Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/0/34352e3136342e3138302e302f32322d3234203d3e20323638363336.roa
File:                     34352e3136342e3138302e302f32322d3234203d3e20323638363336.roa (raw, json)
Hash identifier:          MQXTS9d+EB8aXzKDujBhDM0LFwgwfTglZ6fHdRt3Yqg=
Subject key identifier:   1F:8C:38:BE:4D:3E:07:B3:9C:B0:26:26:B6:DA:86:59:67:F6:8C:7E
Certificate issuer:       /CN=7620726C9318E6BD05E045B45FF2E09CDD039EE8
Certificate serial:       6645F7C647C7BF5AEEB90D71462D079D357F5869
Authority key identifier: 76:20:72:6C:93:18:E6:BD:05:E0:45:B4:5F:F2:E0:9C:DD:03:9E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7620726C9318E6BD05E045B45FF2E09CDD039EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/0/34352e3136342e3138302e302f32322d3234203d3e20323638363336.roa
Signing time:             Sat 20 Apr 2024 13:52:33 +0000
ROA not before:           Sat 20 Apr 2024 13:47:33 +0000
ROA not after:            Sat 19 Apr 2025 13:52:33 +0000
asID:                     268636
IP address blocks:        45.164.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/0/7620726C9318E6BD05E045B45FF2E09CDD039EE8.crl
                          rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/0/7620726C9318E6BD05E045B45FF2E09CDD039EE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7620726C9318E6BD05E045B45FF2E09CDD039EE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 11:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:45:f7:c6:47:c7:bf:5a:ee:b9:0d:71:46:2d:07:9d:35:7f:58:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7620726C9318E6BD05E045B45FF2E09CDD039EE8
        Validity
            Not Before: Apr 20 13:47:33 2024 GMT
            Not After : Apr 19 13:52:33 2025 GMT
        Subject: CN=1F8C38BE4D3E07B39CB02626B6DA865967F68C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:76:87:a3:0c:4b:e5:31:bd:17:50:3e:60:
                    0e:4a:db:c3:ff:e6:8b:89:79:ec:52:18:bd:db:0b:
                    a7:b5:37:87:4e:01:b9:88:88:d8:16:de:13:d4:4c:
                    be:5d:33:71:8f:ae:32:e0:02:c9:f6:d8:0b:67:50:
                    85:8b:c9:d3:19:68:98:66:11:2e:36:91:14:e2:13:
                    72:5c:b7:0d:2e:b6:65:27:fe:d8:6f:04:2f:ce:8d:
                    66:04:12:21:06:99:9e:49:e0:9c:ef:fc:39:dc:b7:
                    bd:c7:f9:7a:6b:ff:51:3e:81:14:d4:1a:f7:2c:12:
                    c7:5d:42:b1:8e:cf:47:75:f3:bc:ac:4c:bb:b5:92:
                    c8:33:62:73:df:9c:7a:52:f2:33:df:30:25:49:3c:
                    18:3b:86:74:8d:5f:46:f4:68:86:46:f7:c8:ee:03:
                    20:41:0f:98:e4:24:48:d2:2c:b5:c1:34:a8:77:da:
                    10:67:ab:50:a9:70:bb:b4:96:54:62:02:3e:93:f7:
                    a2:ec:c0:59:8e:85:9c:e9:60:7c:c7:26:61:b7:68:
                    ce:d7:e6:cc:ab:03:3e:61:70:41:50:22:45:8e:37:
                    67:47:be:ca:9a:3f:c1:1c:0a:67:db:03:22:e5:ee:
                    88:28:9c:fd:a9:e6:9a:2a:d2:47:85:d9:4e:c6:5f:
                    6e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8C:38:BE:4D:3E:07:B3:9C:B0:26:26:B6:DA:86:59:67:F6:8C:7E
            X509v3 Authority Key Identifier:
                keyid:76:20:72:6C:93:18:E6:BD:05:E0:45:B4:5F:F2:E0:9C:DD:03:9E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/0/7620726C9318E6BD05E045B45FF2E09CDD039EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7620726C9318E6BD05E045B45FF2E09CDD039EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/0/34352e3136342e3138302e302f32322d3234203d3e20323638363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:ba:bf:d8:25:39:39:82:0d:34:d3:0e:07:7a:a7:d2:21:3d:
         85:f0:91:7f:36:23:ca:59:f5:22:d0:27:f8:40:d1:f1:dd:43:
         f6:ef:fe:78:fd:bb:a2:74:b3:71:7b:f0:bc:cb:bd:79:3f:80:
         2b:5d:f8:87:38:e6:f9:e4:a2:3a:06:3f:56:75:05:1e:d6:33:
         f6:9e:61:5b:ad:63:d2:3c:b2:56:b4:6f:30:b8:8f:e5:81:f0:
         f0:8b:e7:f9:66:44:ca:51:3d:ee:ea:c7:40:66:1a:22:be:e5:
         40:1f:62:4b:95:ed:e1:75:ad:28:8f:1c:de:7b:d2:32:ec:dc:
         12:a2:a5:8d:36:7b:ef:2d:91:98:5a:21:61:20:9b:e2:ec:3e:
         3f:c4:2e:61:98:81:a4:a1:92:01:50:79:78:08:b3:50:21:f1:
         a1:3c:e1:9f:5d:95:1d:14:70:cd:e2:55:da:4f:36:af:19:71:
         2e:d2:fe:c6:58:8d:2d:7a:4d:6e:1f:08:6d:07:e2:b3:6c:28:
         25:3a:b2:47:4d:fc:58:92:2f:5b:be:b1:20:2b:53:63:5e:c4:
         33:83:d7:c0:8e:ee:df:cc:e3:9f:ab:3d:b4:f3:7e:17:6f:a9:
         28:ad:75:53:ee:95:0a:cc:78:d0:3e:53:b1:26:ac:1e:8c:ce:
         3d:21:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:56 2024 by rpki-client on console-fra.rpki-client.org