Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/34352e3137382e3234382e302f32322d3232203d3e203236393035.roa
File:                     34352e3137382e3234382e302f32322d3232203d3e203236393035.roa (raw, json)
Hash identifier:          rDxogl90z6XBDZ0HKfXqlqTEd/qmIc79pnKp+GZ7qpk=
Subject key identifier:   8B:1E:D8:E5:80:84:16:19:10:E8:17:8F:46:1F:3E:8A:80:10:DF:9B
Certificate issuer:       /CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
Certificate serial:       16061865B4A72244D36E74E0083199D5F439D746
Authority key identifier: D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/34352e3137382e3234382e302f32322d3232203d3e203236393035.roa
Signing time:             Thu 08 Aug 2024 12:27:39 +0000
ROA not before:           Thu 08 Aug 2024 12:22:39 +0000
ROA not after:            Thu 07 Aug 2025 12:27:39 +0000
asID:                     26905
IP address blocks:        45.178.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.crl
                          rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:06:18:65:b4:a7:22:44:d3:6e:74:e0:08:31:99:d5:f4:39:d7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
        Validity
            Not Before: Aug  8 12:22:39 2024 GMT
            Not After : Aug  7 12:27:39 2025 GMT
        Subject: CN=8B1ED8E58084161910E8178F461F3E8A8010DF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:12:6e:69:3e:4d:39:38:a2:90:7f:db:0c:
                    a1:8b:bd:10:53:f4:02:26:9b:67:2b:90:b1:9c:18:
                    2a:6b:ac:23:7f:88:cd:bf:c8:d4:92:34:06:8c:1b:
                    23:04:e7:c5:2e:fe:a8:36:eb:af:0c:b1:49:6e:ab:
                    65:3b:55:72:d8:80:8b:da:6e:08:1b:3a:ca:c0:82:
                    d5:f8:eb:60:63:d8:bf:66:c3:cb:b4:e2:80:89:e9:
                    fa:ec:40:e2:49:14:1c:81:7e:65:b1:32:38:42:c4:
                    0b:9d:94:ca:25:4d:d2:77:37:3a:19:6b:a8:23:88:
                    9c:a7:61:3f:e7:d0:73:0d:7b:de:78:2f:2a:1a:f6:
                    9e:71:17:cc:aa:f2:81:d4:bd:28:38:21:dc:ca:d7:
                    db:c8:d1:8e:c2:a0:6f:cb:29:1c:dd:ef:b7:82:59:
                    0c:2b:f4:2b:ae:6b:3a:c6:82:ef:d7:a9:01:b1:bd:
                    20:a3:36:a0:df:5f:55:32:62:72:93:f4:4d:61:61:
                    6b:09:30:58:ba:7e:e3:15:1d:4d:05:f3:34:26:a2:
                    cc:95:95:e5:4c:a5:b0:02:13:45:dc:89:85:84:a9:
                    17:ee:c7:6d:d8:3a:d0:ec:69:d0:03:fa:bf:14:a8:
                    c0:87:75:0e:3e:72:f7:fb:1a:f9:67:63:bd:64:bf:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1E:D8:E5:80:84:16:19:10:E8:17:8F:46:1F:3E:8A:80:10:DF:9B
            X509v3 Authority Key Identifier:
                keyid:D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/34352e3137382e3234382e302f32322d3232203d3e203236393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:92:b0:35:4c:3f:0c:27:40:7a:2c:7a:a6:5c:73:a7:70:0f:
         46:b2:52:ea:58:37:31:7a:d7:c2:81:eb:5f:84:f8:15:a5:87:
         8c:65:1e:ba:7c:2f:fa:6d:4b:3f:40:a2:00:a3:fc:44:70:92:
         95:3e:54:92:1c:55:1a:2c:d7:9e:89:d0:6b:48:8b:a8:8d:fe:
         ef:5d:e4:7a:82:89:09:c6:c4:43:62:21:25:76:8d:35:3e:4f:
         79:a3:3c:9f:82:22:81:72:67:41:9f:ad:4a:97:a3:51:1c:fa:
         f1:a3:6f:b8:c6:f4:e2:bc:9a:8c:b1:0c:8e:53:66:a8:b0:96:
         61:e2:08:98:4c:7c:bd:d8:ac:f1:ee:76:65:46:62:ae:46:22:
         c0:e9:89:8f:7e:93:3f:6f:d8:14:39:b9:d1:0a:5c:58:3a:06:
         1c:f2:d6:ab:f9:e9:64:04:cc:b0:67:ea:24:61:b0:cf:ac:1c:
         1b:9d:dc:b7:85:f6:f1:c0:c0:6f:67:a4:c4:50:44:c0:b5:27:
         ad:ea:32:a3:4c:31:ef:06:29:0a:42:d0:48:e1:ef:28:2f:48:
         b6:f7:af:91:b8:e0:b1:17:d3:1f:0b:17:d5:53:99:96:b3:11:
         81:e3:e3:8e:e3:8c:88:a1:95:e9:3f:6c:e0:ec:07:08:7d:56:
         c0:8d:c3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org