Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e362e302f32342d3234203d3e20323638393235.roa
File:                     34352e3137362e362e302f32342d3234203d3e20323638393235.roa (raw, json)
Hash identifier:          Chy7tj8l/gpLn6yotfhf5IbX4ujiz4RUmoo6vX+zbZA=
Subject key identifier:   5E:72:13:16:BE:54:06:81:2B:1F:B1:BD:5D:80:8F:22:4F:7D:73:16
Certificate issuer:       /CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
Certificate serial:       47A9AC2638D59559E23696FD1AA158996CDB7A40
Authority key identifier: B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e362e302f32342d3234203d3e20323638393235.roa
Signing time:             Thu 04 Apr 2024 07:39:07 +0000
ROA not before:           Thu 04 Apr 2024 07:34:07 +0000
ROA not after:            Thu 03 Apr 2025 07:39:07 +0000
asID:                     268925
IP address blocks:        45.176.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.crl
                          rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a9:ac:26:38:d5:95:59:e2:36:96:fd:1a:a1:58:99:6c:db:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
        Validity
            Not Before: Apr  4 07:34:07 2024 GMT
            Not After : Apr  3 07:39:07 2025 GMT
        Subject: CN=5E721316BE5406812B1FB1BD5D808F224F7D7316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:6d:6a:2e:71:bc:0f:13:7e:48:16:47:91:
                    6e:89:9d:09:fa:0f:4b:aa:97:a2:07:26:4f:e6:21:
                    81:eb:ce:81:63:89:81:22:d2:da:ce:7a:99:b1:98:
                    30:e8:d0:1b:bb:7f:2e:28:03:1f:ad:3a:09:78:a3:
                    42:ea:c2:c2:e5:9c:2b:e2:38:6a:37:15:e3:e4:dc:
                    55:26:ef:77:24:15:4c:89:c8:a9:c3:ad:db:3a:f4:
                    8a:03:c2:4c:e3:25:12:dc:20:19:c5:52:b1:90:81:
                    39:a6:65:26:ba:18:a1:47:7b:01:5e:06:3e:a6:32:
                    16:ce:63:5d:b9:ac:fe:f4:56:04:38:74:64:2b:7a:
                    a7:4b:f3:20:b6:1e:98:55:b3:dc:15:44:2c:f6:00:
                    bb:22:aa:a1:f3:7c:a6:6a:58:b9:2e:6d:70:ce:4a:
                    93:0a:e9:9b:af:c5:e3:41:6d:e8:6e:0f:96:2c:b7:
                    f7:bc:b1:2b:5f:0e:86:db:9f:d1:03:f3:7e:8f:d4:
                    75:0e:48:8a:66:53:ac:1e:78:a3:9c:5c:01:ab:e0:
                    82:95:b8:56:81:63:2a:51:5a:f0:1c:e5:4a:63:66:
                    dc:4f:8e:71:a7:05:f6:5d:14:c2:06:11:3e:ce:f3:
                    82:62:93:19:e7:81:a8:63:fd:19:20:7b:46:e9:87:
                    7c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:72:13:16:BE:54:06:81:2B:1F:B1:BD:5D:80:8F:22:4F:7D:73:16
            X509v3 Authority Key Identifier:
                keyid:B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e362e302f32342d3234203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:0c:b0:92:ce:73:9b:ae:5a:79:9b:f9:f3:4f:54:ed:ec:93:
         36:05:58:e2:82:46:73:df:4a:89:da:79:34:f2:0f:03:88:7e:
         58:cb:93:95:d0:6d:8a:5e:ef:1f:0f:19:3c:a4:ab:ed:b9:e8:
         d7:71:3e:7a:53:91:d9:ed:b5:16:0b:b9:4b:4a:d9:e2:c7:9a:
         08:d9:fd:85:f6:da:b3:79:76:80:49:1f:cf:38:60:14:0e:65:
         92:12:78:9e:1e:90:64:79:2d:cf:9c:42:0d:6d:08:1b:3d:68:
         b3:2f:36:2e:b2:12:24:e9:1e:63:9a:42:ee:85:f1:ed:dc:31:
         f9:fb:17:ac:0a:28:a2:a5:8c:08:e8:4b:c6:4f:5a:65:b6:a1:
         44:c2:b1:be:2a:bd:18:de:a8:c9:a5:a7:92:24:08:87:02:73:
         2c:74:c1:2b:23:61:0e:80:0a:29:aa:67:cc:89:82:2d:dc:fd:
         6e:7b:fb:7a:bf:d4:21:46:a9:5b:fc:d0:38:c4:b8:ed:04:f5:
         34:6e:b2:a9:74:58:42:e4:6a:91:48:26:a2:f7:27:b9:30:1c:
         80:21:8f:e6:48:48:f5:08:2a:42:04:48:81:82:43:ac:59:73:
         81:d0:58:dc:83:f6:3f:47:3b:b6:d3:79:3b:46:05:49:fe:80:
         ed:88:94:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org