Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3136332e38342e302f32322d3234203d3e20323638353436.roa
File:                     34352e3136332e38342e302f32322d3234203d3e20323638353436.roa (raw, json)
Hash identifier:          Y8tmyw1gE7RPImp40XPE6BnRCx7NR9s3j2X3UdqgA7M=
Subject key identifier:   5F:E9:92:F8:8C:B0:0B:CF:0B:83:9E:95:35:B7:64:92:1B:14:C9:23
Certificate issuer:       /CN=37CA3286264D504D79210CC12A74E15D2E230251
Certificate serial:       7D242D8AAD9884A4CD722CE860DB03FBA4C59945
Authority key identifier: 37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3136332e38342e302f32322d3234203d3e20323638353436.roa
Signing time:             Mon 12 Aug 2024 13:16:05 +0000
ROA not before:           Mon 12 Aug 2024 13:11:05 +0000
ROA not after:            Mon 11 Aug 2025 13:16:05 +0000
asID:                     268546
IP address blocks:        45.163.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.crl
                          rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:24:2d:8a:ad:98:84:a4:cd:72:2c:e8:60:db:03:fb:a4:c5:99:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37CA3286264D504D79210CC12A74E15D2E230251
        Validity
            Not Before: Aug 12 13:11:05 2024 GMT
            Not After : Aug 11 13:16:05 2025 GMT
        Subject: CN=5FE992F88CB00BCF0B839E9535B764921B14C923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9f:e0:ec:eb:ae:75:35:ed:8c:e3:5e:c5:a5:
                    40:c2:ef:fb:fd:73:97:25:10:8a:c9:fa:91:e9:59:
                    7d:f5:d3:9c:30:80:c9:47:2e:d6:4a:38:7a:52:42:
                    c3:14:f1:a2:3a:e6:ce:50:1d:dd:4f:46:d8:af:f1:
                    66:03:ce:ef:81:36:9a:cc:fe:ec:cb:67:cd:db:eb:
                    f8:0a:c3:42:9d:46:ac:a8:d6:87:ca:3c:ab:a1:e2:
                    33:a8:ac:c0:51:eb:e1:85:ee:df:eb:e5:c5:63:99:
                    b5:95:57:c6:84:83:c5:0f:5b:c3:dc:0e:de:af:4d:
                    9d:47:b4:cd:50:3e:c3:65:c0:90:7c:42:58:36:e3:
                    71:f2:ba:75:d9:8f:f1:a0:5a:59:da:7b:67:41:86:
                    0a:f5:b7:fd:b5:97:82:7b:5f:b3:13:58:3f:3e:6f:
                    08:c5:cf:3d:43:e9:e9:b4:95:82:95:de:d0:bd:02:
                    15:77:56:12:35:db:b5:af:0a:53:b6:15:df:fa:41:
                    ba:94:86:0f:16:ab:61:bf:04:fe:42:57:1e:ec:8b:
                    71:35:4c:b6:bc:49:69:98:7b:c3:b6:05:c3:5c:64:
                    e8:ca:be:5b:a8:77:d6:12:12:c4:1a:58:f5:20:23:
                    01:18:58:22:ef:e4:70:f4:d9:93:c6:69:d1:7d:13:
                    2d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E9:92:F8:8C:B0:0B:CF:0B:83:9E:95:35:B7:64:92:1B:14:C9:23
            X509v3 Authority Key Identifier:
                keyid:37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3136332e38342e302f32322d3234203d3e20323638353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:6b:f5:c7:b6:20:a7:24:56:3d:c3:e5:39:04:6b:32:00:0f:
         43:67:ba:e3:c9:e7:5c:04:34:0c:b2:cd:44:37:6d:3f:01:43:
         a3:c3:e7:51:0d:b1:6b:eb:8d:c7:a4:dd:53:1e:35:84:1e:14:
         63:df:72:16:89:19:48:25:bb:ac:53:5b:f4:9b:77:aa:41:10:
         5f:f0:73:f4:35:86:e4:c0:ee:aa:58:1b:4c:88:25:03:a1:f6:
         b6:9e:c0:4c:b9:ea:d4:bf:95:ec:dd:47:16:37:a7:d5:77:33:
         1d:71:44:5c:bd:44:67:70:95:a8:cf:73:d8:c6:cc:f1:91:89:
         0d:bc:46:65:70:29:74:ff:10:67:77:ac:b0:71:d8:3f:e4:d1:
         85:39:ba:72:b6:16:ae:7e:d4:46:73:d9:15:16:b8:da:58:93:
         37:74:6a:98:f6:4e:7c:ee:d7:95:3e:a4:f4:42:f5:31:78:e3:
         cd:f1:74:37:f2:8b:35:5c:bb:34:29:b0:25:c2:28:2f:4b:52:
         62:04:91:fa:b1:b1:1f:d1:a8:55:41:28:96:41:8f:50:c9:23:
         65:c9:5c:f8:02:b4:65:75:2e:fc:cc:df:a6:78:c5:34:d2:e1:
         bc:30:7e:6f:2a:f9:d0:c0:ac:e4:3e:30:e2:07:43:8e:1f:d4:
         8e:43:a1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:38 2024 by rpki-client on console-ams.rpki-client.org