Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/34352e372e3135362e302f32332d3233203d3e20323632373239.roa
File:                     34352e372e3135362e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          Y1UhHt5Ph0JLJqNLQm4s9ZaKm+6DXgKSDsOuPWpfIiI=
Subject key identifier:   D4:70:EC:1E:FA:75:9F:06:92:39:1E:5D:F4:F6:57:C4:02:C7:35:DD
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       72278E3B59E03A9420FA6B2F58B666ACBC20DA1E
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/34352e372e3135362e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:24 +0000
ROA not before:           Mon 15 Jul 2024 13:37:24 +0000
ROA not after:            Mon 14 Jul 2025 13:42:24 +0000
asID:                     262729
IP address blocks:        45.7.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:27:8e:3b:59:e0:3a:94:20:fa:6b:2f:58:b6:66:ac:bc:20:da:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:24 2024 GMT
            Not After : Jul 14 13:42:24 2025 GMT
        Subject: CN=D470EC1EFA759F0692391E5DF4F657C402C735DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:0f:81:f4:61:de:4c:25:9c:82:fa:55:f4:
                    b8:7a:2e:84:16:30:2d:4e:8f:a2:3c:41:12:56:99:
                    78:7d:00:b0:bb:1d:8d:ef:eb:30:53:c7:35:32:73:
                    15:05:cb:36:fe:cf:7f:6e:f9:68:b4:5b:3f:c3:b4:
                    14:c1:b3:b6:87:e9:ef:8f:18:cd:8f:c5:1f:e1:d0:
                    cc:16:f3:75:7f:4c:47:70:80:b7:37:44:29:53:b9:
                    15:55:fa:3b:64:80:ca:63:c7:63:fc:25:22:92:92:
                    57:7d:83:9f:34:0d:9b:32:d3:4b:71:43:3d:99:eb:
                    9a:1d:5e:88:ed:a3:85:d1:68:9d:d9:6e:d3:53:e4:
                    95:0b:ef:e8:9a:e9:6f:4e:91:08:90:6e:c2:ae:e5:
                    78:32:a4:c1:ec:d1:eb:d5:1d:10:07:eb:d2:41:04:
                    4b:52:3f:a7:42:1d:77:21:50:0e:74:df:95:a4:25:
                    cc:80:10:91:c1:b6:f8:a2:7a:71:30:a5:3c:44:7e:
                    f4:6d:98:5f:57:14:d9:08:6f:19:5d:bc:be:9d:31:
                    24:f7:48:61:f3:e1:44:ad:30:f6:7d:7c:b5:b1:a7:
                    58:a5:3f:1a:4f:d9:9a:27:cf:f3:d7:62:eb:3c:66:
                    8c:17:45:7e:dc:c8:a1:81:2b:b1:ef:0c:e2:e4:c0:
                    0f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:70:EC:1E:FA:75:9F:06:92:39:1E:5D:F4:F6:57:C4:02:C7:35:DD
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/34352e372e3135362e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:56:47:d3:47:42:83:a5:08:0d:ed:c3:5e:da:10:b8:7a:bc:
         ed:03:6a:77:f3:62:75:4e:15:0e:d3:c3:23:3a:ee:16:9c:e9:
         0e:a8:15:4d:fe:fb:06:8f:a4:8e:22:b3:42:e0:65:1a:31:37:
         56:b2:b7:49:85:59:bd:0b:1d:4d:97:ea:e2:37:e3:6a:2e:a8:
         f1:61:d1:fd:38:f8:a2:e1:50:93:d5:6b:aa:06:6c:cb:cd:e2:
         5a:5a:67:8a:08:29:64:4b:25:e4:0f:e0:95:9d:c3:40:12:dc:
         41:d1:80:c8:0a:b0:0d:fb:c8:61:10:0c:f8:04:78:06:c5:0f:
         55:06:d5:28:e5:06:83:a7:19:62:bb:15:86:6d:fa:97:61:4a:
         ac:26:60:35:25:6d:76:f2:aa:71:4a:7d:8a:67:ae:77:c6:57:
         9b:c7:17:e2:ac:e2:92:40:be:1c:43:de:d2:87:6e:7d:e4:d2:
         2c:c3:84:f9:f6:8d:f8:00:44:3e:44:f7:c5:42:ac:91:26:d2:
         59:bb:a3:d6:6b:0f:8e:5b:40:4b:28:a1:b0:61:e8:5f:64:18:
         d4:5d:c7:1b:4e:ed:40:72:5e:0d:91:48:2f:f1:ed:33:1b:86:
         2e:d6:6d:86:bb:cf:70:c8:1b:59:12:b0:ae:d4:dc:64:1d:44:
         f1:5b:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:40 2024 by rpki-client on console-fra.rpki-client.org