Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/34352e3137382e3235302e302f32332d3233203d3e203236393035.roa
File:                     34352e3137382e3235302e302f32332d3233203d3e203236393035.roa (raw, json)
Hash identifier:          y3fIr9HkxktkLxFWbrXHv6hRn1tkFmBGW4rzKz2gnCE=
Subject key identifier:   B5:D2:95:7A:EB:09:20:57:7C:82:B5:B1:00:66:93:B3:04:DB:2A:FA
Certificate issuer:       /CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
Certificate serial:       6A209E3C8A8E8B705B8FBD427AFA7CA91490F578
Authority key identifier: D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/34352e3137382e3235302e302f32332d3233203d3e203236393035.roa
Signing time:             Thu 08 Aug 2024 12:27:44 +0000
ROA not before:           Thu 08 Aug 2024 12:22:44 +0000
ROA not after:            Thu 07 Aug 2025 12:27:44 +0000
asID:                     26905
IP address blocks:        45.178.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.crl
                          rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:20:9e:3c:8a:8e:8b:70:5b:8f:bd:42:7a:fa:7c:a9:14:90:f5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
        Validity
            Not Before: Aug  8 12:22:44 2024 GMT
            Not After : Aug  7 12:27:44 2025 GMT
        Subject: CN=B5D2957AEB0920577C82B5B1006693B304DB2AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:86:05:4b:1d:f0:ee:c8:48:61:e3:3d:96:91:
                    2a:52:21:0f:b4:b7:99:bd:8d:b1:19:94:84:7b:12:
                    70:4a:5b:b2:ac:65:fd:18:fe:c1:5a:21:f6:1d:a5:
                    51:f0:a5:d2:2e:72:4e:b0:de:0d:7c:57:27:0e:39:
                    21:6b:8b:b2:f3:c6:d2:e0:d3:66:d3:aa:77:88:4e:
                    82:fe:4a:d4:77:3d:c0:6d:b7:6e:6a:5e:69:6d:7b:
                    bc:a0:87:a0:60:03:43:b1:6d:42:47:83:01:09:ba:
                    73:e3:e1:f8:45:85:6a:46:54:87:d1:3d:4c:41:7c:
                    67:22:2f:36:ea:94:7a:d1:9d:d7:68:8d:54:70:6d:
                    44:a7:19:8e:93:cb:da:b7:79:e3:dc:49:25:84:b4:
                    91:fe:00:37:f1:68:21:b2:39:6b:72:55:22:37:1b:
                    6f:ab:c1:94:43:66:4a:5f:c6:89:41:ce:92:3d:af:
                    03:ba:a3:db:27:d0:75:8d:02:0b:71:b2:86:a4:88:
                    51:66:a2:e5:ae:5f:f1:58:74:5b:b6:aa:d8:61:25:
                    91:6e:69:1f:a5:23:f7:2b:1e:3a:c1:cf:e0:04:37:
                    27:dd:c1:cc:f6:f0:0a:21:4c:06:60:6f:00:e7:5d:
                    59:e2:d4:50:b7:e9:c7:d2:f1:56:93:cf:45:12:47:
                    ec:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D2:95:7A:EB:09:20:57:7C:82:B5:B1:00:66:93:B3:04:DB:2A:FA
            X509v3 Authority Key Identifier:
                keyid:D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/34352e3137382e3235302e302f32332d3233203d3e203236393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:40:88:01:43:6f:95:fe:0d:2b:b0:83:79:40:a2:04:5b:af:
         e7:b7:ec:95:ce:2d:b7:46:b5:cd:6a:07:4b:de:c6:08:79:5b:
         84:6b:b9:12:c7:20:ce:4e:2f:4c:43:89:38:8f:fb:d7:51:a7:
         88:72:be:4a:2e:5a:37:19:cb:7c:27:e3:22:71:94:b8:4b:bc:
         6e:82:a0:d3:b3:8f:04:6f:51:a8:5d:4f:2a:0e:5e:d6:3d:e2:
         d6:95:90:63:8f:3a:44:b8:e5:7a:0a:25:f6:a0:18:08:12:09:
         25:92:57:ea:b1:e0:b2:0a:61:3a:1d:d9:c2:d3:f1:fc:28:a1:
         1a:d7:a1:70:1f:f4:63:1d:df:dd:be:1f:b4:89:2c:62:30:39:
         2d:60:5d:b0:4c:ba:8d:81:ea:58:b2:9a:d4:e2:cd:d9:7d:cd:
         0e:29:57:7b:e1:3a:94:02:8c:e5:11:5f:5f:a0:59:96:fb:0b:
         ae:f1:df:5d:0f:c2:9c:a7:39:d8:31:56:cc:1b:3d:8c:9b:d3:
         d7:ac:ac:01:7b:82:66:20:07:e3:f6:6d:0a:5f:1b:7a:40:65:
         75:4b:75:b4:7f:a6:d6:e5:00:34:b1:7c:f8:6d:68:12:35:fb:
         a5:5e:ef:73:93:63:3f:f1:82:75:7f:d7:a3:15:5b:53:e6:21:
         be:4a:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org