Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/34352e372e3135322e302f32322d3332203d3e20323636353933.roa
File:                     34352e372e3135322e302f32322d3332203d3e20323636353933.roa (raw, json)
Hash identifier:          xS5gVNZooCuSZhPToGVywUuhlLoEVRF+ldwtWORjWaY=
Subject key identifier:   EB:B1:E8:83:BA:4A:23:26:E3:61:FA:28:41:F3:2C:97:CA:F4:0F:A9
Certificate issuer:       /CN=AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D
Certificate serial:       140FC576BAB2D9C2BC82A650C96387167D4A5063
Authority key identifier: AB:95:6F:7A:92:84:BB:A6:0E:AA:6D:BF:CF:12:6F:D5:FB:62:F3:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/34352e372e3135322e302f32322d3332203d3e20323636353933.roa
Signing time:             Mon 29 Jul 2024 17:44:00 +0000
ROA not before:           Mon 29 Jul 2024 17:39:00 +0000
ROA not after:            Mon 28 Jul 2025 17:44:00 +0000
asID:                     266593
IP address blocks:        45.7.152.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.crl
                          rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0f:c5:76:ba:b2:d9:c2:bc:82:a6:50:c9:63:87:16:7d:4a:50:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D
        Validity
            Not Before: Jul 29 17:39:00 2024 GMT
            Not After : Jul 28 17:44:00 2025 GMT
        Subject: CN=EBB1E883BA4A2326E361FA2841F32C97CAF40FA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:56:5d:7c:d7:b2:e4:17:78:02:dd:39:80:6a:
                    2c:e2:bd:58:8a:cd:d7:67:00:f5:f9:4d:a6:7d:de:
                    41:68:5b:17:f4:ea:48:d4:b0:db:2b:20:62:a3:46:
                    8c:fc:cb:44:48:f7:4e:07:2c:21:94:df:e4:0f:d3:
                    2b:08:b3:e6:48:5c:f1:ce:e4:b7:12:29:8f:90:fb:
                    ec:d9:5f:7a:d0:5d:ce:70:32:00:7c:17:41:ad:36:
                    93:e8:5a:a3:00:8a:01:07:d8:05:5a:75:a3:ee:f8:
                    3d:92:14:ad:1d:28:9d:31:fb:66:5f:43:ef:7d:4e:
                    19:58:21:d8:72:b8:a7:df:e9:c5:a0:27:90:ee:f8:
                    03:c1:5e:06:42:8d:c8:1b:a7:64:3c:e0:00:c5:5e:
                    8f:eb:7b:ba:06:88:96:bd:3f:01:a1:18:26:34:95:
                    9a:be:12:79:57:77:1d:bf:40:7a:b6:81:bf:11:67:
                    6a:05:5d:11:32:73:14:34:e6:06:9d:a7:49:69:6c:
                    fc:f8:c8:55:da:b1:39:b3:d0:f1:74:61:02:95:4c:
                    43:ef:e5:e7:37:7b:84:89:49:c7:25:60:76:c3:00:
                    f4:f5:ef:21:1a:30:50:cf:22:ff:62:33:6f:7d:ac:
                    4c:9e:69:4e:22:ec:83:c3:ab:15:94:6f:20:25:20:
                    58:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B1:E8:83:BA:4A:23:26:E3:61:FA:28:41:F3:2C:97:CA:F4:0F:A9
            X509v3 Authority Key Identifier:
                keyid:AB:95:6F:7A:92:84:BB:A6:0E:AA:6D:BF:CF:12:6F:D5:FB:62:F3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/34352e372e3135322e302f32322d3332203d3e20323636353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:15:4e:ee:ad:1a:5a:3e:6d:cd:e5:16:20:5a:af:91:89:a1:
         3f:43:50:71:40:d8:00:df:25:d3:57:26:b4:85:3b:c5:41:74:
         b9:4a:d1:f2:75:e0:86:5b:ec:e4:99:a4:90:9e:87:42:da:d6:
         86:2e:61:73:2f:af:d3:e9:2e:2b:1e:d1:e8:55:2d:b7:91:09:
         7c:96:74:a2:0d:1f:82:00:93:12:1c:c4:58:ea:65:4d:d2:ad:
         9e:f0:ca:92:b7:7d:7e:6e:b6:f0:9e:d1:3a:15:33:a5:b9:da:
         b8:f5:f3:22:35:e4:52:00:87:06:55:86:db:6d:75:4a:e5:6a:
         44:1c:50:ab:f8:90:14:a6:b8:2e:a5:c9:3c:47:d6:df:86:e0:
         36:b1:f4:a8:57:cf:10:23:55:8f:5f:f5:89:21:ea:26:3f:b3:
         3c:63:2c:1e:70:09:68:ed:b9:ae:fd:e3:21:21:5d:96:5c:88:
         04:4b:97:84:b2:f6:b5:ad:b6:0b:56:9e:42:91:ed:90:06:ef:
         38:b3:30:f5:e3:25:71:bb:87:2a:6b:24:db:45:1e:6a:13:86:
         fe:15:0a:4b:f0:35:eb:d8:9f:03:9b:1b:c4:95:01:21:a3:46:
         8c:e0:96:83:3d:30:68:19:6b:4f:82:51:94:2e:d3:3a:0b:46:
         39:2a:30:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:08 2024 by rpki-client on console-ams.rpki-client.org