Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/34352e352e3130302e302f32342d3234203d3e20323636303935.roa
File:                     34352e352e3130302e302f32342d3234203d3e20323636303935.roa (raw, json)
Hash identifier:          /iHIme05+3rsikWWYNDmmLcTh+JnSjK3ueH3JDQn4bc=
Subject key identifier:   79:46:C4:98:0A:42:22:E9:C9:90:04:DA:2A:D8:94:5D:2F:92:62:61
Certificate issuer:       /CN=A725A180F84B5FBF01391DA6B3583F4846E072FF
Certificate serial:       6D5FC1DF3C6799EED78B5AD72EEBA1FD8D7B9E00
Authority key identifier: A7:25:A1:80:F8:4B:5F:BF:01:39:1D:A6:B3:58:3F:48:46:E0:72:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A725A180F84B5FBF01391DA6B3583F4846E072FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/34352e352e3130302e302f32342d3234203d3e20323636303935.roa
Signing time:             Wed 03 Apr 2024 20:43:49 +0000
ROA not before:           Wed 03 Apr 2024 20:38:49 +0000
ROA not after:            Wed 02 Apr 2025 20:43:49 +0000
asID:                     266095
IP address blocks:        45.5.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/A725A180F84B5FBF01391DA6B3583F4846E072FF.crl
                          rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/A725A180F84B5FBF01391DA6B3583F4846E072FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A725A180F84B5FBF01391DA6B3583F4846E072FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5f:c1:df:3c:67:99:ee:d7:8b:5a:d7:2e:eb:a1:fd:8d:7b:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A725A180F84B5FBF01391DA6B3583F4846E072FF
        Validity
            Not Before: Apr  3 20:38:49 2024 GMT
            Not After : Apr  2 20:43:49 2025 GMT
        Subject: CN=7946C4980A4222E9C99004DA2AD8945D2F926261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:e7:ed:26:c9:21:44:2e:8b:a4:c6:9e:8d:
                    ea:7b:f5:10:99:65:82:b5:0e:3b:fa:fd:9c:c1:8b:
                    16:99:3f:a1:74:e3:81:d1:0b:1d:4f:51:8f:ff:c2:
                    e4:1b:34:8a:57:c4:15:17:dd:b5:7b:5b:ad:2b:90:
                    ab:e0:b6:66:0f:55:83:40:f2:36:cd:7a:55:37:56:
                    e5:a7:45:e5:a6:1b:27:f0:39:7f:9b:67:ac:32:49:
                    c4:28:3e:a5:66:cc:89:5e:f0:94:a5:0d:ee:4b:34:
                    7b:f3:90:37:32:db:36:d7:01:cc:70:71:97:0d:26:
                    c3:6e:40:01:64:8c:3c:17:db:ff:19:b0:51:db:15:
                    38:45:90:43:1b:09:9a:67:e3:30:99:5a:e8:9d:de:
                    32:88:f4:03:25:1a:31:67:31:60:17:ac:d9:34:e5:
                    08:83:07:c6:df:da:d7:cf:57:06:d5:7e:d1:db:3c:
                    55:f9:9c:68:f8:6a:44:15:1f:06:7c:ea:ee:e6:7b:
                    8c:66:97:0b:ca:81:c0:df:4a:79:31:41:aa:8e:47:
                    41:f0:1f:e9:e7:5b:82:7e:83:30:44:52:d7:00:21:
                    35:34:1d:7d:2a:20:a7:41:6e:86:a7:73:cb:b2:e3:
                    ef:3f:17:7e:47:d1:34:d2:b8:87:ba:d8:84:33:94:
                    db:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:46:C4:98:0A:42:22:E9:C9:90:04:DA:2A:D8:94:5D:2F:92:62:61
            X509v3 Authority Key Identifier:
                keyid:A7:25:A1:80:F8:4B:5F:BF:01:39:1D:A6:B3:58:3F:48:46:E0:72:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/A725A180F84B5FBF01391DA6B3583F4846E072FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A725A180F84B5FBF01391DA6B3583F4846E072FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/1/34352e352e3130302e302f32342d3234203d3e20323636303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:9b:97:03:13:35:83:8a:7a:73:03:68:82:ca:92:74:39:2e:
         32:4a:3a:3f:43:c2:77:0d:35:0c:a5:1d:58:85:8f:33:46:02:
         06:00:f6:bc:17:c4:fa:96:d0:dc:9c:67:84:d2:be:29:ac:7b:
         19:65:8c:12:d3:79:8b:29:ad:09:61:a6:73:2d:44:da:63:8f:
         27:43:0d:f9:ba:62:d1:6e:8e:cf:4a:ca:9d:86:41:8f:d6:12:
         c9:c7:53:fe:88:26:02:68:9d:08:2a:52:c8:32:c3:70:b0:61:
         7c:9c:96:22:c7:82:03:df:e2:8c:92:a8:d7:23:9a:17:e1:6e:
         a7:d1:3c:7e:1a:dc:d0:51:98:fe:26:db:c9:54:4e:c0:3e:1c:
         dc:4f:50:4c:49:3a:90:7d:e0:d5:e9:43:23:07:ce:10:46:09:
         78:d5:43:39:af:e7:89:ae:a1:80:23:17:6b:3b:e5:56:79:bd:
         97:2b:16:57:73:c6:7c:d3:c0:1c:fe:3f:2f:ca:ae:40:ce:42:
         4a:1c:a7:82:0f:30:8c:6b:d9:d4:9e:c6:1f:7a:c2:49:d7:b5:
         8b:8b:4a:df:52:af:91:7e:b3:e7:28:78:f0:f6:e7:8b:17:46:
         9e:39:db:16:fa:91:44:f4:28:f4:2e:20:34:e2:72:89:ea:f0:
         78:4e:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:59 2024 by rpki-client on console-ams.rpki-client.org