Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/34352e3136302e33362e302f32322d3332203d3e20323638333931.roa
File:                     34352e3136302e33362e302f32322d3332203d3e20323638333931.roa (raw, json)
Hash identifier:          HQmm5wVus3yL/gV78GFu5+ylpgNEnZKTGv7VHgf8Uy0=
Subject key identifier:   DE:95:4B:C5:08:FD:DC:9F:AC:D1:6D:45:6C:C6:41:78:B6:4F:63:06
Certificate issuer:       /CN=37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97
Certificate serial:       58B2D539E0E8FD8648A672E98865AB51112829A4
Authority key identifier: 37:FE:03:60:BF:70:C2:BB:2E:6A:D3:D3:4F:0D:94:2B:07:6F:AA:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/34352e3136302e33362e302f32322d3332203d3e20323638333931.roa
Signing time:             Wed 03 Apr 2024 23:38:24 +0000
ROA not before:           Wed 03 Apr 2024 23:33:24 +0000
ROA not after:            Wed 02 Apr 2025 23:38:24 +0000
asID:                     268391
IP address blocks:        45.160.36.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.crl
                          rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b2:d5:39:e0:e8:fd:86:48:a6:72:e9:88:65:ab:51:11:28:29:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97
        Validity
            Not Before: Apr  3 23:33:24 2024 GMT
            Not After : Apr  2 23:38:24 2025 GMT
        Subject: CN=DE954BC508FDDC9FACD16D456CC64178B64F6306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c6:d8:72:4c:a5:d0:32:cf:cb:c0:2b:55:a8:
                    02:76:4a:39:2d:f1:0d:4d:e0:f6:c6:bb:72:9b:35:
                    cc:4d:2b:2d:8e:aa:aa:76:13:5f:80:73:a5:d8:1a:
                    13:28:03:87:4c:39:73:c2:d5:e1:47:02:ef:3f:a4:
                    fe:a3:09:45:0b:77:3f:ef:b8:ec:76:85:2d:3f:27:
                    b7:84:36:56:58:20:33:08:25:54:1c:fc:4d:06:a2:
                    58:67:24:5a:f5:20:41:8b:f6:04:8c:13:52:41:75:
                    6a:f2:f1:b2:d8:5a:1a:c0:14:29:16:8e:39:3c:f7:
                    ff:10:bb:0c:ea:27:a6:c8:c1:28:df:c8:a2:f0:a6:
                    b8:80:42:8f:f4:ec:95:29:b6:f0:02:f5:51:d2:a9:
                    4f:69:3d:a1:5e:5c:41:8b:e3:1f:27:32:c3:7b:70:
                    8b:81:f2:e1:b3:fe:c5:b9:a3:e2:c0:61:2c:7b:81:
                    e8:2a:74:3a:4b:b6:40:ab:8f:18:34:71:d2:bd:26:
                    6f:44:31:09:42:e7:26:f8:3b:cd:ad:cf:6c:a3:06:
                    d2:1e:33:18:84:fd:68:b8:1f:81:0f:9c:f8:2d:9b:
                    75:b9:f1:66:65:9a:c0:e2:db:d8:aa:1a:0c:0d:07:
                    76:8b:7f:b5:90:d6:fd:24:d7:ae:72:da:a6:74:47:
                    6a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:95:4B:C5:08:FD:DC:9F:AC:D1:6D:45:6C:C6:41:78:B6:4F:63:06
            X509v3 Authority Key Identifier:
                keyid:37:FE:03:60:BF:70:C2:BB:2E:6A:D3:D3:4F:0D:94:2B:07:6F:AA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/34352e3136302e33362e302f32322d3332203d3e20323638333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:e0:0b:45:b2:cc:4c:ce:26:c9:6f:a9:d1:41:77:0d:51:7d:
         3c:09:d7:bf:7b:1a:e2:21:cd:a3:08:c9:33:76:81:cd:38:a9:
         13:c2:0b:49:26:08:3d:28:bd:0f:a5:fa:ae:da:29:17:74:af:
         0e:94:77:3b:c7:8e:2c:c9:6f:53:3d:5c:44:c0:16:6f:53:0b:
         72:bc:42:7e:64:44:d7:29:c9:4d:69:41:97:37:7f:5c:35:29:
         c2:84:9a:23:b2:ee:04:71:c1:4c:0e:60:ce:cd:88:2f:fc:af:
         13:58:46:c2:c0:ae:65:ad:b7:7c:82:a3:b8:fd:52:3e:a3:bc:
         06:f5:8a:2f:fd:3c:86:66:ba:28:20:16:08:f6:e7:b0:89:01:
         b3:6c:d9:09:ea:ad:e3:91:88:ef:3d:b3:d0:01:85:c7:7c:65:
         45:b2:86:dc:59:0a:10:5f:42:b6:85:e5:62:b7:bf:fc:de:79:
         9f:15:8e:b2:8e:e8:dc:1d:99:6c:74:d5:eb:df:b7:08:2e:26:
         30:84:2d:fe:80:69:b1:47:04:c8:eb:70:46:64:dc:ef:4f:75:
         23:58:84:d9:9e:db:8e:ec:b8:7e:73:f5:cd:97:b6:53:be:fa:
         57:4e:f3:93:d9:8e:e7:f6:bc:e1:14:8d:74:03:5b:dd:16:2e:
         c6:a1:4d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:09 2024 by rpki-client on console-fra.rpki-client.org