Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134322e302f32342d3234203d3e20323639343637.roa
File:                     34352e3138372e3134322e302f32342d3234203d3e20323639343637.roa (raw, json)
Hash identifier:          hKLG3KIUj0/Xlv5UKepJfafi8Ej2cfgwx7NaqGkRKkM=
Subject key identifier:   50:1A:1C:62:0E:FF:70:AB:87:0A:1C:80:0C:51:AB:C4:5D:7A:9B:C2
Certificate issuer:       /CN=04AD1F05D68B9B203EF5342540FC9B754E8F2B50
Certificate serial:       695327D2AD5A9A9C1ADA63F0777F059F6006D5B1
Authority key identifier: 04:AD:1F:05:D6:8B:9B:20:3E:F5:34:25:40:FC:9B:75:4E:8F:2B:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134322e302f32342d3234203d3e20323639343637.roa
Signing time:             Mon 28 Oct 2024 12:15:32 +0000
ROA not before:           Mon 28 Oct 2024 12:10:32 +0000
ROA not after:            Mon 27 Oct 2025 12:15:32 +0000
asID:                     269467
IP address blocks:        45.187.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.crl
                          rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:53:27:d2:ad:5a:9a:9c:1a:da:63:f0:77:7f:05:9f:60:06:d5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04AD1F05D68B9B203EF5342540FC9B754E8F2B50
        Validity
            Not Before: Oct 28 12:10:32 2024 GMT
            Not After : Oct 27 12:15:32 2025 GMT
        Subject: CN=501A1C620EFF70AB870A1C800C51ABC45D7A9BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:17:3b:50:ab:0f:2c:0c:40:71:11:8a:70:
                    6b:61:61:b9:69:15:b2:8b:2e:63:4a:b3:39:8d:f6:
                    c9:0a:43:32:0d:f6:2d:4f:5f:20:1e:57:67:dd:aa:
                    00:3d:79:16:91:60:c2:20:82:f6:5c:b4:b2:39:37:
                    dc:21:8d:5f:19:47:8d:37:c3:bf:ef:5d:bf:08:76:
                    7b:76:a1:02:a8:bf:29:c5:75:5a:2f:a2:2a:6b:f2:
                    8f:d8:67:f0:c9:81:d9:a0:ea:45:37:f5:28:d3:45:
                    c1:d6:a0:90:ab:4e:44:bf:e6:fb:ab:16:77:d0:27:
                    46:8f:e3:47:4d:26:61:7c:af:1a:84:3d:01:04:60:
                    18:fc:d9:a1:fb:e4:8a:78:19:c8:03:00:96:65:48:
                    5d:61:ab:a8:48:1d:38:2d:17:71:23:5d:d0:f8:4c:
                    79:54:4a:eb:36:f1:83:9f:e9:2c:e4:de:26:b7:ea:
                    50:21:d2:ac:38:97:f7:52:d8:81:35:03:b9:64:24:
                    74:66:43:e0:70:d5:6f:6d:ac:f6:aa:f0:fd:7e:10:
                    93:ff:6c:21:16:5f:3d:17:bd:2c:1b:10:8b:63:b6:
                    5e:bc:7a:53:ce:99:b4:38:4f:b6:a2:c4:41:0e:a4:
                    3b:5c:aa:00:d5:5f:65:92:6f:7f:2d:83:83:c1:e2:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1A:1C:62:0E:FF:70:AB:87:0A:1C:80:0C:51:AB:C4:5D:7A:9B:C2
            X509v3 Authority Key Identifier:
                keyid:04:AD:1F:05:D6:8B:9B:20:3E:F5:34:25:40:FC:9B:75:4E:8F:2B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134322e302f32342d3234203d3e20323639343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:31:8c:06:96:4a:27:51:95:41:7e:93:46:22:7d:ab:5c:02:
         0b:8a:38:df:55:0c:53:bb:7e:8d:65:2d:62:e3:7e:19:58:72:
         5d:25:52:74:74:9a:d7:51:dc:39:ff:f7:7e:9a:6b:ac:83:6b:
         0a:c6:a6:27:e3:da:40:c3:18:0a:33:aa:56:5d:8d:63:2f:d6:
         d0:4a:dd:01:cb:1d:2c:ce:9f:a7:74:ad:18:eb:eb:54:69:b0:
         36:dc:32:c9:bb:31:25:ad:dd:d2:be:b7:92:22:e5:41:55:56:
         6e:e7:48:fb:65:94:1b:71:26:df:23:c8:1c:97:1a:c1:bc:8b:
         6e:72:d8:0f:ea:b2:f5:8c:44:c3:7d:04:d6:90:22:4b:27:f3:
         8e:46:1e:f8:1d:7e:eb:a4:07:b1:63:51:46:09:32:a8:50:81:
         57:5b:ef:22:7e:5f:ef:df:89:89:59:78:35:26:85:41:ea:54:
         b7:d7:5d:30:44:2e:5e:fa:f6:88:5f:fb:72:b6:c6:91:b3:12:
         fc:37:25:44:c5:35:f4:6c:f8:32:eb:b3:db:8b:c7:87:ac:7b:
         b0:46:02:05:66:53:65:14:56:f2:f1:64:0a:7e:bf:87:f6:2e:
         38:42:b0:cb:b1:79:f6:68:52:c5:5e:db:0c:ca:da:0a:ef:d8:
         57:55:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:39 2024 by rpki-client on console-fra.rpki-client.org