Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137322e302f32342d3234203d3e20323638363834.roa
File:                     34352e3136352e3137322e302f32342d3234203d3e20323638363834.roa (raw, json)
Hash identifier:          4pPzBxHIACMmXSgYRxDyg+iJwJMxmn5RzPQamTIw95Y=
Subject key identifier:   42:03:74:E1:4E:59:FD:29:BA:34:A8:9E:CB:18:33:F4:2A:23:55:8B
Certificate issuer:       /CN=5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C
Certificate serial:       3A547DBF805E3AFCAD731F859E956A6B73B7C9AF
Authority key identifier: 5C:B9:A3:9B:2C:0F:8B:2B:32:F8:33:DC:D5:B5:F5:90:0A:99:9C:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137322e302f32342d3234203d3e20323638363834.roa
Signing time:             Sun 02 Jun 2024 14:28:09 +0000
ROA not before:           Sun 02 Jun 2024 14:23:09 +0000
ROA not after:            Sun 01 Jun 2025 14:28:09 +0000
asID:                     268684
IP address blocks:        45.165.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.crl
                          rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:54:7d:bf:80:5e:3a:fc:ad:73:1f:85:9e:95:6a:6b:73:b7:c9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C
        Validity
            Not Before: Jun  2 14:23:09 2024 GMT
            Not After : Jun  1 14:28:09 2025 GMT
        Subject: CN=420374E14E59FD29BA34A89ECB1833F42A23558B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:85:c0:f7:52:d7:ca:9b:bf:26:d1:bc:bb:08:
                    35:ff:13:4c:c4:a0:e4:73:9d:2c:94:40:cc:ae:de:
                    f4:99:aa:be:a0:be:89:2b:d6:bf:6f:ec:50:0c:83:
                    c1:ae:83:37:08:75:66:42:20:85:44:5b:50:0b:c5:
                    6e:1b:2a:86:fd:39:73:0d:7d:12:73:30:3a:69:b6:
                    e2:96:ba:93:f1:15:8b:81:68:de:bf:30:08:bd:8e:
                    51:02:34:e2:07:61:00:b5:9a:3d:db:c1:2e:d4:f0:
                    11:24:0a:12:4f:b1:92:80:ff:44:53:f3:15:33:e8:
                    39:8e:be:5c:90:27:da:00:60:e7:97:04:d0:24:0a:
                    93:6a:42:ff:01:d1:b5:41:93:de:12:6f:83:0d:99:
                    49:63:cf:4d:82:2a:bb:4b:a8:7c:04:97:90:8a:4a:
                    59:fc:f2:07:2a:59:41:b3:bf:08:b6:7c:cb:d9:19:
                    8a:74:34:07:db:65:96:48:e7:dc:b4:63:a0:a2:ca:
                    53:52:bc:db:13:cf:ba:c4:70:39:79:f9:48:bd:27:
                    ec:6a:5f:bc:d9:1d:f5:4e:e1:27:32:ca:67:bc:51:
                    d9:c3:89:1a:b0:fc:1a:fb:81:a9:ab:d5:4b:64:da:
                    12:61:d2:8a:6d:da:87:1b:ad:6a:5c:d5:0b:6e:1c:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:03:74:E1:4E:59:FD:29:BA:34:A8:9E:CB:18:33:F4:2A:23:55:8B
            X509v3 Authority Key Identifier:
                keyid:5C:B9:A3:9B:2C:0F:8B:2B:32:F8:33:DC:D5:B5:F5:90:0A:99:9C:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137322e302f32342d3234203d3e20323638363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:61:0a:3d:d5:15:d2:bc:1f:51:5c:db:e5:dc:54:6a:74:c0:
         a3:54:16:db:23:d3:4b:3e:e1:a5:4d:db:b3:86:85:27:48:f1:
         22:57:41:db:45:e7:91:8f:82:ac:1d:2c:50:70:59:10:ad:7c:
         0c:e3:0b:61:f6:2f:c8:f9:5e:c5:e9:89:2e:32:fd:a8:a4:69:
         15:6e:ea:b9:75:c4:fd:9a:3f:86:62:20:0f:49:60:d4:22:8e:
         9b:e1:19:a7:49:3f:d7:07:e6:74:a4:3f:c4:a1:88:0f:40:2a:
         72:40:de:64:d6:02:3c:43:22:dd:0b:ff:89:19:1b:a6:39:f9:
         7b:08:ba:cc:6d:d2:40:e9:c7:85:4e:8f:51:db:dd:64:a8:6f:
         2a:0a:88:be:13:4b:eb:73:ec:31:d4:a0:2c:ac:17:94:69:e2:
         ce:ff:d1:e1:77:5b:33:63:17:05:69:fa:54:29:31:b9:22:d5:
         f1:04:b4:b9:ea:a9:da:81:f2:10:f0:7c:00:48:d2:80:fb:cb:
         9c:a9:fd:d2:51:ab:42:6e:35:15:20:e2:33:ee:ef:b6:13:94:
         bd:06:cf:e1:73:be:4f:ce:f9:1d:78:50:fe:f7:45:23:f4:98:
         d0:7c:bd:f2:00:6d:b1:5e:67:74:ac:23:91:dc:4f:db:12:34:
         55:b8:42:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:13 2024 by rpki-client on console-fra.rpki-client.org