Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/34352e3232392e3133362e302f32342d3234203d3e20323731323937.roa
File:                     34352e3232392e3133362e302f32342d3234203d3e20323731323937.roa (raw, json)
Hash identifier:          fNxdLkPd37101WEfUNEK3Mt9nUwgVMopZIHd0JVyQ1M=
Subject key identifier:   E8:F8:DB:C9:DE:68:24:6D:87:D5:26:5C:96:21:A0:0C:C5:CB:7E:A4
Certificate issuer:       /CN=A9F1AA966F8CE06FDFC567341E856BB5CA5C18E8
Certificate serial:       431793F1EE8F7124C752950F86240AAB089C254F
Authority key identifier: A9:F1:AA:96:6F:8C:E0:6F:DF:C5:67:34:1E:85:6B:B5:CA:5C:18:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9F1AA966F8CE06FDFC567341E856BB5CA5C18E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/34352e3232392e3133362e302f32342d3234203d3e20323731323937.roa
Signing time:             Mon 18 Nov 2024 17:58:07 +0000
ROA not before:           Mon 18 Nov 2024 17:53:07 +0000
ROA not after:            Mon 17 Nov 2025 17:58:07 +0000
asID:                     271297
IP address blocks:        45.229.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/A9F1AA966F8CE06FDFC567341E856BB5CA5C18E8.crl
                          rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/A9F1AA966F8CE06FDFC567341E856BB5CA5C18E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9F1AA966F8CE06FDFC567341E856BB5CA5C18E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:17:93:f1:ee:8f:71:24:c7:52:95:0f:86:24:0a:ab:08:9c:25:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9F1AA966F8CE06FDFC567341E856BB5CA5C18E8
        Validity
            Not Before: Nov 18 17:53:07 2024 GMT
            Not After : Nov 17 17:58:07 2025 GMT
        Subject: CN=E8F8DBC9DE68246D87D5265C9621A00CC5CB7EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c0:7c:12:f5:76:32:44:fa:5d:7f:74:a5:d6:
                    eb:41:76:45:82:81:4e:23:4b:57:9a:9d:67:00:a5:
                    59:55:a7:60:da:af:b3:c1:39:aa:9d:1e:52:9c:1d:
                    de:f8:0b:46:49:c3:b1:da:dc:34:74:5b:41:08:b4:
                    45:af:2f:a5:ea:a2:68:55:83:5a:9b:a1:c3:9a:89:
                    4d:ed:8c:64:29:0a:fd:7a:bf:72:ad:8b:f7:9c:58:
                    48:7b:2c:4c:e9:ac:13:ba:80:75:b2:f0:43:30:d8:
                    a3:31:e5:41:f2:10:47:f0:07:16:d7:06:42:18:33:
                    24:f4:2b:71:cd:01:fd:75:17:28:40:55:b6:a4:be:
                    45:e3:ed:3d:32:d7:7d:4c:07:0c:d3:0e:a5:ef:f8:
                    9a:7b:0a:6b:b1:e2:58:16:3c:e2:41:05:e0:b3:ac:
                    ae:18:c5:be:97:61:9e:cb:a3:b5:a6:0b:e1:a5:c7:
                    f0:49:e2:ea:54:c4:31:75:ad:58:5c:56:a0:01:04:
                    3a:c5:9c:9a:3a:44:f5:6a:37:ac:51:2f:62:01:ea:
                    e3:fc:9d:f7:9f:99:e2:b5:49:30:3a:ec:09:c0:5d:
                    1e:c6:8a:00:f9:d6:2d:91:44:dc:c6:bd:c4:35:2c:
                    38:51:23:3b:2c:80:8e:5c:3a:4c:45:fb:86:bd:50:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F8:DB:C9:DE:68:24:6D:87:D5:26:5C:96:21:A0:0C:C5:CB:7E:A4
            X509v3 Authority Key Identifier:
                keyid:A9:F1:AA:96:6F:8C:E0:6F:DF:C5:67:34:1E:85:6B:B5:CA:5C:18:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/A9F1AA966F8CE06FDFC567341E856BB5CA5C18E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9F1AA966F8CE06FDFC567341E856BB5CA5C18E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/34352e3232392e3133362e302f32342d3234203d3e20323731323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:ce:08:77:f6:5f:7b:b1:37:27:8a:68:78:af:2a:e0:9c:fa:
         44:47:81:fa:1d:01:03:41:23:be:36:e6:90:74:8e:07:ae:e6:
         06:59:c7:66:d3:f2:9d:3b:38:24:39:68:25:7f:5f:3f:f9:9c:
         b8:9f:17:da:af:c4:f7:44:11:a6:fe:0e:38:e4:7e:cd:ca:ff:
         33:19:fd:ff:5d:1f:80:08:4b:5a:d3:9b:2b:1d:cb:80:6a:47:
         1e:42:9d:16:56:72:a8:8f:c7:b7:7c:ab:af:31:69:14:25:dc:
         2b:95:ea:ec:32:1b:c8:94:cb:a0:31:e0:53:83:54:23:d5:2a:
         ef:04:2b:bf:ad:2f:25:5e:5c:ad:3d:9a:f6:6d:d6:d4:a2:71:
         08:53:16:cb:da:18:c4:ce:82:a7:30:c5:fc:2d:33:51:87:1f:
         73:fc:3e:28:16:db:68:62:8d:b3:5a:de:76:7f:e0:87:1e:11:
         63:b2:75:3e:89:fd:be:38:58:d3:40:99:12:2e:96:2e:3e:b9:
         26:aa:c4:a0:83:34:f5:56:30:a0:2e:e4:ea:53:c0:1b:eb:ee:
         39:b1:d9:9d:b7:2d:51:61:02:b8:68:c1:a8:88:0a:76:91:6e:
         93:0d:82:a4:4f:81:3a:85:3f:62:1e:dc:c3:c7:b4:06:f9:12:
         b2:dc:40:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:34 2024 by rpki-client on console-fra.rpki-client.org