:be:
                    d6:96:b6:62:d2:69:8c:f0:df:eb:91:91:28:51:0f:
                    6c:2f:c4:0e:dd:ef:0a:11:8f:d1:5e:58:c8:ae:90:
                    a4:85:f7:f8:c6:94:21:21:e0:3d:cc:88:d0:68:53:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D1:FB:3D:24:03:92:A9:1C:3E:59:BB:EE:F9:F6:7F:1C:48:7E:D7
            X509v3 Authority Key Identifier:
                keyid:8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/34352e3233322e3134322e302f32342d3238203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:8c:71:c5:ac:e9:70:8e:21:4b:f8:2f:95:44:06:ac:68:cf:
         ca:27:bd:48:c9:99:3f:36:1e:54:03:19:fe:82:f6:5f:fd:8f:
         8e:97:91:cf:c9:7c:b0:56:63:77:29:b9:ff:6c:e4:fc:3a:1b:
         e5:ac:05:b4:42:ca:53:03:48:19:b4:c2:11:cd:d8:4f:3e:c4:
         5e:55:60:3a:c9:2b:28:ed:89:f2:5b:bc:09:6f:60:29:b9:48:
         cb:46:ef:01:87:68:72:75:7d:9d:c4:10:4f:0c:82:c3:48:37:
         68:dc:66:09:2c:cc:ce:3c:04:bd:de:35:af:21:76:2c:e6:71:
         d9:fc:ae:e8:af:35:94:ee:1e:89:71:a5:f9:5a:90:ac:cd:8b:
         63:11:0e:58:6d:67:18:18:0d:32:38:b4:12:7e:7f:da:8c:d0:
         63:74:43:f8:f8:b6:57:8c:d9:6f:c2:40:00:8c:7e:dc:5e:e8:
         03:57:3f:fc:56:05:f9:ca:db:e5:d4:a2:1b:92:c0:ab:e0:7d:
         fc:45:96:67:87:8f:65:e5:25:3f:48:a3:b6:6c:92:42:c4:46:
         10:0a:71:0b:6a:09:75:20:d1:50:94:b0:1b:03:f3:c5:fe:5b:
         08:69:5a:77:37:07:c4:5c:91:e8:88:09:48:1a:0b:a5:e0:88:
         1d:72:54:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:33 2024 by rpki-client on console-fra.rpki-client.org