Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33382e302f32332d3233203d3e20323638363232.roa
File:                     34352e3136342e33382e302f32332d3233203d3e20323638363232.roa (raw, json)
Hash identifier:          vHmiOp31kKrjopzncn/UdS7u6144NDViEYV5pH6JzcQ=
Subject key identifier:   0A:CF:0B:95:E9:83:56:99:DF:C8:51:5B:3B:4A:33:9E:87:57:D7:93
Certificate issuer:       /CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4
Certificate serial:       7CC592D00B264D841767EC6E4F2388A7841A0FED
Authority key identifier: 0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33382e302f32332d3233203d3e20323638363232.roa
Signing time:             Mon 04 Nov 2024 18:38:35 +0000
ROA not before:           Mon 04 Nov 2024 18:33:35 +0000
ROA not after:            Mon 03 Nov 2025 18:38:35 +0000
asID:                     268622
IP address blocks:        45.164.38.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl
                          rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c5:92:d0:0b:26:4d:84:17:67:ec:6e:4f:23:88:a7:84:1a:0f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4
        Validity
            Not Before: Nov  4 18:33:35 2024 GMT
            Not After : Nov  3 18:38:35 2025 GMT
        Subject: CN=0ACF0B95E9835699DFC8515B3B4A339E8757D793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:06:d3:a2:32:45:7b:77:13:8c:12:3e:2a:
                    fe:5e:10:0b:91:6c:2e:7f:85:d0:e7:f9:d9:b2:79:
                    37:75:e4:f6:ba:8e:92:ea:c1:72:df:52:18:91:27:
                    2a:f9:b1:dd:3f:77:88:de:de:1a:5d:2d:0a:50:79:
                    96:ac:27:f6:4a:9c:58:c4:6b:73:77:34:8a:09:f1:
                    2f:56:7d:16:db:5e:4a:ab:d8:f8:24:da:b2:80:d7:
                    7a:fd:dd:42:1f:c4:45:d3:99:19:40:34:66:1a:5b:
                    2d:04:31:77:68:4b:cd:63:14:22:50:f8:8e:0f:41:
                    33:af:cd:00:5f:e4:4b:89:07:2d:a6:01:73:22:1f:
                    a2:31:11:b6:eb:65:6d:4e:73:e2:92:9e:91:1d:d7:
                    7f:72:b8:da:67:42:b4:b6:c9:cf:1c:c4:70:7c:27:
                    07:f7:69:f6:30:94:4a:5d:0b:8d:71:c1:2c:e6:49:
                    47:b9:2a:8b:c2:63:8a:cc:53:8b:9c:62:56:2a:d3:
                    a5:61:e6:72:bd:9f:7f:9e:b4:d4:6d:df:81:06:09:
                    23:3b:82:d6:ad:0c:31:78:c6:35:71:c1:c9:db:08:
                    75:d4:c6:31:5d:1e:ae:06:52:56:39:b0:87:43:b0:
                    79:b4:ad:28:5b:e3:75:d9:05:03:b5:28:89:2b:33:
                    42:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CF:0B:95:E9:83:56:99:DF:C8:51:5B:3B:4A:33:9E:87:57:D7:93
            X509v3 Authority Key Identifier:
                keyid:0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33382e302f32332d3233203d3e20323638363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:bb:f5:a3:8a:22:48:35:99:58:74:28:1c:ba:71:f5:fb:36:
         71:54:63:6a:f8:ce:47:27:a4:32:f4:38:0f:e1:78:fc:a5:d1:
         44:42:94:29:6b:7e:1f:ee:39:15:c1:48:42:46:0b:e0:bd:8e:
         6b:27:03:db:87:e7:1b:35:21:9b:e0:56:1e:96:cb:16:71:8f:
         20:ce:78:77:fc:48:fb:f3:d9:7b:d0:3f:5c:84:c4:6d:fc:84:
         4a:2f:c3:2e:9b:3e:cd:ad:d8:6a:1c:c1:bb:cc:54:40:02:ef:
         e4:e2:f0:d5:3b:5d:45:e5:83:8f:02:1e:15:64:8c:3e:a3:27:
         64:fb:84:0a:e5:a9:b7:bb:2b:6f:5d:2b:68:67:13:ab:89:8f:
         b7:a1:fa:65:cf:73:1f:a5:c8:41:70:5c:25:a4:64:c2:22:2f:
         3d:9d:05:1a:9a:c9:e1:37:f9:3f:7f:b8:cd:bc:f3:24:63:51:
         46:b8:8a:ef:32:61:8a:e9:b1:3e:ba:22:10:9d:d7:6e:75:96:
         4d:29:33:56:e3:fa:43:74:a7:a7:6b:f4:ef:07:bb:10:7b:14:
         6a:ef:97:8c:65:3e:10:6a:10:54:59:a2:5b:2c:94:b2:01:8e:
         9a:be:4d:30:31:00:63:1d:11:13:b6:46:69:0c:5d:95:05:ae:
         c3:a0:5d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:04 2024 by rpki-client on console-fra.rpki-client.org