Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/34352e3232342e3230382e302f32322d3234203d3e20323637363636.roa
File:                     34352e3232342e3230382e302f32322d3234203d3e20323637363636.roa (raw, json)
Hash identifier:          oV1TBcjs/G3ghuDwUEwkbR1aP1xlgRNaxTHHE+m1Xjk=
Subject key identifier:   B3:66:AE:38:25:18:19:31:C3:73:0F:3B:26:97:C0:48:68:16:97:A6
Certificate issuer:       /CN=5EA6E53A684BE6ED5DC8EF282338D067320E1881
Certificate serial:       6FE88BD879C98D0847AC223F1EB98B72DD55EF1C
Authority key identifier: 5E:A6:E5:3A:68:4B:E6:ED:5D:C8:EF:28:23:38:D0:67:32:0E:18:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA6E53A684BE6ED5DC8EF282338D067320E1881.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/34352e3232342e3230382e302f32322d3234203d3e20323637363636.roa
Signing time:             Tue 30 Jul 2024 17:43:59 +0000
ROA not before:           Tue 30 Jul 2024 17:38:59 +0000
ROA not after:            Tue 29 Jul 2025 17:43:59 +0000
asID:                     267666
IP address blocks:        45.224.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/5EA6E53A684BE6ED5DC8EF282338D067320E1881.crl
                          rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/5EA6E53A684BE6ED5DC8EF282338D067320E1881.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA6E53A684BE6ED5DC8EF282338D067320E1881.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e8:8b:d8:79:c9:8d:08:47:ac:22:3f:1e:b9:8b:72:dd:55:ef:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EA6E53A684BE6ED5DC8EF282338D067320E1881
        Validity
            Not Before: Jul 30 17:38:59 2024 GMT
            Not After : Jul 29 17:43:59 2025 GMT
        Subject: CN=B366AE3825181931C3730F3B2697C048681697A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:74:46:57:ef:7d:31:a8:ba:e4:ac:12:4f:91:
                    fb:31:40:c2:74:ae:8b:1d:9c:3a:89:85:7d:9f:74:
                    62:20:24:b7:94:a2:7e:47:7a:de:d1:67:c0:7c:8b:
                    62:44:77:ad:a2:59:96:76:29:70:e3:c3:ed:01:43:
                    79:c7:5d:de:36:1e:c3:0e:ee:5d:b0:1a:aa:ee:81:
                    45:78:fc:ae:25:18:9d:f8:00:3f:4e:54:d3:3d:5a:
                    0b:5c:40:82:e5:e7:57:56:ac:63:ea:1b:ee:cd:52:
                    ab:8d:e6:32:b3:f8:b3:92:82:ba:1f:4c:45:c8:da:
                    4f:0e:f7:d4:83:67:c8:9c:7a:e2:91:f5:5e:67:e3:
                    60:fe:cf:2d:3c:b6:1d:76:22:75:b6:60:0e:6f:40:
                    fa:6d:b2:f0:3b:3f:72:1d:b3:65:61:69:24:7f:36:
                    01:fa:0f:8c:d4:5c:cf:aa:76:6b:99:b6:ab:52:ea:
                    0b:91:d5:12:bc:9d:04:9e:18:a2:29:a5:47:85:d8:
                    03:cf:0e:4d:4e:95:b7:dc:1d:68:1c:18:bb:80:d8:
                    c9:36:03:1a:dd:3b:b8:61:66:7a:f5:b0:ca:38:91:
                    e8:52:73:1e:9b:af:d2:8b:cc:18:18:ff:5c:21:05:
                    26:3c:ad:63:df:b1:9f:a0:b6:ff:32:b0:61:38:62:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:66:AE:38:25:18:19:31:C3:73:0F:3B:26:97:C0:48:68:16:97:A6
            X509v3 Authority Key Identifier:
                keyid:5E:A6:E5:3A:68:4B:E6:ED:5D:C8:EF:28:23:38:D0:67:32:0E:18:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/5EA6E53A684BE6ED5DC8EF282338D067320E1881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA6E53A684BE6ED5DC8EF282338D067320E1881.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/34352e3232342e3230382e302f32322d3234203d3e20323637363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:b5:03:d8:3c:86:29:bd:3a:65:6b:c9:07:84:df:79:bc:b6:
         68:8f:29:70:fc:b0:55:6e:b3:e5:45:6f:54:70:0e:7b:5a:c7:
         b1:25:45:3e:13:ee:f8:fe:71:6b:83:69:48:28:aa:ba:1f:49:
         f7:e9:62:d1:cf:12:7f:9e:0d:34:ea:73:7c:4e:9c:04:d4:fc:
         cb:68:8b:2c:3c:df:89:a7:4c:58:25:1d:57:67:e5:df:97:14:
         f2:c6:23:76:9f:bc:d9:70:70:0a:01:7b:98:3c:8e:23:d2:60:
         8a:10:27:2a:a0:60:a3:1b:6c:fd:21:27:1f:9e:02:a1:0d:d0:
         4c:57:ce:fd:fa:6a:b4:dc:38:17:32:d3:db:e7:44:ab:1b:e3:
         3e:7b:1a:71:70:28:5b:c3:78:d9:12:18:d6:2a:33:86:32:21:
         54:aa:83:90:fa:4f:ff:57:34:51:87:d0:00:09:8c:6d:6b:f8:
         fd:e8:eb:39:fd:04:e4:77:0f:65:95:68:c6:5c:c9:c2:73:3a:
         7e:5a:f5:a3:20:07:b3:d0:25:b4:ad:27:5c:ee:29:ea:fc:bb:
         5b:32:69:e9:2f:1b:5c:fa:87:41:81:21:08:a2:6a:84:5a:55:
         0c:9e:01:80:62:36:fd:da:b4:43:0d:71:8a:e3:8d:a5:e2:6c:
         2f:b6:5d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:19 2024 by rpki-client on console-fra.rpki-client.org