Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134312e302f32342d3234203d3e20323639343637.roa
File:                     34352e3138372e3134312e302f32342d3234203d3e20323639343637.roa (raw, json)
Hash identifier:          80iIf4nu3FBOUaEDHEdNeKHWltRz7iiT7cfsrsp2MFo=
Subject key identifier:   3C:7E:F8:AA:A4:26:EE:63:FE:10:78:6E:67:5A:99:F9:E7:12:F0:C0
Certificate issuer:       /CN=04AD1F05D68B9B203EF5342540FC9B754E8F2B50
Certificate serial:       303976A0AE416717E4F6576DB28AA587A1A2C287
Authority key identifier: 04:AD:1F:05:D6:8B:9B:20:3E:F5:34:25:40:FC:9B:75:4E:8F:2B:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134312e302f32342d3234203d3e20323639343637.roa
Signing time:             Fri 19 Jul 2024 13:17:43 +0000
ROA not before:           Fri 19 Jul 2024 13:12:43 +0000
ROA not after:            Fri 18 Jul 2025 13:17:43 +0000
asID:                     269467
IP address blocks:        45.187.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.crl
                          rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:39:76:a0:ae:41:67:17:e4:f6:57:6d:b2:8a:a5:87:a1:a2:c2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04AD1F05D68B9B203EF5342540FC9B754E8F2B50
        Validity
            Not Before: Jul 19 13:12:43 2024 GMT
            Not After : Jul 18 13:17:43 2025 GMT
        Subject: CN=3C7EF8AAA426EE63FE10786E675A99F9E712F0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:44:5a:10:25:36:c7:be:c8:29:30:ed:c2:
                    2a:3a:79:6c:ca:58:39:a1:a6:41:0d:ac:8d:1a:f6:
                    2a:f5:19:60:92:20:c8:3f:9e:56:a2:40:9e:d5:85:
                    dc:8a:c0:a6:c5:b5:ed:d6:24:ca:b7:e0:15:20:ec:
                    8f:6b:69:e9:5b:1e:e4:60:68:95:11:f9:3b:c0:5c:
                    89:a5:e1:4c:a3:4f:ef:3c:56:95:af:2e:11:5b:b3:
                    25:87:fa:e6:77:13:99:cd:14:76:c0:4d:15:79:1c:
                    3a:9b:dc:a8:95:da:cc:38:2c:85:e8:e9:d6:6e:c2:
                    84:7f:b3:25:2a:19:1c:e4:59:3c:89:5f:54:56:75:
                    dc:ff:8d:a1:1c:48:35:1a:35:98:9e:cf:78:e4:9d:
                    77:a7:49:1b:fc:09:e3:c5:8f:4c:71:b6:ea:f3:de:
                    0d:ed:81:4b:29:2b:18:74:db:d2:84:f2:fd:1e:ab:
                    98:e2:ce:88:79:34:46:04:65:4d:bd:47:6d:3e:32:
                    d6:e6:27:7d:4a:b3:25:ca:f3:60:39:c0:df:ac:3f:
                    03:ef:89:7b:c6:47:a6:8e:9a:42:28:eb:f5:88:96:
                    2a:ea:8c:b4:b6:29:09:b7:85:f4:e0:8a:52:aa:9f:
                    20:d8:1f:05:9a:ea:5a:c8:2b:38:a1:83:ae:e9:af:
                    7c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7E:F8:AA:A4:26:EE:63:FE:10:78:6E:67:5A:99:F9:E7:12:F0:C0
            X509v3 Authority Key Identifier:
                keyid:04:AD:1F:05:D6:8B:9B:20:3E:F5:34:25:40:FC:9B:75:4E:8F:2B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134312e302f32342d3234203d3e20323639343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:c4:b8:fc:a1:fc:01:31:5d:bb:47:70:b0:ec:3a:38:48:b8:
         98:20:ac:0c:6b:c6:35:0b:24:94:c3:cd:01:23:41:b0:96:e2:
         0d:6d:c0:45:bf:d3:0b:97:c6:35:fd:23:6b:64:0c:5c:f6:33:
         ad:16:ce:1d:0b:e0:02:a0:07:db:16:50:8a:39:94:bb:21:c0:
         61:c2:56:83:52:a3:17:26:5a:89:3d:f7:f7:07:96:58:1c:ff:
         86:ef:2d:72:89:cd:27:01:82:f0:5f:a4:ff:d7:7b:55:bb:27:
         2e:f6:fe:a4:27:6d:ff:28:45:1e:f6:ee:fa:71:35:a6:b7:b0:
         7c:97:0d:ad:92:69:d3:df:ea:1c:8b:f7:32:38:62:96:cd:d1:
         e7:44:ac:64:5a:ae:7e:35:5b:c2:da:2f:1c:67:57:f6:62:15:
         66:5c:4c:cb:0a:a1:e8:31:68:43:30:b3:44:52:2d:b4:54:e8:
         47:be:9a:e4:76:73:05:81:07:c1:4e:19:6f:0a:e3:5f:b8:1a:
         c7:76:ff:ac:d6:c3:19:9e:bf:87:e2:0e:4a:86:89:44:b9:f0:
         ec:f3:61:75:62:3e:a7:0f:71:38:dc:de:f3:b9:4d:25:96:94:
         e2:de:29:66:0a:c2:c0:3d:3a:68:a4:20:be:72:ad:8d:59:bb:
         ad:1c:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:30 2024 by rpki-client on console-ams.rpki-client.org