Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa
File:                     34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa (raw, json)
Hash identifier:          4dHSNATq0iZ1ukXHN8yuePtgoJTJJHaI95izR2T24fs=
Subject key identifier:   81:7C:B3:C3:DF:A3:04:EE:24:A1:D7:18:F0:FF:66:AD:15:D0:B2:33
Certificate issuer:       /CN=7ABC8468E5758989936DBE8D1F4AAB06B9B34867
Certificate serial:       4B58DB18F6BC65CB4604ED3D847714BD7DEFC04D
Authority key identifier: 7A:BC:84:68:E5:75:89:89:93:6D:BE:8D:1F:4A:AB:06:B9:B3:48:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa
Signing time:             Thu 03 Oct 2024 13:56:18 +0000
ROA not before:           Thu 03 Oct 2024 13:51:18 +0000
ROA not after:            Thu 02 Oct 2025 13:56:18 +0000
asID:                     267270
IP address blocks:        45.232.156.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.crl
                          rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:58:db:18:f6:bc:65:cb:46:04:ed:3d:84:77:14:bd:7d:ef:c0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABC8468E5758989936DBE8D1F4AAB06B9B34867
        Validity
            Not Before: Oct  3 13:51:18 2024 GMT
            Not After : Oct  2 13:56:18 2025 GMT
        Subject: CN=817CB3C3DFA304EE24A1D718F0FF66AD15D0B233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:31:73:8e:8b:9e:15:5c:68:1f:94:6f:e6:
                    76:72:5f:1f:a2:e7:fc:83:60:8f:9a:f9:4f:22:e5:
                    0b:f0:4b:9a:a7:30:c9:2a:18:5e:09:03:f7:6a:c0:
                    93:91:69:56:69:5d:47:0a:23:cd:3c:60:66:49:f0:
                    34:7f:61:f3:00:55:a1:83:a2:f7:a6:03:3d:10:c2:
                    46:37:b8:cc:95:7e:eb:ef:07:62:73:30:4b:d4:fa:
                    07:6d:71:68:d5:13:fd:8d:36:7d:1b:c9:24:82:94:
                    54:1a:1e:f9:b4:d3:56:df:a7:df:23:1b:23:d8:d9:
                    63:4b:3d:cc:04:d6:35:3e:ef:65:93:cb:72:aa:5a:
                    0f:64:0c:f7:8e:dd:1c:4b:cb:db:9a:3d:10:81:8d:
                    46:c5:9e:6c:7a:e9:5a:d9:9e:ef:18:02:ea:b5:a1:
                    a3:ef:37:43:15:2e:e9:fc:6b:27:f7:d0:0d:98:45:
                    d3:a5:7d:d7:36:7b:73:71:f2:67:a4:3d:29:39:1f:
                    8a:14:ea:d7:ba:eb:d3:75:39:9a:69:55:90:f7:83:
                    bc:37:5a:9a:35:3c:d0:26:4d:60:c9:18:81:9e:99:
                    79:a4:31:fd:f5:d9:39:dd:a5:23:9d:1a:f1:97:ff:
                    6f:87:be:f3:f0:b2:8d:56:1f:e6:f6:09:d0:b7:51:
                    08:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7C:B3:C3:DF:A3:04:EE:24:A1:D7:18:F0:FF:66:AD:15:D0:B2:33
            X509v3 Authority Key Identifier:
                keyid:7A:BC:84:68:E5:75:89:89:93:6D:BE:8D:1F:4A:AB:06:B9:B3:48:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:64:78:a2:38:a6:8b:6e:ed:0b:06:55:f6:ee:95:7b:1a:a6:
         a0:76:45:4d:5e:3d:45:1c:bc:b0:ed:0d:7e:31:9f:65:ee:e1:
         f4:7d:ac:11:78:87:cb:06:0c:36:e2:65:66:70:85:c8:37:c3:
         c7:43:5a:d0:61:86:0f:f2:4e:16:a5:84:cb:cf:a0:81:9a:2e:
         aa:20:4f:09:04:ae:2c:94:d6:95:9a:ac:fc:1b:3f:ce:d8:41:
         f2:61:dd:29:15:a5:fd:b2:cc:e0:4e:29:4b:75:fb:d7:cf:ac:
         5f:6f:04:ad:de:35:d2:bc:0c:67:03:97:a2:f3:e3:dc:3a:3c:
         65:90:34:04:b3:9c:df:3c:92:68:a9:dc:47:e7:10:f8:f1:7f:
         49:ee:3b:8e:61:c5:f3:1b:80:a8:80:ef:7c:4f:3a:d6:95:66:
         87:33:b7:0f:cd:e8:28:ef:c0:d9:40:c7:81:a1:21:c7:42:d1:
         2f:05:0b:31:49:01:23:dc:38:80:58:56:c2:8c:87:b0:00:b1:
         56:d9:6c:53:18:d5:19:66:a5:45:bb:d1:8b:ce:8a:4b:8f:29:
         c5:85:0a:38:59:23:75:5b:47:12:7f:27:3e:0c:65:d4:08:96:
         69:5c:95:d1:24:56:c4:af:cc:ec:a8:69:eb:18:96:f0:11:6e:
         8d:81:f5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:07 2024 by rpki-client on console-fra.rpki-client.org