Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35352e302f32342d3234203d3e20323637393931.roa
File:                     34352e3136372e35352e302f32342d3234203d3e20323637393931.roa (raw, json)
Hash identifier:          kM3tXQJ2ahhTxRdyxQM1nzLhXTEUAsRryiKyrsUKFIY=
Subject key identifier:   FD:6D:D7:D2:55:7D:49:DE:7B:CD:6A:DF:0D:2A:C7:81:5A:7C:7A:7E
Certificate issuer:       /CN=1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F
Certificate serial:       7E71E1E069171D381CFBF894CAF454D4EB5040C8
Authority key identifier: 1F:73:8F:23:C0:91:FA:9E:A9:5E:B9:9A:0B:6D:76:AC:F2:55:3D:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35352e302f32342d3234203d3e20323637393931.roa
Signing time:             Tue 29 Oct 2024 21:13:14 +0000
ROA not before:           Tue 29 Oct 2024 21:08:14 +0000
ROA not after:            Tue 28 Oct 2025 21:13:14 +0000
asID:                     267991
IP address blocks:        45.167.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:71:e1:e0:69:17:1d:38:1c:fb:f8:94:ca:f4:54:d4:eb:50:40:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F
        Validity
            Not Before: Oct 29 21:08:14 2024 GMT
            Not After : Oct 28 21:13:14 2025 GMT
        Subject: CN=FD6DD7D2557D49DE7BCD6ADF0D2AC7815A7C7A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:74:00:10:f8:35:53:12:d9:76:aa:ff:2b:
                    18:8c:69:ea:b0:ac:ed:f2:79:31:d5:22:c4:ce:af:
                    c5:aa:3a:8b:9f:0e:59:be:19:a7:f7:62:7b:68:af:
                    01:fa:a6:4e:6e:f9:d6:76:27:09:82:34:32:72:64:
                    88:9d:63:f5:76:1d:cf:1e:f3:29:d3:76:20:fe:68:
                    09:4b:66:86:4b:3e:fa:57:3e:c6:10:1c:9f:7f:61:
                    d4:0a:68:a5:b3:1d:f2:e2:88:eb:7c:31:c9:a4:96:
                    5f:71:95:d1:ff:2b:0b:dd:e4:c2:9b:ed:3f:6f:da:
                    8c:e7:b8:19:d1:5d:aa:f0:65:8d:ce:ba:1d:8d:c0:
                    4a:90:92:fc:5e:c5:f5:58:58:e8:19:ba:df:3a:02:
                    38:22:ba:f7:de:5c:5f:0f:1f:bd:28:e9:c8:f0:f0:
                    9a:15:4d:56:65:43:13:c1:27:61:ac:f8:43:a2:9d:
                    da:a2:d1:1c:2c:d3:b9:39:d3:80:07:03:c3:a3:7e:
                    67:f8:87:bf:ca:f4:f4:0c:a7:cd:89:44:26:23:00:
                    f5:2f:5c:09:e8:c8:72:3d:a2:b9:5d:b0:2c:4b:db:
                    a2:28:92:a2:be:a3:32:41:e8:85:ef:e1:8b:c9:de:
                    7f:f8:c1:b1:91:21:3f:af:90:07:3b:90:70:8d:02:
                    d8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6D:D7:D2:55:7D:49:DE:7B:CD:6A:DF:0D:2A:C7:81:5A:7C:7A:7E
            X509v3 Authority Key Identifier:
                keyid:1F:73:8F:23:C0:91:FA:9E:A9:5E:B9:9A:0B:6D:76:AC:F2:55:3D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F738F23C091FA9EA95EB99A0B6D76ACF2553D6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35352e302f32342d3234203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:a5:a9:56:03:3c:c1:fa:31:4e:d4:d1:16:f4:a6:f4:26:28:
         90:6f:a0:79:0b:ce:48:1e:96:90:ef:bb:56:71:13:a2:dc:30:
         70:9b:04:6b:b8:a3:69:0e:09:12:83:5a:99:86:19:35:61:75:
         01:2c:91:05:9b:95:7f:dc:10:46:ba:fa:46:3a:01:bd:95:38:
         20:c5:fe:0f:c1:30:76:e9:aa:66:76:03:db:48:0b:59:ea:7d:
         54:77:be:2d:3a:12:47:e5:fb:05:77:62:ab:20:e8:c1:b5:fc:
         40:36:ab:d0:cc:3d:b3:dc:9e:cf:7b:ec:c6:a7:f8:0b:9f:4b:
         92:93:6a:98:b3:ef:5a:ec:3f:aa:14:4d:09:58:a0:5b:86:8f:
         aa:e8:a3:58:97:10:9f:e8:e4:39:61:ae:58:1f:96:f7:1f:3d:
         63:95:33:14:ff:b8:64:80:29:44:72:04:32:90:07:bd:33:90:
         57:1c:7f:1a:19:07:90:f9:33:a9:85:02:c9:7a:47:c7:dc:80:
         c9:05:74:0a:35:51:f1:f3:80:30:7b:1c:10:02:0e:b3:31:b5:
         01:04:f8:bd:04:27:b6:0b:ba:22:3d:35:e2:69:51:a8:b7:81:
         ca:ea:34:a9:f3:f5:ac:b4:13:66:e2:6f:d4:3c:5b:fb:1d:09:
         61:4a:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:03 2024 by rpki-client on console-fra.rpki-client.org