Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/34352e3138332e3137372e302f32342d3234203d3e20323731363039.roa
File:                     34352e3138332e3137372e302f32342d3234203d3e20323731363039.roa (raw, json)
Hash identifier:          Vbg2kCCBGUd805CjXDZiYHFENiv4i59HANA3I0Xu3zE=
Subject key identifier:   37:50:02:9C:B4:CA:72:B9:D6:EA:DD:51:BD:F2:BF:58:53:CB:BB:54
Certificate issuer:       /CN=0079F578F840861841579D0274672459845D6B3E
Certificate serial:       127C30562D33D84A726C5EDF9B6A038691757C41
Authority key identifier: 00:79:F5:78:F8:40:86:18:41:57:9D:02:74:67:24:59:84:5D:6B:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0079F578F840861841579D0274672459845D6B3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/34352e3138332e3137372e302f32342d3234203d3e20323731363039.roa
Signing time:             Mon 18 Nov 2024 00:02:30 +0000
ROA not before:           Sun 17 Nov 2024 23:57:30 +0000
ROA not after:            Mon 17 Nov 2025 00:02:30 +0000
asID:                     271609
IP address blocks:        45.183.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/0079F578F840861841579D0274672459845D6B3E.crl
                          rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/0079F578F840861841579D0274672459845D6B3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0079F578F840861841579D0274672459845D6B3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 15:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7c:30:56:2d:33:d8:4a:72:6c:5e:df:9b:6a:03:86:91:75:7c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0079F578F840861841579D0274672459845D6B3E
        Validity
            Not Before: Nov 17 23:57:30 2024 GMT
            Not After : Nov 17 00:02:30 2025 GMT
        Subject: CN=3750029CB4CA72B9D6EADD51BDF2BF5853CBBB54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:c5:28:f2:cb:a1:7e:c3:9e:af:aa:d4:69:
                    d3:a1:56:98:21:ca:b5:33:d8:16:f1:6f:76:07:87:
                    85:17:d8:ec:b5:2b:31:31:43:cf:47:5a:d1:da:85:
                    2a:fe:b7:e8:c2:91:7c:e2:16:cf:4c:1b:69:46:03:
                    0e:39:d5:76:5e:ea:b1:68:7f:8e:25:35:7b:0e:ad:
                    9e:5a:f4:7b:ff:9e:48:6a:0a:d8:b3:0d:f5:ae:ab:
                    9a:d4:77:c0:90:6a:44:0d:bb:a4:13:29:c6:98:b8:
                    06:e1:04:02:6f:a4:f3:d9:b5:e2:0d:18:b2:4e:ec:
                    7f:17:8d:7c:a7:ab:45:30:7d:a1:28:c5:fe:0f:e4:
                    bc:19:42:16:00:e4:29:07:35:53:31:47:97:85:e5:
                    ab:c2:20:6c:39:bf:57:e7:ae:78:07:31:9d:95:03:
                    43:0c:0f:67:98:74:33:01:91:eb:e8:f4:2f:c0:f6:
                    47:b8:a1:66:e1:dc:28:9e:31:ce:16:45:8a:a2:91:
                    99:cf:d0:e9:03:97:12:4f:9d:44:fc:95:f1:34:3f:
                    aa:87:dd:64:14:81:26:7a:e7:d7:c6:45:97:a3:17:
                    b3:b7:0c:c6:fd:e6:02:d2:00:53:af:25:96:e1:9d:
                    c6:8c:aa:b1:d7:7b:2e:e6:b2:a3:64:31:8b:b5:01:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:50:02:9C:B4:CA:72:B9:D6:EA:DD:51:BD:F2:BF:58:53:CB:BB:54
            X509v3 Authority Key Identifier:
                keyid:00:79:F5:78:F8:40:86:18:41:57:9D:02:74:67:24:59:84:5D:6B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/0079F578F840861841579D0274672459845D6B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0079F578F840861841579D0274672459845D6B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/34352e3138332e3137372e302f32342d3234203d3e20323731363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:8e:bb:94:9a:a1:f0:b1:1f:f8:ad:e6:d9:0b:80:3d:2c:12:
         aa:3d:21:76:e5:8c:91:1d:bf:a7:c2:1f:7d:fa:92:a6:19:b4:
         88:eb:b3:17:57:20:f5:09:b9:71:74:d3:04:e1:74:ee:94:aa:
         6a:20:66:f4:bb:86:b9:41:35:be:ec:02:87:5b:0a:0c:32:34:
         a8:6b:14:fb:55:d2:f1:83:0d:70:9a:ee:fb:20:ea:fb:de:e9:
         6c:93:d6:a1:53:16:2e:f5:7c:8e:2e:88:7b:03:0e:38:1d:6b:
         e7:70:81:d1:4c:e8:d4:34:28:60:0c:81:b1:c8:7b:6e:d7:83:
         99:6b:b1:66:01:d6:55:4b:c2:6b:95:09:eb:e7:f0:22:d0:3b:
         cf:83:61:a2:0f:09:62:f6:66:de:f0:4a:87:41:22:c0:65:9c:
         8e:17:86:7d:c8:9b:b4:17:94:7a:e2:4d:ec:87:09:0e:2a:87:
         b3:a9:7d:17:90:e5:ae:5a:2b:d0:27:aa:a4:f6:aa:60:23:d9:
         71:84:6a:fa:3f:7e:bf:ab:7b:90:40:21:ff:24:26:63:1a:3d:
         99:b5:19:69:9f:7e:56:fd:a1:0a:fc:5c:a3:f5:e3:29:8f:41:
         15:69:00:06:c9:88:d5:0d:1c:bc:42:e2:a8:a9:52:bd:ce:e7:
         b7:dd:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:15 2024 by rpki-client on console-ams.rpki-client.org