Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/34352e3137382e3234382e302f32332d3233203d3e203236393035.roa
File:                     34352e3137382e3234382e302f32332d3233203d3e203236393035.roa (raw, json)
Hash identifier:          HAaZkPS2ayN1M2VQO4j/TUszdTpyve9pVaPvvMrm4l4=
Subject key identifier:   C1:29:D9:5F:C7:9F:31:61:87:6B:B0:C7:A9:9D:11:C9:52:24:AF:AA
Certificate issuer:       /CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
Certificate serial:       04FAA7324A166CA3B7F72B3E21D4399E345393C9
Authority key identifier: D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/34352e3137382e3234382e302f32332d3233203d3e203236393035.roa
Signing time:             Thu 08 Aug 2024 12:27:41 +0000
ROA not before:           Thu 08 Aug 2024 12:22:41 +0000
ROA not after:            Thu 07 Aug 2025 12:27:41 +0000
asID:                     26905
IP address blocks:        45.178.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.crl
                          rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fa:a7:32:4a:16:6c:a3:b7:f7:2b:3e:21:d4:39:9e:34:53:93:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
        Validity
            Not Before: Aug  8 12:22:41 2024 GMT
            Not After : Aug  7 12:27:41 2025 GMT
        Subject: CN=C129D95FC79F3161876BB0C7A99D11C95224AFAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:8e:62:e2:25:50:61:ee:4d:4e:36:f0:c4:
                    62:17:33:ea:04:c7:b3:e3:a7:de:27:28:61:5e:22:
                    3b:56:54:d0:ce:df:60:62:47:14:a6:bc:f8:14:fc:
                    16:e3:7b:cb:bd:93:17:eb:53:c8:6b:69:bd:a3:ea:
                    bb:e2:9c:c8:30:a1:54:b0:a7:d9:8e:b0:cb:20:f5:
                    a6:d2:ce:8e:fa:ca:a2:c5:5b:e3:b3:64:73:a9:e0:
                    03:bd:55:1d:66:c1:2c:8b:31:79:37:1c:97:33:da:
                    d6:95:4f:97:e2:dc:b6:53:71:c9:de:aa:ab:f7:a6:
                    18:9d:4e:77:67:ea:b3:88:03:09:f7:51:37:d6:fb:
                    06:12:a9:40:2b:83:51:dc:4f:f8:73:c8:44:9b:ea:
                    de:dc:c1:f4:fd:5f:55:f3:dd:7a:29:4f:48:ac:14:
                    37:8b:6e:eb:17:25:3c:b5:c7:ab:95:c1:09:21:c5:
                    c3:9d:20:13:f1:e4:14:7d:82:da:f9:be:3f:8f:8b:
                    75:ec:25:a8:16:89:90:6d:5c:1d:bc:46:a6:ff:c2:
                    cf:1a:af:13:0d:81:b5:a7:10:c6:5e:d9:57:3b:ce:
                    af:2a:cb:8c:5c:0c:25:0a:6b:e4:4b:ce:35:ba:c4:
                    3b:2e:6d:e9:fc:f5:a8:f0:0c:9c:06:7d:a6:63:98:
                    2a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:29:D9:5F:C7:9F:31:61:87:6B:B0:C7:A9:9D:11:C9:52:24:AF:AA
            X509v3 Authority Key Identifier:
                keyid:D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/34352e3137382e3234382e302f32332d3233203d3e203236393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:38:cb:3e:ef:b3:a3:f4:70:84:52:00:49:38:29:46:dd:06:
         8a:d1:92:95:a3:08:e1:4b:58:3c:b3:2b:c3:bb:fc:5e:42:89:
         d0:9d:c0:3d:5d:b3:1d:1a:3f:ae:a4:9d:bf:dd:b6:99:88:3d:
         72:40:17:1c:a2:f8:72:aa:90:2d:01:f4:0f:6b:30:6f:34:fc:
         9d:fc:5b:89:a4:b4:c3:de:7b:d1:b0:c9:68:e2:ec:9d:71:01:
         f6:f6:67:6a:81:14:22:e3:4c:0b:01:c7:6c:a8:43:8d:ea:b1:
         70:50:c8:35:64:54:3d:2c:ad:33:21:95:10:3c:60:1a:42:45:
         8b:af:7e:8a:b2:47:b3:63:e0:de:e9:00:d1:97:f9:6b:a3:30:
         f7:d7:65:ac:b9:b5:56:61:f0:8f:6b:0c:e3:69:8a:14:49:6c:
         ea:6b:ee:01:69:5e:93:0b:21:c8:15:16:be:75:9a:8e:23:ba:
         55:60:ed:26:79:30:34:f5:6e:20:a7:fe:98:a4:39:f9:56:88:
         24:a5:89:6e:76:78:47:d9:44:47:f8:ba:40:05:df:9c:9b:bc:
         c2:c9:9f:f0:61:39:60:d2:c9:4a:f1:97:8b:54:ad:46:4a:29:
         bd:24:7c:1b:c5:3a:50:11:16:31:1d:59:6c:ca:b8:86:7c:b1:
         a8:d7:b6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org