Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/34352e3137362e3131322e302f32322d3232203d3e20323639303335.roa
File:                     34352e3137362e3131322e302f32322d3232203d3e20323639303335.roa (raw, json)
Hash identifier:          knpTHM5/sGIE7+X9kFDXnA2lSb9mafonjwOvHCO4yAg=
Subject key identifier:   E5:7E:9E:83:DA:80:44:68:AA:4D:A6:F1:66:B8:6A:DA:0B:8D:B3:AF
Certificate issuer:       /CN=C3C2ABD3A3932E081CF9937D6E75D13F59E02DF3
Certificate serial:       6B353D4DDC1794D28EA0DF70D3C726627AB2C577
Authority key identifier: C3:C2:AB:D3:A3:93:2E:08:1C:F9:93:7D:6E:75:D1:3F:59:E0:2D:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3C2ABD3A3932E081CF9937D6E75D13F59E02DF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/34352e3137362e3131322e302f32322d3232203d3e20323639303335.roa
Signing time:             Tue 23 Apr 2024 19:38:29 +0000
ROA not before:           Tue 23 Apr 2024 19:33:29 +0000
ROA not after:            Tue 22 Apr 2025 19:38:29 +0000
asID:                     269035
IP address blocks:        45.176.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/C3C2ABD3A3932E081CF9937D6E75D13F59E02DF3.crl
                          rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/C3C2ABD3A3932E081CF9937D6E75D13F59E02DF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3C2ABD3A3932E081CF9937D6E75D13F59E02DF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:35:3d:4d:dc:17:94:d2:8e:a0:df:70:d3:c7:26:62:7a:b2:c5:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C2ABD3A3932E081CF9937D6E75D13F59E02DF3
        Validity
            Not Before: Apr 23 19:33:29 2024 GMT
            Not After : Apr 22 19:38:29 2025 GMT
        Subject: CN=E57E9E83DA804468AA4DA6F166B86ADA0B8DB3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:18:27:27:41:23:43:a7:90:e8:ed:3a:99:b1:
                    1a:e8:8a:62:cb:df:f1:5e:a9:47:97:b3:dd:48:81:
                    4f:08:b2:97:ea:42:9f:65:aa:8a:b0:ce:09:21:fd:
                    f0:a5:9a:18:08:35:20:26:db:7c:83:4f:60:6b:7e:
                    2d:6f:18:32:2d:2a:4c:10:a0:0e:67:8a:d2:60:9a:
                    f7:4b:d4:7f:33:69:f3:a2:21:d2:1c:d7:fb:a8:5f:
                    c0:41:21:18:5b:44:52:28:7c:c3:8f:46:2f:d0:1b:
                    1f:cd:57:6b:59:d4:8d:77:e7:81:fc:0e:e6:a5:e8:
                    09:4b:4a:40:f1:a2:4a:c6:64:3c:6d:1e:8e:49:a0:
                    0a:68:64:04:7d:b1:85:1b:51:cc:bb:a3:de:5a:c4:
                    73:31:79:02:8e:1a:44:c4:17:f8:67:16:1f:37:de:
                    28:64:26:b4:b1:18:19:e2:52:0a:bf:b6:27:e4:6f:
                    16:db:01:49:a7:65:14:49:c8:22:f5:39:ec:9e:88:
                    e6:ce:09:a4:1a:f3:7d:f2:92:a3:7e:12:68:2b:d1:
                    e3:54:81:22:aa:be:3f:37:dd:0a:7b:51:26:40:e2:
                    85:29:03:7c:db:44:1e:2d:04:46:72:1e:27:f7:c3:
                    7e:d2:7f:f2:1a:af:62:d8:34:fc:a2:d6:b4:62:d5:
                    98:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7E:9E:83:DA:80:44:68:AA:4D:A6:F1:66:B8:6A:DA:0B:8D:B3:AF
            X509v3 Authority Key Identifier:
                keyid:C3:C2:AB:D3:A3:93:2E:08:1C:F9:93:7D:6E:75:D1:3F:59:E0:2D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/C3C2ABD3A3932E081CF9937D6E75D13F59E02DF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3C2ABD3A3932E081CF9937D6E75D13F59E02DF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/34352e3137362e3131322e302f32322d3232203d3e20323639303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:e8:d4:ae:b0:c6:bb:f6:0d:63:8d:e2:be:5e:47:54:2d:d4:
         f4:5a:a9:87:59:72:f0:cd:87:3b:ac:a3:f8:35:cb:66:38:70:
         06:ca:ba:d8:60:92:d2:28:8d:6a:52:c2:90:e7:d5:8b:1a:12:
         b4:9d:30:16:ff:20:ec:91:f3:fd:5e:c1:1f:bc:59:68:7d:02:
         19:ab:90:ad:04:c3:a4:48:60:56:fc:7a:1d:39:95:f2:be:67:
         74:56:dd:0c:61:ad:51:98:b9:fe:87:2e:8c:b2:19:5b:01:50:
         58:2d:6f:8a:6f:8f:91:7a:a8:02:ee:e4:b6:71:d7:bc:70:9e:
         7a:16:ec:d7:7d:06:0a:72:55:d6:60:e1:5a:48:df:c3:c1:cc:
         a5:b4:27:0d:3f:f6:99:10:3b:7c:35:90:09:aa:6d:7f:f5:de:
         35:80:06:03:f1:83:cd:ed:28:26:62:2f:8a:fe:c6:7c:79:66:
         7a:5c:db:4f:0f:0f:42:06:ea:79:dd:c3:6a:ca:64:07:f4:1e:
         1a:25:cf:f9:24:bc:d1:a4:bb:43:47:1b:96:26:4f:01:da:b0:
         41:3d:81:71:93:51:3f:ee:1a:84:dc:4a:d5:ee:54:67:6f:76:
         96:e4:b3:12:df:a2:00:e6:cf:f9:3e:00:08:64:53:a3:55:52:
         df:30:10:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:51 2024 by rpki-client on console-ams.rpki-client.org