Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230302e302f32342d3234203d3e20323638313738.roa
File:                     34352e3137302e3230302e302f32342d3234203d3e20323638313738.roa (raw, json)
Hash identifier:          NcwVvwc6hJZthENBja7ifh3CJxFVSNtMaSsU6a/7e64=
Subject key identifier:   E2:70:1A:6E:D2:01:6E:3E:DC:2C:78:06:2B:E8:C8:72:00:41:96:A3
Certificate issuer:       /CN=3D90D603749AF57040F7092DF1F2D266672E47E7
Certificate serial:       792325B243D279F46B65D6CDF0049D673FD52B76
Authority key identifier: 3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230302e302f32342d3234203d3e20323638313738.roa
Signing time:             Thu 09 May 2024 02:11:34 +0000
ROA not before:           Thu 09 May 2024 02:06:34 +0000
ROA not after:            Thu 08 May 2025 02:11:34 +0000
asID:                     268178
IP address blocks:        45.170.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl
                          rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:23:25:b2:43:d2:79:f4:6b:65:d6:cd:f0:04:9d:67:3f:d5:2b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D90D603749AF57040F7092DF1F2D266672E47E7
        Validity
            Not Before: May  9 02:06:34 2024 GMT
            Not After : May  8 02:11:34 2025 GMT
        Subject: CN=E2701A6ED2016E3EDC2C78062BE8C872004196A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:11:65:9d:38:9f:27:bb:e8:1e:23:d2:57:
                    5d:a7:36:4d:50:3c:5f:73:34:90:00:a8:11:16:a7:
                    1a:55:f6:ca:1e:c5:eb:ce:91:f5:69:56:64:94:04:
                    1c:49:43:32:96:88:3d:4f:e7:e5:c9:90:40:ac:2b:
                    7c:84:8d:10:36:f3:a0:ad:7a:bb:5b:cf:81:95:e6:
                    49:4a:be:f3:9a:3f:6e:de:0e:ab:93:9c:76:d3:4f:
                    b4:d8:1d:81:b1:89:94:1f:c0:9a:c1:e3:45:44:af:
                    da:1f:e9:10:52:97:10:62:ed:d9:b9:4b:2d:b1:04:
                    44:8a:d7:8c:13:d8:8d:21:1b:19:06:21:2a:44:f1:
                    38:bc:2f:f5:cb:fb:8a:da:62:f1:3d:73:0d:43:26:
                    64:2a:1d:d7:18:48:04:6a:d8:af:a6:ce:48:d5:b0:
                    2a:a1:21:a5:7e:64:d1:85:ea:9d:6f:ea:32:18:ed:
                    5f:bc:1b:57:29:10:f7:5d:b8:bc:74:90:34:a7:88:
                    01:7f:8c:89:e4:78:bd:be:12:c0:ed:88:b2:50:21:
                    5b:33:a6:74:f3:e4:b5:85:80:d4:59:18:c5:87:97:
                    06:fb:c1:a0:08:86:2a:b5:ef:1e:40:5a:d2:99:04:
                    aa:39:f5:fc:84:46:cc:f0:55:fc:8b:ed:f2:be:3c:
                    47:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:70:1A:6E:D2:01:6E:3E:DC:2C:78:06:2B:E8:C8:72:00:41:96:A3
            X509v3 Authority Key Identifier:
                keyid:3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230302e302f32342d3234203d3e20323638313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:9a:f5:4e:7a:42:16:ab:47:16:d3:0a:77:75:80:92:9c:27:
         7b:05:8f:71:6d:f6:e9:1a:4b:c3:5d:59:6c:04:41:c8:e6:59:
         57:f1:b4:7a:b0:34:d0:19:27:de:02:61:80:56:37:c0:1e:a6:
         3c:5a:66:ce:ea:07:48:5d:3e:f0:71:b0:c8:ab:a6:ec:be:19:
         f4:22:ff:5c:b4:25:98:a5:8b:a9:0c:66:43:23:62:b5:f1:49:
         be:46:10:04:42:95:94:d3:f1:bc:03:61:f8:c6:39:0a:d1:9d:
         39:71:fc:43:0d:e3:42:18:f1:8d:1f:c1:a5:99:6f:3c:83:8f:
         c4:82:9b:3b:64:1c:0b:3a:de:7f:a2:48:7c:9f:01:85:28:6c:
         fe:37:6d:f9:e0:bb:f9:a6:35:6c:f8:8b:2b:2e:d3:c0:bd:2b:
         b5:22:04:b4:3e:fb:9c:1c:7c:46:6c:d6:76:73:1c:91:7f:8a:
         1b:d8:73:e2:26:45:35:26:36:01:46:72:c4:30:5f:7f:0b:09:
         fe:7e:75:d9:57:74:24:25:ba:1f:50:b9:df:70:a6:0c:30:6b:
         a4:b0:21:fd:9c:2d:c8:5d:ef:8e:71:99:10:4f:d7:6e:ab:63:
         20:d3:0c:85:6f:4a:58:8d:6a:7d:27:b1:11:97:3b:f3:5b:5c:
         fb:5f:73:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:21 2024 by rpki-client on console-fra.rpki-client.org