Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e312e302f32342d3234203d3e20323637333838.roa
File:                     34352e372e312e302f32342d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          VvKHgC25V+o3omLY4Ess3CPSsvxAs6d6eT84x0/95Jo=
Subject key identifier:   3D:61:80:68:3F:8C:0F:AE:5E:35:E1:88:BC:AF:97:DF:7F:80:A7:F9
Certificate issuer:       /CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
Certificate serial:       68D3FE9A5E2CFAEAC9DD34896FDA34106B617730
Authority key identifier: 4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e312e302f32342d3234203d3e20323637333838.roa
Signing time:             Mon 28 Oct 2024 14:40:59 +0000
ROA not before:           Mon 28 Oct 2024 14:35:59 +0000
ROA not after:            Mon 27 Oct 2025 14:40:59 +0000
asID:                     267388
IP address blocks:        45.7.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl
                          rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d3:fe:9a:5e:2c:fa:ea:c9:dd:34:89:6f:da:34:10:6b:61:77:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
        Validity
            Not Before: Oct 28 14:35:59 2024 GMT
            Not After : Oct 27 14:40:59 2025 GMT
        Subject: CN=3D6180683F8C0FAE5E35E188BCAF97DF7F80A7F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:a6:19:f9:87:ca:33:97:52:01:d7:e3:93:
                    fa:e9:ff:22:55:bd:26:0d:7a:60:1d:a8:f0:bf:bb:
                    b1:af:0c:a7:a7:76:92:3b:de:d6:64:f2:5d:d4:7b:
                    76:9a:4e:f0:e5:a8:db:52:9c:19:cd:a4:3d:f2:ad:
                    33:40:95:d0:e5:35:4b:d1:6f:ea:1e:6b:74:16:64:
                    cb:5c:3c:7e:b4:d5:b8:3f:49:da:a5:10:a0:13:a5:
                    de:8f:55:33:91:12:80:c9:ec:e7:80:96:6e:ac:9b:
                    f5:49:2c:d8:fd:cd:5c:b3:55:1e:b1:a5:49:e6:87:
                    aa:9e:83:26:ec:7b:92:2d:93:67:31:6f:30:9a:5e:
                    7b:6d:b4:08:d3:a1:66:2e:cb:59:0a:84:de:5f:d1:
                    10:59:6a:be:76:62:34:43:04:06:83:41:0a:72:b5:
                    1b:82:b7:bc:1d:b7:f7:90:fb:4d:87:e7:26:6f:70:
                    fc:8e:3f:29:3a:14:7f:0b:6e:15:d0:41:74:5e:f9:
                    dc:48:42:f8:56:13:e6:3c:85:f1:6f:72:79:07:76:
                    d2:1e:ef:90:71:6b:95:db:9c:b7:94:fc:a3:93:b0:
                    f0:b5:69:19:3b:19:b3:8e:1d:6b:e1:db:e6:1f:af:
                    48:32:ea:c5:e7:6f:40:ee:a8:d3:ba:dd:d7:c3:b1:
                    22:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:61:80:68:3F:8C:0F:AE:5E:35:E1:88:BC:AF:97:DF:7F:80:A7:F9
            X509v3 Authority Key Identifier:
                keyid:4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e312e302f32342d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:28:ed:57:05:52:87:6a:ad:8e:10:7b:56:dc:e4:c8:5e:4f:
         a7:65:2f:bf:6b:9c:cb:5f:c7:26:a6:4f:1d:b0:39:7e:75:45:
         b7:b9:0f:6b:61:56:11:9c:09:6b:b2:33:60:2d:ff:63:81:95:
         bc:36:12:c3:e4:ff:16:9d:2e:be:17:5d:d4:fd:07:b1:55:18:
         ff:7f:c1:6f:a3:61:d3:b2:3e:af:91:0e:53:a9:1c:37:ba:5e:
         4b:ae:f9:cb:b3:9c:a2:d6:ca:cf:5f:04:9f:f9:dd:9f:22:2f:
         57:a8:77:34:b7:c6:b5:8b:8c:1f:94:f6:26:ec:44:a3:6c:52:
         0a:b1:b8:62:03:b5:65:9a:00:e7:5a:cc:4b:6f:fd:3f:a3:b1:
         ef:dc:90:41:b7:48:38:0b:c2:38:d7:ef:36:69:b1:b6:5d:39:
         db:cc:ef:1d:be:e8:a6:71:ea:f6:0f:5a:3e:6c:c6:cb:6b:8b:
         d3:ba:44:2a:49:41:fd:1f:37:0d:d8:ed:3a:ce:06:2f:29:54:
         bf:6f:ed:69:c8:73:6f:9f:bb:da:4b:4f:50:cd:21:ac:c4:c9:
         53:b7:bf:40:c9:4e:f6:31:a9:f5:5c:8e:b3:d3:9b:bd:81:01:
         bc:b2:80:d9:0e:e5:6e:d8:72:90:55:fe:32:a0:7a:0e:e9:55:
         a1:a7:06:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:39 2024 by rpki-client on console-fra.rpki-client.org