Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/34352e3233342e3134382e302f32322d3234203d3e20323637333637.roa
File:                     34352e3233342e3134382e302f32322d3234203d3e20323637333637.roa (raw, json)
Hash identifier:          PUwZYCuQ6j51F9GzXa9qsRIhBts7PE4PbpvBOXbwEDQ=
Subject key identifier:   8E:7C:2B:0B:B5:C5:33:89:08:A8:7D:76:33:C4:64:EE:AE:21:F0:AA
Certificate issuer:       /CN=7FB3814CCA1CED6546BF9C29096693EF4970D786
Certificate serial:       65656A377C3940BEB2F17EB444262BE3790246CB
Authority key identifier: 7F:B3:81:4C:CA:1C:ED:65:46:BF:9C:29:09:66:93:EF:49:70:D7:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FB3814CCA1CED6546BF9C29096693EF4970D786.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/34352e3233342e3134382e302f32322d3234203d3e20323637333637.roa
Signing time:             Mon 05 Aug 2024 20:16:31 +0000
ROA not before:           Mon 05 Aug 2024 20:11:31 +0000
ROA not after:            Mon 04 Aug 2025 20:16:31 +0000
asID:                     267367
IP address blocks:        45.234.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/7FB3814CCA1CED6546BF9C29096693EF4970D786.crl
                          rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/7FB3814CCA1CED6546BF9C29096693EF4970D786.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FB3814CCA1CED6546BF9C29096693EF4970D786.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:65:6a:37:7c:39:40:be:b2:f1:7e:b4:44:26:2b:e3:79:02:46:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FB3814CCA1CED6546BF9C29096693EF4970D786
        Validity
            Not Before: Aug  5 20:11:31 2024 GMT
            Not After : Aug  4 20:16:31 2025 GMT
        Subject: CN=8E7C2B0BB5C5338908A87D7633C464EEAE21F0AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:07:4f:a9:a8:d3:bf:cf:9c:d7:fd:fe:2d:fc:
                    e6:e9:f6:28:d5:f0:ed:ab:f2:ca:62:be:81:33:c0:
                    64:f4:7c:2c:c1:a2:88:9f:8a:14:19:2b:1c:86:61:
                    81:f2:10:91:90:ff:b3:56:5b:64:89:24:f0:c3:37:
                    25:92:ee:93:07:2d:c0:70:4d:43:93:9b:72:6e:c0:
                    d3:73:f1:2a:be:34:fe:fc:c6:34:57:94:91:83:89:
                    93:93:1a:a3:30:0f:cd:8e:c8:c8:ab:18:d0:7d:a7:
                    a9:f3:69:f2:a6:d1:fc:7e:83:ae:80:fb:b8:a8:89:
                    87:e2:e9:56:09:5d:19:29:3d:d2:84:d3:ae:4e:20:
                    5e:b3:60:7e:24:15:ab:a7:ee:b8:25:13:fc:c0:c2:
                    5d:78:00:9e:0b:2b:15:35:1e:22:5e:f1:00:af:a6:
                    f6:44:e4:0d:e7:19:81:cf:83:cd:f2:4b:81:fe:dd:
                    a1:16:c2:a6:fb:dc:04:10:1c:0c:1a:a5:dc:a0:32:
                    46:6a:f5:c2:1f:0e:01:a9:3d:5e:bc:2b:32:87:24:
                    da:a5:63:e7:cd:78:5a:a7:e3:99:23:88:31:c1:b3:
                    e2:98:fa:c0:9c:20:4e:68:c0:72:66:4a:f2:e0:1f:
                    2a:57:e1:c0:e5:03:7a:79:74:51:0b:f9:22:e5:15:
                    a6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7C:2B:0B:B5:C5:33:89:08:A8:7D:76:33:C4:64:EE:AE:21:F0:AA
            X509v3 Authority Key Identifier:
                keyid:7F:B3:81:4C:CA:1C:ED:65:46:BF:9C:29:09:66:93:EF:49:70:D7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/7FB3814CCA1CED6546BF9C29096693EF4970D786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FB3814CCA1CED6546BF9C29096693EF4970D786.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/34352e3233342e3134382e302f32322d3234203d3e20323637333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:86:cc:51:c0:59:51:fb:d5:11:8a:9e:73:eb:a4:6d:85:58:
         bb:9f:fc:c0:33:01:40:57:82:f3:12:b0:5b:a8:5e:e7:82:1a:
         4d:e1:62:df:50:61:7f:7c:c1:26:8b:29:3f:55:f6:21:06:2e:
         94:49:51:3e:9f:32:30:ea:9e:b5:0e:aa:d0:79:b6:9a:53:69:
         95:b3:76:1b:c8:e0:3b:5b:a2:b9:1d:d4:54:3e:24:35:bb:fd:
         33:78:77:d4:c6:8d:a9:e5:7f:1d:06:65:a3:45:33:4a:d3:81:
         46:a7:5c:24:10:de:77:0a:01:45:96:af:f2:1c:e8:2f:a5:51:
         d3:70:61:84:3e:1c:3f:39:7d:66:34:c1:14:ff:9d:3e:73:98:
         56:16:73:57:26:38:0d:d9:46:e5:e0:28:d3:b6:4a:09:0a:b2:
         cd:ca:16:3d:ac:7a:ee:ff:bc:4c:fd:6f:22:23:f7:4e:60:52:
         52:1e:0e:c1:b5:4f:4e:4d:24:56:5f:7a:dc:c5:c8:5f:f6:01:
         4b:2c:72:d3:b5:21:b8:57:fa:04:87:f2:a4:73:6e:19:63:33:
         22:e4:8d:50:40:34:00:ac:f4:64:49:d3:e4:8e:de:05:59:f9:
         bb:86:b1:a4:d4:67:f4:77:6b:91:e9:4c:3f:7f:d9:25:62:7c:
         88:e4:81:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:53 2024 by rpki-client on console-fra.rpki-client.org