Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/34352e3138332e3137362e302f32332d3233203d3e20323731363039.roa
File:                     34352e3138332e3137362e302f32332d3233203d3e20323731363039.roa (raw, json)
Hash identifier:          dc8SGn01jD6THUHrhqPdGi3I0D29y4KGn606SUVas3U=
Subject key identifier:   7D:66:CD:97:61:55:29:F3:2D:F7:8B:1D:25:B5:EA:E2:CA:23:55:41
Certificate issuer:       /CN=0079F578F840861841579D0274672459845D6B3E
Certificate serial:       7CB831B09B208E7D6E7EEEADB5F2EE4A1F60789C
Authority key identifier: 00:79:F5:78:F8:40:86:18:41:57:9D:02:74:67:24:59:84:5D:6B:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0079F578F840861841579D0274672459845D6B3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/34352e3138332e3137362e302f32332d3233203d3e20323731363039.roa
Signing time:             Mon 18 Nov 2024 00:02:30 +0000
ROA not before:           Sun 17 Nov 2024 23:57:30 +0000
ROA not after:            Mon 17 Nov 2025 00:02:30 +0000
asID:                     271609
IP address blocks:        45.183.176.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/0079F578F840861841579D0274672459845D6B3E.crl
                          rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/0079F578F840861841579D0274672459845D6B3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0079F578F840861841579D0274672459845D6B3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 15:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b8:31:b0:9b:20:8e:7d:6e:7e:ee:ad:b5:f2:ee:4a:1f:60:78:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0079F578F840861841579D0274672459845D6B3E
        Validity
            Not Before: Nov 17 23:57:30 2024 GMT
            Not After : Nov 17 00:02:30 2025 GMT
        Subject: CN=7D66CD97615529F32DF78B1D25B5EAE2CA235541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:66:b9:da:a8:02:67:1f:a9:ca:a4:3e:af:
                    e3:7b:6e:4a:48:7f:89:df:5f:32:f9:04:b0:72:24:
                    03:84:70:ab:b4:90:61:4b:7f:ce:f7:15:b6:15:65:
                    18:fc:43:eb:04:ef:c3:2b:a4:5e:4f:6d:f6:e6:4c:
                    eb:54:2b:ed:94:ed:97:fb:9c:98:5b:46:0f:08:01:
                    95:ae:b8:2d:b8:88:21:cd:fb:78:da:b7:8c:4f:d2:
                    7f:bf:e7:ad:76:89:a5:f3:eb:d2:fb:1e:2c:ae:95:
                    8c:c0:98:66:9a:40:12:aa:48:9b:ea:50:97:9b:a7:
                    af:73:2a:56:fa:4c:2a:12:53:53:97:c8:5e:96:e3:
                    0f:2c:9d:82:8e:f3:1a:79:39:d1:a1:12:24:b9:9b:
                    95:de:86:2c:67:71:08:b2:3f:5e:4a:24:72:a2:36:
                    04:c3:53:88:ea:f2:e4:41:c0:e1:5c:1d:70:81:1e:
                    f2:5f:ed:c4:c2:9c:88:70:fe:66:62:6f:21:61:b9:
                    c1:b4:76:21:e7:ee:93:0e:61:db:c8:4f:a2:b8:ff:
                    4d:57:bc:1c:f7:8a:80:50:a7:29:07:7a:b9:21:2c:
                    11:c7:86:79:f6:f5:c8:8b:fd:aa:e2:af:9a:d6:a4:
                    c2:43:12:e2:3e:e3:1b:84:2d:96:15:96:a0:28:b8:
                    66:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:66:CD:97:61:55:29:F3:2D:F7:8B:1D:25:B5:EA:E2:CA:23:55:41
            X509v3 Authority Key Identifier:
                keyid:00:79:F5:78:F8:40:86:18:41:57:9D:02:74:67:24:59:84:5D:6B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/0079F578F840861841579D0274672459845D6B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0079F578F840861841579D0274672459845D6B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/34352e3138332e3137362e302f32332d3233203d3e20323731363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:a1:08:61:bf:ce:28:f4:4b:60:bf:91:65:36:8c:fd:ac:27:
         cc:ff:0b:38:31:b3:f1:1d:29:92:15:a2:63:9d:5b:c4:6f:2b:
         08:ad:03:29:75:71:3b:f4:70:f9:fc:27:b7:aa:d8:be:12:a6:
         af:88:71:08:7a:3a:e1:1a:1d:6e:87:3f:60:d6:e5:4b:cb:e1:
         f3:a5:88:d5:8e:45:2e:d4:62:7d:c6:c0:62:be:2b:8c:6c:21:
         97:54:18:de:3c:5c:b5:3f:f2:19:0b:42:62:71:a2:2b:70:13:
         92:45:f8:72:9e:b9:d8:0b:eb:14:19:d6:6a:ed:bf:2e:0d:3b:
         64:bd:83:2a:89:27:98:20:01:01:56:97:82:de:92:cc:c6:2f:
         1b:86:88:44:2e:4a:ca:6d:8f:d9:de:6a:71:ae:6b:f7:33:5d:
         42:f7:b3:a3:a4:a8:00:9b:af:6b:51:04:6a:3a:e6:8c:ec:7a:
         b7:66:7b:8e:9c:9c:60:69:a1:c5:20:0e:73:87:b8:c8:39:40:
         f9:d7:44:25:4d:cf:36:5d:93:02:8f:60:c5:16:22:07:48:08:
         de:56:2c:9d:1a:99:83:90:12:53:e9:af:ab:43:db:8e:c1:e0:
         1d:9a:76:02:c8:e2:5b:cb:ee:06:da:18:0f:1f:15:57:cf:a5:
         bc:dd:6e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:15 2024 by rpki-client on console-ams.rpki-client.org