Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230322e302f32332d3233203d3e20323638313732.roa
File:                     34352e3137302e3230322e302f32332d3233203d3e20323638313732.roa (raw, json)
Hash identifier:          FCqT4s4BPvrIGbjfHKU7xxW6KKeewg1YsnrnKzg9pTE=
Subject key identifier:   13:29:98:1D:FC:5E:1F:66:DF:37:4E:F3:11:8B:07:D5:B3:65:24:35
Certificate issuer:       /CN=3D90D603749AF57040F7092DF1F2D266672E47E7
Certificate serial:       5EB8B8EBD745755998E78B653846F7C04DD4A6E2
Authority key identifier: 3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230322e302f32332d3233203d3e20323638313732.roa
Signing time:             Fri 03 May 2024 15:01:36 +0000
ROA not before:           Fri 03 May 2024 14:56:36 +0000
ROA not after:            Fri 02 May 2025 15:01:36 +0000
asID:                     268172
IP address blocks:        45.170.202.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl
                          rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b8:b8:eb:d7:45:75:59:98:e7:8b:65:38:46:f7:c0:4d:d4:a6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D90D603749AF57040F7092DF1F2D266672E47E7
        Validity
            Not Before: May  3 14:56:36 2024 GMT
            Not After : May  2 15:01:36 2025 GMT
        Subject: CN=1329981DFC5E1F66DF374EF3118B07D5B3652435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3e:6d:ca:ba:85:ad:82:33:09:a8:0b:ff:71:
                    24:41:da:51:d5:e9:2c:5c:a7:c2:08:65:4f:cd:f9:
                    a9:c8:c6:47:a8:09:dd:7c:18:51:a5:a5:ac:fe:9f:
                    1a:ed:58:0c:ca:bd:9f:6e:90:e3:56:5c:fd:6d:1a:
                    df:54:dc:76:b7:c7:ab:07:e4:c5:00:86:ca:f2:82:
                    ab:f6:be:c2:bd:9b:b2:21:ce:f8:6b:c8:c5:a3:ff:
                    16:95:5f:0b:0e:9e:2e:da:92:23:99:36:4a:db:2a:
                    ba:c4:6b:39:a9:24:f8:a1:37:06:39:44:b9:cd:17:
                    14:6d:1c:8f:43:e7:e9:ae:c7:e6:d0:f6:e9:df:ae:
                    c6:60:11:29:c4:0a:af:59:43:eb:2b:bf:c6:71:5d:
                    54:a5:7d:1b:a3:35:84:f2:41:37:97:8b:7e:3e:b3:
                    8e:10:7e:e2:79:9d:98:b5:1d:39:24:72:06:aa:6a:
                    66:bc:d0:9b:10:ca:02:59:ff:2e:5c:21:89:50:d5:
                    ed:2e:d2:dc:57:ea:58:69:3a:86:ab:14:72:d5:c6:
                    a5:18:d0:fc:b9:33:d2:9f:db:35:68:3a:f5:4b:2a:
                    bb:78:18:c8:03:5f:49:60:9e:95:0d:c0:7a:94:0a:
                    ba:53:12:85:65:78:84:a5:d1:d2:bf:c6:0c:21:90:
                    bd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:29:98:1D:FC:5E:1F:66:DF:37:4E:F3:11:8B:07:D5:B3:65:24:35
            X509v3 Authority Key Identifier:
                keyid:3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230322e302f32332d3233203d3e20323638313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:b1:fc:3b:e0:3c:65:b2:44:5d:c7:4c:83:bd:46:66:e1:6e:
         52:ba:a4:ad:6a:b2:2f:0d:d9:3c:ec:b2:45:e4:d6:e5:ed:0e:
         f8:a8:0d:05:cc:5a:07:4a:5d:36:79:2e:b5:83:28:f1:d2:c5:
         cb:80:74:82:d7:2f:a0:b2:43:f6:e9:94:42:c2:f2:04:86:35:
         07:31:85:17:6d:21:40:cb:d9:79:90:02:18:21:b4:18:24:a8:
         e1:ed:ea:22:af:39:20:ae:91:43:fc:fd:fd:b8:c9:c7:1d:ba:
         bd:bc:56:c4:d6:39:6a:24:b2:4a:1b:07:6b:a9:2c:1f:68:b5:
         c6:6a:40:fb:02:60:e3:26:01:78:97:9e:5e:f3:de:6f:85:a6:
         02:c6:f0:39:df:95:bf:cc:8b:7e:4f:7a:73:8a:50:4f:d0:dd:
         e8:5b:29:58:ff:9d:2b:6c:ec:46:9d:25:35:60:6f:73:da:43:
         e4:c8:87:f6:ff:b0:17:18:9a:a4:79:e3:4c:71:a6:9b:c3:f1:
         33:62:bb:93:ad:5a:2e:f6:fe:b9:b7:2c:77:b4:3f:7a:31:d8:
         d7:6e:a8:d5:a0:12:da:f5:22:85:47:06:0f:06:59:ce:83:71:
         4b:12:31:4c:c4:5b:36:70:ed:31:98:c3:db:93:8d:07:58:dd:
         13:a8:29:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:21 2024 by rpki-client on console-fra.rpki-client.org