Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/34352e3137382e3232342e302f32332d3234203d3e20323639303438.roa
File:                     34352e3137382e3232342e302f32332d3234203d3e20323639303438.roa (raw, json)
Hash identifier:          uwKZwIphcgBm2Z25WJmxMSFlKNqdSKeBAb4m1Gg5/QE=
Subject key identifier:   A1:CF:E3:18:CB:FD:E1:9E:01:20:2D:84:DE:5D:FD:26:BB:09:97:13
Certificate issuer:       /CN=0ADB27B7BF0D79A67BC3F83E18ACCBABEE0F573A
Certificate serial:       723AF361801030E21E3B99CC2673BD3D7020D259
Authority key identifier: 0A:DB:27:B7:BF:0D:79:A6:7B:C3:F8:3E:18:AC:CB:AB:EE:0F:57:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADB27B7BF0D79A67BC3F83E18ACCBABEE0F573A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/34352e3137382e3232342e302f32332d3234203d3e20323639303438.roa
Signing time:             Mon 06 May 2024 16:47:21 +0000
ROA not before:           Mon 06 May 2024 16:42:21 +0000
ROA not after:            Mon 05 May 2025 16:47:21 +0000
asID:                     269048
IP address blocks:        45.178.224.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0ADB27B7BF0D79A67BC3F83E18ACCBABEE0F573A.crl
                          rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0ADB27B7BF0D79A67BC3F83E18ACCBABEE0F573A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADB27B7BF0D79A67BC3F83E18ACCBABEE0F573A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3a:f3:61:80:10:30:e2:1e:3b:99:cc:26:73:bd:3d:70:20:d2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADB27B7BF0D79A67BC3F83E18ACCBABEE0F573A
        Validity
            Not Before: May  6 16:42:21 2024 GMT
            Not After : May  5 16:47:21 2025 GMT
        Subject: CN=A1CFE318CBFDE19E01202D84DE5DFD26BB099713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:a9:dd:a2:ad:63:8c:6a:47:5f:a2:e4:bb:
                    98:1d:ef:88:dd:7b:73:de:ee:fd:ef:7a:d1:71:c7:
                    50:ee:7b:3f:af:36:94:0f:1e:d1:c4:80:5f:63:91:
                    8b:91:84:9a:83:24:08:3f:42:40:1b:44:98:8f:00:
                    be:28:eb:10:12:7d:fb:01:37:60:9c:55:d1:00:63:
                    1d:f6:42:1f:18:f4:39:95:77:4b:88:b0:55:eb:7c:
                    00:4f:f0:c0:05:82:05:f4:bc:f9:9b:29:c7:b4:c5:
                    ac:a3:27:b5:aa:80:0a:be:30:dc:6e:12:b9:c4:1d:
                    19:c9:9e:60:30:7c:ff:71:80:f2:9f:bf:22:a2:21:
                    2b:1c:38:9a:cb:5d:ee:84:e5:09:4d:d1:43:06:dc:
                    8d:fd:8d:d8:45:5d:7b:7b:26:9d:73:c5:95:a3:a5:
                    0b:86:6c:72:33:27:b4:c5:60:6b:de:4b:6c:02:1c:
                    27:9b:2e:89:d4:30:73:83:e4:b9:c6:86:f7:8b:f6:
                    27:a3:79:ec:49:50:78:60:3c:c7:4e:85:5e:c4:ff:
                    e0:98:c2:bd:c0:04:29:ad:3b:5a:79:06:f8:df:6f:
                    c1:38:d3:6f:be:3d:a4:86:b7:30:f6:08:aa:19:91:
                    6a:c4:e1:7b:c4:c7:f5:e7:fc:e0:d6:5d:6d:ac:b0:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CF:E3:18:CB:FD:E1:9E:01:20:2D:84:DE:5D:FD:26:BB:09:97:13
            X509v3 Authority Key Identifier:
                keyid:0A:DB:27:B7:BF:0D:79:A6:7B:C3:F8:3E:18:AC:CB:AB:EE:0F:57:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/0ADB27B7BF0D79A67BC3F83E18ACCBABEE0F573A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADB27B7BF0D79A67BC3F83E18ACCBABEE0F573A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/34352e3137382e3232342e302f32332d3234203d3e20323639303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:e8:fe:72:62:b1:61:57:ba:b3:a1:7f:cd:64:08:c0:ac:83:
         52:8d:0c:e8:16:5b:79:7d:e0:1e:e6:db:39:b1:ab:d1:31:62:
         7f:5c:da:1d:d5:bc:cb:62:a4:76:84:85:0e:9f:21:02:7e:e8:
         43:75:03:6b:83:82:20:3c:fc:9b:56:4c:17:fd:77:f7:79:0f:
         09:f3:dd:be:97:62:fe:3f:20:01:00:34:7e:15:01:18:3a:c0:
         a2:95:34:a4:0c:99:b2:f4:23:1c:fc:de:7a:69:c0:ab:0e:15:
         31:1e:1d:7e:52:46:22:ad:3b:64:d6:25:72:c9:29:97:ce:24:
         30:d4:d9:cb:d7:0b:5f:c6:34:59:2f:96:81:50:27:b2:5a:80:
         f8:9d:a3:1b:e7:55:68:93:9d:c2:2b:d5:99:88:c2:d4:aa:ba:
         7d:31:ab:11:5e:b7:b9:08:63:f9:38:c6:54:20:7b:87:c9:d4:
         5e:93:2d:b4:75:35:d2:37:8d:a7:ad:b1:17:b3:48:ef:4f:ab:
         ca:65:5e:2b:a2:15:04:1e:56:d4:f4:48:14:6a:04:f8:e6:1e:
         ca:1a:09:00:b7:68:a0:1c:67:f2:74:ca:87:b7:2c:01:55:b1:
         bd:6a:08:cd:a7:7b:29:26:92:0c:a9:2d:ff:af:2a:97:53:6f:
         69:b2:71:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:52 2024 by rpki-client on console-fra.rpki-client.org