Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/34352e3136312e3132382e302f32322d3332203d3e20323638343539.roa
File:                     34352e3136312e3132382e302f32322d3332203d3e20323638343539.roa (raw, json)
Hash identifier:          T58k89drTYVXawl6VI0Iw0BxZcZnKBt8cBAKDMEi5C8=
Subject key identifier:   F0:E1:8D:2B:61:91:09:94:1B:49:46:E6:FA:91:A2:15:3A:55:6D:A5
Certificate issuer:       /CN=4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E
Certificate serial:       0687311EC5783C2DE4F3C4155E99FC633487F88B
Authority key identifier: 4C:C4:6B:4C:FC:BD:D5:3A:EE:15:9E:5B:C8:51:E0:ED:26:BE:7D:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/34352e3136312e3132382e302f32322d3332203d3e20323638343539.roa
Signing time:             Thu 23 May 2024 19:58:47 +0000
ROA not before:           Thu 23 May 2024 19:53:47 +0000
ROA not after:            Thu 22 May 2025 19:58:47 +0000
asID:                     268459
IP address blocks:        45.161.128.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.crl
                          rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:87:31:1e:c5:78:3c:2d:e4:f3:c4:15:5e:99:fc:63:34:87:f8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E
        Validity
            Not Before: May 23 19:53:47 2024 GMT
            Not After : May 22 19:58:47 2025 GMT
        Subject: CN=F0E18D2B619109941B4946E6FA91A2153A556DA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6d:99:55:57:10:f2:39:80:f5:67:74:03:85:
                    30:9f:7a:da:57:ff:7d:0b:8e:76:d8:91:70:67:ec:
                    52:31:a6:e8:b8:fa:76:42:81:22:9f:bc:3a:39:f8:
                    f4:ee:bc:19:eb:9b:ac:84:af:c7:e0:f3:1e:03:36:
                    92:3a:24:e4:6e:56:85:ba:6b:eb:16:a6:28:74:61:
                    8b:94:da:74:38:6b:fd:00:54:e3:28:8e:9d:b4:cf:
                    81:e0:fd:db:ba:3b:f4:62:72:41:4b:d8:bc:a9:99:
                    62:9b:e6:b3:64:19:9f:a8:f8:1e:2c:55:e9:74:e2:
                    c3:d2:55:67:db:87:56:00:63:cb:9d:ec:20:15:94:
                    1d:1b:db:a7:39:a9:5d:51:8d:96:86:bf:7a:71:81:
                    23:67:ed:39:24:f5:15:de:64:1b:60:b7:f5:20:ff:
                    41:67:05:ea:9d:1f:37:65:21:1c:ce:eb:f3:21:3b:
                    4b:30:a5:f3:aa:2c:8c:80:25:f9:4b:fd:18:60:a0:
                    32:9c:69:82:b4:69:91:e8:91:f8:55:96:ff:78:af:
                    cc:3e:63:0d:24:77:08:96:bf:24:a9:67:70:6d:98:
                    fb:17:6a:28:00:84:36:df:db:6a:6b:fd:2e:60:00:
                    13:16:63:95:4a:49:b6:50:55:0b:d1:ea:d3:44:25:
                    03:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E1:8D:2B:61:91:09:94:1B:49:46:E6:FA:91:A2:15:3A:55:6D:A5
            X509v3 Authority Key Identifier:
                keyid:4C:C4:6B:4C:FC:BD:D5:3A:EE:15:9E:5B:C8:51:E0:ED:26:BE:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/34352e3136312e3132382e302f32322d3332203d3e20323638343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:d5:7a:bb:45:25:b2:87:b6:49:1b:f1:66:45:6b:9b:3a:74:
         d6:04:02:09:d5:a2:be:1d:c7:14:90:c5:c8:c3:48:e2:a2:01:
         49:7b:eb:da:35:22:c6:b8:56:34:f5:62:ed:79:99:eb:7b:90:
         2d:1a:db:a9:e6:40:e7:63:c9:d1:27:64:aa:a8:13:f7:5d:db:
         8c:04:15:4f:d8:86:1f:3c:3b:54:d8:28:56:d4:94:dd:2b:15:
         77:14:fc:28:9f:63:24:ac:2c:b3:43:a3:45:af:36:8c:76:41:
         da:0c:f1:8d:17:d7:ba:6a:27:1d:ab:b3:e8:db:54:2a:6a:48:
         f4:5a:2d:98:e6:fc:cb:6c:0a:af:59:e4:43:af:43:b4:34:b4:
         b1:8c:c1:aa:30:17:9a:96:fb:d0:0e:ee:06:9f:45:3c:05:f1:
         f8:3b:2d:fa:c2:f6:42:9d:dd:82:80:27:f5:3f:76:cd:ee:69:
         ea:44:88:b1:5a:69:bd:47:9a:60:65:28:9a:20:ef:a3:8b:5e:
         15:56:ba:93:44:57:0a:70:b0:23:c8:e2:d0:da:7d:4d:b1:28:
         46:72:e5:53:e3:9a:b3:24:fd:51:17:d7:85:fd:d2:b1:90:c5:
         32:7c:46:cd:d0:42:c4:84:2c:1b:e9:4e:b4:ed:73:6a:a1:82:
         da:69:a8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:46 2024 by rpki-client on console-ams.rpki-client.org