Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/34352e362e3130322e302f32332d3233203d3e20323636313831.roa
File:                     34352e362e3130322e302f32332d3233203d3e20323636313831.roa (raw, json)
Hash identifier:          O2WETVBmpPi4WAndt95q2dcneNxV3QZ1gryZyQX+dUQ=
Subject key identifier:   03:7E:9B:75:CF:A1:69:9A:3A:DE:10:BC:E1:4F:A1:2B:81:28:DC:3B
Certificate issuer:       /CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
Certificate serial:       35C71509BF617ABE7FB0BA3828535D5764230D4E
Authority key identifier: FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/34352e362e3130322e302f32332d3233203d3e20323636313831.roa
Signing time:             Fri 19 Jul 2024 16:59:27 +0000
ROA not before:           Fri 19 Jul 2024 16:54:27 +0000
ROA not after:            Fri 18 Jul 2025 16:59:27 +0000
asID:                     266181
IP address blocks:        45.6.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl
                          rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c7:15:09:bf:61:7a:be:7f:b0:ba:38:28:53:5d:57:64:23:0d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
        Validity
            Not Before: Jul 19 16:54:27 2024 GMT
            Not After : Jul 18 16:59:27 2025 GMT
        Subject: CN=037E9B75CFA1699A3ADE10BCE14FA12B8128DC3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:30:3c:02:47:1e:48:b2:52:8a:cc:d5:83:d3:
                    e7:18:a9:dc:72:8a:ad:46:51:89:06:73:6b:54:e1:
                    1b:99:9f:6d:89:54:1e:41:11:56:62:15:ca:88:82:
                    1e:38:1a:7c:41:17:84:60:78:b1:b1:fc:7d:7c:e2:
                    c2:af:2f:78:ea:dd:4b:44:45:6a:29:d9:e4:eb:fe:
                    1d:94:48:d2:6f:79:44:4c:7a:20:30:54:9b:ce:44:
                    47:0f:9f:d9:91:82:bb:0b:69:85:e8:df:cc:8c:03:
                    92:9b:18:2c:08:dd:05:e7:09:59:9a:ff:9c:74:bc:
                    d1:aa:65:4d:0d:f7:7e:d1:f7:d2:2f:dd:e3:3d:17:
                    26:3c:d3:34:a2:a7:72:83:c4:b7:79:45:18:d6:97:
                    e7:17:70:fd:28:e0:36:96:5c:fc:ff:9c:dd:a5:5d:
                    84:a6:e2:d2:99:20:e2:37:30:31:a2:ef:6d:3e:d1:
                    9a:4f:dd:df:6a:9a:ad:a3:65:c1:69:74:94:6a:93:
                    a1:65:a0:4e:36:94:f2:9a:4f:43:1a:bb:e3:8b:38:
                    6f:37:7c:29:3e:25:b0:e8:af:11:6f:85:36:57:30:
                    1e:1a:f9:6d:c2:47:ba:10:42:3e:31:22:e2:85:31:
                    64:5e:87:fb:f4:9a:4a:99:5c:f3:1a:ca:1e:db:9c:
                    4e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7E:9B:75:CF:A1:69:9A:3A:DE:10:BC:E1:4F:A1:2B:81:28:DC:3B
            X509v3 Authority Key Identifier:
                keyid:FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/34352e362e3130322e302f32332d3233203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:fd:eb:e6:c8:2c:8e:34:fc:5a:74:2c:cd:eb:0b:c4:3d:5a:
         74:50:ce:e0:91:b3:50:74:af:92:9c:1e:36:7f:be:c6:b5:23:
         a4:e8:fb:73:23:8c:9d:f6:90:ec:da:22:0c:79:0e:1c:22:5f:
         38:6e:4c:3b:f8:9f:61:b0:3f:ad:4f:b7:f2:16:65:94:4a:33:
         ed:27:b1:85:44:6b:e5:cb:65:55:0e:4e:83:1a:be:56:f6:c0:
         ea:13:50:e7:8f:29:cc:eb:70:4f:9e:71:05:85:54:6d:88:04:
         d7:bd:12:c1:f2:09:4e:7e:86:8d:7d:88:e4:09:92:43:48:71:
         43:55:24:5f:03:87:20:04:bf:fd:da:9f:8e:be:93:c1:83:6b:
         12:8b:83:39:ef:3d:ea:1b:e3:16:2d:2d:8f:02:a8:88:53:16:
         b7:01:a7:8b:28:59:c5:aa:d9:6f:2f:d2:b8:52:f0:a2:f1:15:
         b6:cd:06:1d:8b:6c:f3:52:68:26:f3:df:53:1a:68:76:ec:cf:
         c1:83:fc:70:77:74:d8:51:db:4a:a1:05:0d:4b:1f:99:cb:25:
         3d:53:2f:bb:5a:f0:00:29:43:c5:89:79:9d:91:6a:14:82:5e:
         8c:07:c0:f6:6a:26:0c:97:55:32:09:e4:10:28:2d:ee:ef:6f:
         86:4c:86:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:20 2024 by rpki-client on console-fra.rpki-client.org