Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQEtnVS9QEZF1X7Hgv4FihvSv3KK25vcban59QXyL7t/0/34352e3233352e32362e302f32342d3234203d3e20323637333831.roa
File:                     34352e3233352e32362e302f32342d3234203d3e20323637333831.roa (raw, json)
Hash identifier:          Upete0+/eym2iPBLXXKlRhJQvpNiPHs+X1KyCpGgOmg=
Subject key identifier:   3C:74:7E:44:2F:4D:02:B0:92:83:9A:7E:A6:BA:20:13:02:02:CF:85
Certificate issuer:       /CN=AD9F8701AC14D16BF452FF59281EDDC4BD3DE167
Certificate serial:       7DC115C90014252F87D6D905140C441CD5137F7B
Authority key identifier: AD:9F:87:01:AC:14:D1:6B:F4:52:FF:59:28:1E:DD:C4:BD:3D:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD9F8701AC14D16BF452FF59281EDDC4BD3DE167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQEtnVS9QEZF1X7Hgv4FihvSv3KK25vcban59QXyL7t/0/34352e3233352e32362e302f32342d3234203d3e20323637333831.roa
Signing time:             Wed 17 Jul 2024 18:39:23 +0000
ROA not before:           Wed 17 Jul 2024 18:34:23 +0000
ROA not after:            Wed 16 Jul 2025 18:39:23 +0000
asID:                     267381
IP address blocks:        45.235.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7UQEtnVS9QEZF1X7Hgv4FihvSv3KK25vcban59QXyL7t/0/AD9F8701AC14D16BF452FF59281EDDC4BD3DE167.crl
                          rsync://rpki-repo.registro.br/repo/7UQEtnVS9QEZF1X7Hgv4FihvSv3KK25vcban59QXyL7t/0/AD9F8701AC14D16BF452FF59281EDDC4BD3DE167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD9F8701AC14D16BF452FF59281EDDC4BD3DE167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:37:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c1:15:c9:00:14:25:2f:87:d6:d9:05:14:0c:44:1c:d5:13:7f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD9F8701AC14D16BF452FF59281EDDC4BD3DE167
        Validity
            Not Before: Jul 17 18:34:23 2024 GMT
            Not After : Jul 16 18:39:23 2025 GMT
        Subject: CN=3C747E442F4D02B092839A7EA6BA20130202CF85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:80:94:b3:f2:2a:96:88:08:ed:f1:34:f9:fe:
                    26:4c:a3:5d:f4:80:93:ce:20:4d:43:7c:20:73:92:
                    17:d5:00:61:e6:f9:e0:62:a2:ea:13:1e:70:25:38:
                    9b:d6:db:78:80:60:d6:4f:ba:98:80:32:69:37:08:
                    e8:6d:5d:da:87:06:40:2b:18:12:81:ec:45:c9:02:
                    92:ab:77:cc:d1:ba:6c:7d:0e:5d:d2:02:d9:5d:69:
                    eb:1c:43:86:1d:1e:af:5e:f1:1c:ec:6a:a3:8b:5f:
                    b3:5c:f0:ab:8e:8c:15:63:2e:f8:33:a2:cb:2c:23:
                    7f:1e:37:9f:2a:ed:69:8b:30:30:4c:aa:7e:7d:29:
                    aa:f3:7b:2e:24:f1:70:ee:1b:c7:62:57:c9:93:e1:
                    f4:d0:8b:2e:32:cf:b6:ea:b7:72:46:58:08:5d:c7:
                    e1:71:5f:53:25:c4:4a:7d:1d:b6:87:2b:45:16:0e:
                    71:72:cf:9c:cf:7e:28:ca:66:67:12:09:22:13:29:
                    01:3c:cc:83:42:15:ab:f6:c5:79:f4:bf:6e:4d:51:
                    12:8e:a8:59:77:4c:92:d5:03:e9:00:60:a5:72:1a:
                    31:2c:eb:04:1b:6a:16:55:0e:c9:d3:f8:f4:93:83:
                    04:8b:20:47:93:e5:7f:a8:8f:0b:88:d0:af:9a:ac:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:74:7E:44:2F:4D:02:B0:92:83:9A:7E:A6:BA:20:13:02:02:CF:85
            X509v3 Authority Key Identifier:
                keyid:AD:9F:87:01:AC:14:D1:6B:F4:52:FF:59:28:1E:DD:C4:BD:3D:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQEtnVS9QEZF1X7Hgv4FihvSv3KK25vcban59QXyL7t/0/AD9F8701AC14D16BF452FF59281EDDC4BD3DE167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD9F8701AC14D16BF452FF59281EDDC4BD3DE167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQEtnVS9QEZF1X7Hgv4FihvSv3KK25vcban59QXyL7t/0/34352e3233352e32362e302f32342d3234203d3e20323637333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:ab:51:5e:39:90:1a:87:4d:2f:86:a9:99:64:11:fa:26:59:
         56:8e:2f:21:cf:d7:d1:1b:73:ac:6e:34:90:eb:49:0c:fe:77:
         5a:72:13:c0:02:75:d4:c0:2d:d4:48:ba:35:75:8e:d2:e1:cc:
         8c:4c:78:0c:d4:df:db:7e:66:d3:39:69:22:4d:cc:5b:32:5a:
         81:6e:8d:52:8f:f8:11:07:0d:43:6d:84:64:f0:04:a7:fd:29:
         47:ed:fb:88:3d:9d:87:61:5c:e6:ed:bc:d9:1c:82:3f:f2:0f:
         7f:5a:72:f8:34:5d:d7:98:7b:41:48:28:90:77:77:aa:f6:5b:
         6f:7d:40:55:97:84:4c:ab:72:19:de:a2:f1:ff:73:25:03:1a:
         74:c1:cf:13:77:02:12:b0:27:da:a9:4a:e8:fb:1e:dd:88:e5:
         98:19:13:87:36:36:22:40:2f:f3:f6:86:c4:c6:c2:1f:7e:41:
         5d:95:75:3e:22:04:a0:92:a7:39:a8:37:73:86:97:23:1d:4f:
         c6:e1:01:81:50:5f:9e:4e:c3:e3:2a:f1:a9:c7:d1:f6:11:0f:
         bf:98:ca:b3:af:c9:78:9c:9e:e8:e0:65:45:d4:4b:cf:44:09:
         78:76:b3:44:83:5e:66:91:28:3e:cb:99:5e:51:d1:3f:fa:cd:
         98:21:33:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:07 2024 by rpki-client on console-ams.rpki-client.org