Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa
File:                     34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa (raw, json)
Hash identifier:          TbCdQLVd75hS1im7TBpVI8C0P/aV38cR6g2EhR8O2HY=
Subject key identifier:   62:A7:C7:99:B6:DA:DA:75:EB:3B:19:41:04:70:2F:D1:F8:31:42:0F
Certificate issuer:       /CN=7B02316541C9F170484214259E6C028DF7BB0F4A
Certificate serial:       69FDE7E34FD1642BE6AB4FF5196240182BB32B3A
Authority key identifier: 7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa
Signing time:             Wed 03 Apr 2024 18:31:56 +0000
ROA not before:           Wed 03 Apr 2024 18:26:56 +0000
ROA not after:            Wed 02 Apr 2025 18:31:56 +0000
asID:                     268011
IP address blocks:        45.167.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl
                          rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fd:e7:e3:4f:d1:64:2b:e6:ab:4f:f5:19:62:40:18:2b:b3:2b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B02316541C9F170484214259E6C028DF7BB0F4A
        Validity
            Not Before: Apr  3 18:26:56 2024 GMT
            Not After : Apr  2 18:31:56 2025 GMT
        Subject: CN=62A7C799B6DADA75EB3B194104702FD1F831420F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e3:79:3a:e9:9c:e6:44:bf:66:d9:31:16:8a:
                    b6:54:6b:ac:a5:50:11:98:fd:fd:60:3c:39:3c:bb:
                    38:32:c7:02:db:89:99:a3:9e:34:37:cb:12:e0:d2:
                    1e:be:f7:ea:3d:c8:4e:e7:83:77:22:6f:9d:38:1a:
                    15:c2:2d:10:40:e2:d3:68:f5:5e:0f:4b:b3:d2:11:
                    d2:a6:db:14:d2:22:54:ce:24:4c:a2:0b:f2:cc:bf:
                    60:e2:36:ab:dd:f0:14:c4:ad:b8:e1:1a:bb:07:03:
                    4e:93:81:1a:f8:8e:69:2d:bc:74:f5:52:2d:7b:b3:
                    05:ba:b0:49:bd:43:75:72:88:27:9e:c6:3f:08:92:
                    37:7a:52:b2:5e:f8:8a:3d:4a:3e:58:22:56:75:9a:
                    4f:62:c1:d3:21:de:0d:9f:b8:60:9e:a8:fa:81:c3:
                    32:dd:3d:a8:4a:31:5c:44:da:d4:44:a0:97:b9:e8:
                    80:60:ef:92:53:19:63:a6:25:6f:ca:c0:30:3e:e2:
                    4d:1a:11:6d:65:e6:3d:c4:8f:80:5f:fd:17:e3:73:
                    fe:7d:7e:5c:f9:f7:7e:95:54:5f:ed:6e:81:0f:04:
                    42:84:5e:3c:65:79:57:c1:6c:57:d8:31:2a:02:79:
                    7a:2a:a0:49:62:6a:0a:65:77:8d:f0:64:97:ed:d6:
                    ed:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A7:C7:99:B6:DA:DA:75:EB:3B:19:41:04:70:2F:D1:F8:31:42:0F
            X509v3 Authority Key Identifier:
                keyid:7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:e8:76:93:f7:14:72:56:7a:77:38:39:05:8b:57:6a:27:11:
         b3:2a:1d:cd:9f:ab:c0:f1:24:2c:5c:06:e0:b2:9e:27:73:5d:
         85:53:f6:ab:66:ef:6e:48:59:7e:06:c2:6f:48:21:86:c3:4b:
         ad:29:81:87:e3:68:0b:8d:62:35:68:ea:e8:40:0d:17:d8:a4:
         bd:fb:d9:af:7b:df:e2:e0:fd:42:f2:bb:47:ec:b0:19:e6:30:
         fb:93:9b:09:ee:46:12:f2:87:10:d7:fa:ce:79:fb:86:93:e0:
         76:0b:7f:7f:30:37:2a:75:9f:8f:e1:7c:fa:5d:92:4d:be:2c:
         21:24:1b:70:68:ff:8a:ad:24:2e:3b:46:7e:a5:97:42:03:ba:
         09:23:af:1b:a4:9f:e6:a6:9c:34:d0:52:3b:af:9c:ee:ba:c9:
         3e:1c:69:47:cc:bb:d7:d7:d9:8b:fd:2f:7e:f3:dc:45:e1:25:
         19:7b:8c:d1:d2:60:7e:a4:f7:c7:17:44:ed:2d:83:fc:ac:c6:
         d8:8a:6d:5a:d1:37:6d:70:6d:f8:c8:f0:95:06:84:9a:19:25:
         d0:f1:09:5b:37:fc:3a:2e:a3:e6:74:7b:be:28:49:91:cc:fd:
         a1:d7:c6:7c:30:5a:9d:d9:2d:ef:74:28:f0:6c:1a:c1:fa:e3:
         44:2d:89:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org