Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3137342e3230382e302f32322d3232203d3e20323637333838.roa
File:                     34352e3137342e3230382e302f32322d3232203d3e20323637333838.roa (raw, json)
Hash identifier:          W8sdKnrTzYS0PfG3Ax7IttBAtZFBDXblt9q7Qtj8DRE=
Subject key identifier:   9E:DE:DA:46:A3:3A:F5:B9:15:A4:E7:44:D3:A4:73:EE:1C:A8:8B:AA
Certificate issuer:       /CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
Certificate serial:       59CBEBCA4F5BCAFE201E2F68C3FA7F592941CEA1
Authority key identifier: 4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3137342e3230382e302f32322d3232203d3e20323637333838.roa
Signing time:             Mon 28 Oct 2024 14:40:58 +0000
ROA not before:           Mon 28 Oct 2024 14:35:58 +0000
ROA not after:            Mon 27 Oct 2025 14:40:58 +0000
asID:                     267388
IP address blocks:        45.174.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl
                          rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:cb:eb:ca:4f:5b:ca:fe:20:1e:2f:68:c3:fa:7f:59:29:41:ce:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
        Validity
            Not Before: Oct 28 14:35:58 2024 GMT
            Not After : Oct 27 14:40:58 2025 GMT
        Subject: CN=9EDEDA46A33AF5B915A4E744D3A473EE1CA88BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d0:a5:62:0f:92:31:34:02:33:f4:80:e0:3d:
                    1d:c5:71:01:1d:00:40:62:42:a3:1c:90:9c:c7:e4:
                    ea:e9:84:ee:09:58:4d:93:ec:3b:a5:28:b1:6e:56:
                    a0:06:9c:fa:a9:d1:a5:e4:7e:19:a7:a4:5f:92:f5:
                    f0:c8:d6:ab:fe:18:22:fb:4c:75:ce:0e:64:e2:7b:
                    69:4a:bb:8c:d3:5b:70:90:6f:04:d4:8b:32:a7:29:
                    50:3d:a4:11:3e:15:2e:b9:49:03:0b:bb:53:6a:ab:
                    23:e9:77:c3:dd:a5:0e:88:71:7b:a0:11:74:42:84:
                    eb:68:18:74:1c:b5:ac:52:4f:4d:84:6b:10:51:0d:
                    42:a6:96:3b:5c:fa:8c:69:28:6d:42:4c:70:a5:c6:
                    6e:94:3a:13:71:c7:58:84:7a:46:18:b9:bd:08:e8:
                    52:4e:ee:09:16:d9:f6:53:85:6a:79:9b:30:88:b2:
                    87:f0:25:b3:85:9f:1f:cf:c7:dd:76:0a:f8:70:7d:
                    dd:15:c5:73:d7:b4:e7:c4:bc:d8:76:95:bb:31:cd:
                    66:ef:33:93:b0:22:12:42:7e:8e:34:b3:40:be:1c:
                    f2:4c:fa:40:57:e0:10:b8:ba:6f:d7:06:7e:6d:78:
                    b2:2d:28:be:16:7d:1d:d3:17:e1:01:7c:d8:80:63:
                    1a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DE:DA:46:A3:3A:F5:B9:15:A4:E7:44:D3:A4:73:EE:1C:A8:8B:AA
            X509v3 Authority Key Identifier:
                keyid:4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3137342e3230382e302f32322d3232203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:df:b3:58:7d:13:c8:cd:d8:d7:cb:39:e9:2f:f9:f5:9d:7d:
         4d:cc:55:a1:ea:45:4d:78:cb:9a:bc:de:17:01:d8:af:d1:33:
         b7:5f:a2:5a:57:d1:ea:f4:d4:d9:b9:58:a6:88:cb:a5:b6:9b:
         6c:03:8b:b3:52:8d:b0:58:0d:a2:ad:b4:9c:58:bb:02:ac:1d:
         c6:0d:f2:99:ac:b6:cd:c9:cf:8d:1d:41:bc:83:ca:57:9d:e2:
         55:5d:0a:69:54:d0:cd:ac:17:9b:45:8a:89:b8:d1:b4:ae:85:
         fc:14:98:ee:ca:25:b1:35:08:f8:e7:37:1b:05:b3:fc:17:cb:
         68:cb:09:51:dd:c5:78:83:85:f9:3d:3c:dd:34:ef:ad:de:91:
         cb:0a:9b:ba:3f:6b:60:e6:d6:54:e6:d1:ec:3e:dd:d5:27:37:
         07:19:bb:0c:0e:73:e1:ea:69:e3:29:a8:17:db:d6:46:5e:e5:
         69:e8:48:49:f8:77:3a:6b:20:19:8a:2f:d1:8e:48:40:0f:ca:
         6c:e2:10:b3:2e:7b:30:9b:54:c4:65:dc:f8:fd:36:f8:4f:0b:
         8f:07:4c:5d:9b:4c:1c:86:c1:78:4d:49:de:ee:f2:b1:48:05:
         02:65:9e:f1:74:49:1b:20:2e:d2:ad:d8:f9:86:f9:f4:ab:d0:
         38:e0:bf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:51 2024 by rpki-client on console-ams.rpki-client.org