Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33382e302f32342d3234203d3e20323638363232.roa
File:                     34352e3136342e33382e302f32342d3234203d3e20323638363232.roa (raw, json)
Hash identifier:          YcPJIHr0/HgrCMBYkb7jFYLZpMomAsNwkOUcmdy4vzs=
Subject key identifier:   82:62:6D:59:73:F7:80:3F:B7:D5:7B:EF:E8:61:D2:8D:17:55:4C:DD
Certificate issuer:       /CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4
Certificate serial:       1D567B8778D9676E3A0C4039F434AF6E80FDB320
Authority key identifier: 0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33382e302f32342d3234203d3e20323638363232.roa
Signing time:             Mon 04 Nov 2024 18:38:37 +0000
ROA not before:           Mon 04 Nov 2024 18:33:37 +0000
ROA not after:            Mon 03 Nov 2025 18:38:37 +0000
asID:                     268622
IP address blocks:        45.164.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl
                          rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:56:7b:87:78:d9:67:6e:3a:0c:40:39:f4:34:af:6e:80:fd:b3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4
        Validity
            Not Before: Nov  4 18:33:37 2024 GMT
            Not After : Nov  3 18:38:37 2025 GMT
        Subject: CN=82626D5973F7803FB7D57BEFE861D28D17554CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:9a:9f:e9:2c:c5:f5:cd:de:30:5d:2c:f6:
                    0b:02:69:2e:e3:8e:bd:34:98:ab:04:71:ed:74:28:
                    c9:ec:24:6b:dc:b7:32:58:c9:91:82:d9:f2:a7:c1:
                    63:fa:c9:c1:ee:52:3c:db:09:16:ef:7a:bf:1c:34:
                    5e:c3:9d:d0:c4:6a:75:e0:55:f5:40:c2:c1:1d:36:
                    c4:68:65:c5:03:b7:c1:0f:92:ce:87:04:8e:07:78:
                    33:c3:f1:0b:c4:53:79:83:e4:76:b9:68:ff:0f:19:
                    7e:ef:3a:a8:22:c2:1f:15:2b:a1:b4:de:88:2e:3e:
                    1a:cc:19:a3:c2:e9:2c:69:d7:0b:5c:a0:a2:f4:b4:
                    08:97:c2:11:39:a9:17:72:07:32:03:55:6b:33:c0:
                    5e:d8:c9:59:be:f8:72:a7:84:97:0b:99:f7:10:ee:
                    45:d1:44:85:e3:05:fb:00:2e:01:d9:83:cf:a1:13:
                    ca:1a:1f:86:a1:de:97:6c:5e:ed:2c:6e:7f:2c:54:
                    a9:39:8f:62:30:59:1b:23:4f:f2:3a:73:16:2b:3b:
                    fb:0e:3a:89:7b:36:43:c6:7d:39:a5:21:bf:b9:c3:
                    5c:29:26:d1:c7:02:18:d4:44:05:74:f6:af:e8:72:
                    ad:21:a3:15:43:95:6e:f9:90:45:b1:7a:b7:0e:6c:
                    35:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:62:6D:59:73:F7:80:3F:B7:D5:7B:EF:E8:61:D2:8D:17:55:4C:DD
            X509v3 Authority Key Identifier:
                keyid:0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33382e302f32342d3234203d3e20323638363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:96:dc:36:85:23:38:0d:87:0b:71:be:2a:f5:59:ae:2f:81:
         0c:6c:e4:bd:56:bc:52:e5:bb:bf:0e:25:df:de:8b:52:a6:8a:
         c4:c8:c8:af:b3:dd:31:a1:05:2e:4c:34:90:e5:cf:d1:ac:f2:
         b4:4a:1f:4c:9c:f1:d1:a8:02:8b:fa:33:53:c2:fc:2e:b0:bb:
         14:89:97:a0:7f:ed:5d:f0:07:fb:64:e6:ec:29:ab:85:cf:41:
         f7:f3:5c:f9:c4:e4:28:d1:e7:ec:f3:78:53:db:7b:88:8d:48:
         a1:b6:d3:e1:86:3e:92:fb:24:8b:73:a9:2f:3a:94:92:24:d8:
         a3:09:ba:a7:a8:66:5d:78:4f:bf:a1:a1:08:e3:b1:75:e1:8f:
         92:01:09:ab:72:d3:f2:d0:db:47:0e:3a:9c:1d:08:e3:2c:53:
         af:67:8a:fa:89:fa:7b:b2:e3:23:9a:6b:57:bb:14:b8:2a:d6:
         ba:34:74:f7:eb:99:62:9c:21:8d:c8:d7:a0:15:c0:08:56:bf:
         f6:60:c1:10:94:4d:a7:98:91:13:42:45:9d:3c:93:25:2b:5b:
         20:a9:c3:67:c5:c6:f5:7e:8c:bf:2d:f8:65:28:da:68:3c:36:
         d7:b2:e0:e5:35:26:e8:bc:17:a0:88:eb:08:99:0e:cc:87:8a:
         3c:c4:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:04 2024 by rpki-client on console-fra.rpki-client.org