Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137342e302f32342d3234203d3e20323638363834.roa
File:                     34352e3136352e3137342e302f32342d3234203d3e20323638363834.roa (raw, json)
Hash identifier:          m3Nufc8f2AzqY1JEw/x8XhpTrI38ElGaSUz6yxXr5dY=
Subject key identifier:   67:D7:28:AD:61:10:35:63:9B:13:0C:30:E7:1D:6E:EC:19:F7:EA:9A
Certificate issuer:       /CN=5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C
Certificate serial:       6B44175E94097E28F95B7C33C97208CFD6F5B048
Authority key identifier: 5C:B9:A3:9B:2C:0F:8B:2B:32:F8:33:DC:D5:B5:F5:90:0A:99:9C:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137342e302f32342d3234203d3e20323638363834.roa
Signing time:             Sun 02 Jun 2024 14:28:10 +0000
ROA not before:           Sun 02 Jun 2024 14:23:10 +0000
ROA not after:            Sun 01 Jun 2025 14:28:10 +0000
asID:                     268684
IP address blocks:        45.165.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.crl
                          rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:44:17:5e:94:09:7e:28:f9:5b:7c:33:c9:72:08:cf:d6:f5:b0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C
        Validity
            Not Before: Jun  2 14:23:10 2024 GMT
            Not After : Jun  1 14:28:10 2025 GMT
        Subject: CN=67D728AD611035639B130C30E71D6EEC19F7EA9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:97:71:77:bc:1f:31:15:e8:f1:63:37:4a:8f:
                    2b:29:3d:6b:70:b8:fb:1e:f3:a7:fb:12:f9:39:2b:
                    c9:72:8c:8e:c7:ce:09:17:01:d2:6f:92:22:6b:b0:
                    48:88:58:fb:07:63:90:4a:57:4e:6d:10:40:16:c8:
                    f9:ce:ce:c6:99:cd:db:ed:a2:00:94:b3:53:be:f0:
                    d2:af:fa:e9:3e:2e:a9:0a:ca:64:1a:bd:c4:94:26:
                    59:65:78:67:08:50:f0:38:f6:db:1f:8b:9d:58:8d:
                    c5:f2:e1:25:61:d1:e0:bc:be:66:19:e6:5d:23:fc:
                    ae:b9:be:e3:21:c1:1f:7c:ce:d0:90:aa:c1:7f:cb:
                    8f:5c:0d:ea:39:77:89:8e:a8:30:db:c5:7c:a9:89:
                    ba:e3:8d:72:57:4c:5c:57:42:c8:7f:6b:0c:e4:d4:
                    9f:ea:82:92:6a:50:70:5d:85:81:76:fe:db:64:42:
                    cd:d8:d3:0b:65:03:74:2d:53:19:ec:e8:11:16:c8:
                    31:5e:d0:97:8f:5f:79:5b:de:af:ee:12:40:0f:01:
                    98:57:29:f4:f6:c3:a5:84:f5:08:4b:dc:7e:50:fa:
                    41:27:ec:94:95:3b:1b:b1:8a:e3:1b:fe:eb:07:be:
                    12:1e:3d:3f:47:b7:e7:2f:fc:11:e0:ce:c6:59:29:
                    98:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D7:28:AD:61:10:35:63:9B:13:0C:30:E7:1D:6E:EC:19:F7:EA:9A
            X509v3 Authority Key Identifier:
                keyid:5C:B9:A3:9B:2C:0F:8B:2B:32:F8:33:DC:D5:B5:F5:90:0A:99:9C:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137342e302f32342d3234203d3e20323638363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:65:4a:f2:ae:24:dc:11:52:4b:42:5a:7b:92:ac:4b:bc:47:
         8b:eb:36:db:4e:96:d2:e9:08:9b:3c:03:22:e7:85:52:6b:83:
         66:2f:75:e1:42:cd:22:23:86:b0:b7:63:59:a1:b0:1f:58:ed:
         0c:4b:4f:b8:06:b9:22:65:77:d5:aa:8c:66:4c:b6:02:32:0c:
         38:31:8a:be:66:f3:56:85:81:01:da:92:5b:30:42:da:ae:e9:
         56:2e:0b:e0:b6:4e:73:d7:97:da:9e:f7:2e:8f:2a:51:7d:3e:
         0a:67:4f:e8:66:a2:1e:df:d7:bf:56:51:99:bb:7b:e2:a1:a1:
         d9:2b:ee:38:f0:e5:d1:8d:4f:40:90:73:8b:fe:d3:4c:ce:2f:
         9f:84:e5:a3:70:93:4f:74:4e:cd:63:47:ef:86:9b:03:67:78:
         86:cc:4b:63:ba:ca:b4:27:6a:1d:4e:eb:8c:c1:40:f3:cd:6b:
         f7:8a:e0:68:13:71:49:81:d1:25:ee:80:03:88:e8:25:85:53:
         bd:52:70:1a:31:b7:5c:59:f5:37:37:00:99:1b:08:c3:dc:7c:
         e9:24:c5:e4:11:c9:13:4b:cb:58:c6:da:7b:b9:74:a5:f4:ec:
         d8:33:16:7b:ca:2c:80:11:8b:1d:9f:5d:14:f2:0c:5f:db:8b:
         d4:da:c6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:13 2024 by rpki-client on console-fra.rpki-client.org