Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e342e3135392e302f32342d3234203d3e20323637333838.roa
File:                     34352e342e3135392e302f32342d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          hL8a6rfropYxFb4qvuK76uYtiUyRS+wqm5FirYt1Its=
Subject key identifier:   78:19:A0:B6:35:25:3A:EF:DD:D7:22:F5:07:7E:0D:14:D4:7B:19:B2
Certificate issuer:       /CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
Certificate serial:       6686D7485D4D94A990BEC7D521398AB304ACD800
Authority key identifier: 4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e342e3135392e302f32342d3234203d3e20323637333838.roa
Signing time:             Mon 28 Oct 2024 14:40:56 +0000
ROA not before:           Mon 28 Oct 2024 14:35:56 +0000
ROA not after:            Mon 27 Oct 2025 14:40:56 +0000
asID:                     267388
IP address blocks:        45.4.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl
                          rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:86:d7:48:5d:4d:94:a9:90:be:c7:d5:21:39:8a:b3:04:ac:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
        Validity
            Not Before: Oct 28 14:35:56 2024 GMT
            Not After : Oct 27 14:40:56 2025 GMT
        Subject: CN=7819A0B635253AEFDDD722F5077E0D14D47B19B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6a:ae:66:9c:98:19:7c:f0:df:30:bc:7f:95:
                    35:aa:8d:80:6e:32:f2:ea:51:33:2f:26:59:bb:72:
                    01:50:4c:dd:14:e3:2b:fe:47:3b:9d:6c:16:dc:23:
                    44:b1:c6:d5:15:ae:2e:98:3b:0c:5c:33:61:f9:9b:
                    ec:38:b7:8b:28:91:25:e5:76:45:3a:fe:07:2b:e5:
                    d1:e7:59:e0:36:78:9b:28:bd:62:04:52:9d:85:7e:
                    b7:21:ff:a6:3b:71:48:57:4b:20:a7:28:7f:63:64:
                    95:02:b6:03:29:cb:07:65:c8:ed:4f:99:71:76:99:
                    34:81:a5:7b:24:e0:31:99:dc:c2:63:3c:9c:15:ff:
                    7f:93:d3:fa:db:65:d7:73:69:30:0d:2b:77:db:6c:
                    3b:c4:02:27:6d:86:6a:4a:59:e3:ac:cb:e7:e4:f3:
                    e6:cf:14:a9:4a:7a:da:d4:df:87:7f:e6:76:5d:ee:
                    ef:e8:59:15:44:c0:b9:2b:5f:b9:28:46:a9:b1:76:
                    77:f5:cb:5f:24:56:0a:4b:af:7c:41:f0:7f:2e:cd:
                    dd:ab:02:22:0a:db:3c:29:ff:87:87:36:d1:e0:b9:
                    3a:4d:ac:2e:f1:c9:e0:ce:08:bf:c3:ae:e8:c7:d4:
                    51:eb:c0:0b:d8:95:89:c0:67:15:7c:cb:f8:ec:f2:
                    78:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:19:A0:B6:35:25:3A:EF:DD:D7:22:F5:07:7E:0D:14:D4:7B:19:B2
            X509v3 Authority Key Identifier:
                keyid:4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e342e3135392e302f32342d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:12:e9:da:08:8d:e1:4b:f7:c0:b8:b5:0c:57:41:95:57:84:
         a5:0b:8e:ba:f7:50:6a:be:2e:81:13:77:2b:c7:f6:85:45:53:
         d4:19:1b:20:22:8b:b8:3f:6d:3d:a4:d6:df:37:d8:8e:02:59:
         e2:70:20:72:d5:05:d5:a3:9a:91:29:72:ff:ea:f4:82:8b:6e:
         6f:78:ae:ce:f3:b1:d1:78:21:8c:97:ae:6d:02:1b:4d:ca:51:
         33:02:55:97:1d:ab:62:c7:78:9d:08:e1:f8:62:41:98:95:f8:
         15:8a:08:a1:2b:32:4c:24:7d:77:d6:ac:f1:f5:c2:fa:8c:14:
         e3:01:e9:79:06:ef:c0:a3:26:e4:7f:06:51:96:fc:56:50:cc:
         41:32:8b:c7:17:92:cf:a6:88:4e:72:02:e4:55:c6:27:5b:bd:
         59:26:0f:90:cb:47:0d:05:4b:ac:55:27:a7:c0:43:aa:23:78:
         3d:a6:e7:90:c4:81:05:db:b0:3a:34:41:f2:99:4a:48:bd:0c:
         f0:50:9c:e9:e8:58:13:7c:c0:44:68:f3:fb:a7:47:4e:84:b5:
         8d:41:a7:23:e0:76:97:f6:25:da:b0:7c:97:a1:c7:c0:bd:4f:
         5c:f2:53:d6:78:e0:9f:d2:81:1b:f3:c8:f5:1b:b7:c8:17:15:
         cf:ab:f4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:51 2024 by rpki-client on console-ams.rpki-client.org