Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/34352e352e33322e302f32322d3332203d3e20323636393331.roa
File:                     34352e352e33322e302f32322d3332203d3e20323636393331.roa (raw, json)
Hash identifier:          xIeBotPlErwpjywexJDvnG87+fwV9MbGZDLs0AJJC/Q=
Subject key identifier:   F0:C0:38:26:33:82:65:90:79:0A:42:0F:FA:0F:D6:BD:89:10:D5:1B
Certificate issuer:       /CN=7B7097B123E787E45E7EC3AFDA786857816AD7EC
Certificate serial:       63C339430A679BFFF3569D9075B57DA8B7413C00
Authority key identifier: 7B:70:97:B1:23:E7:87:E4:5E:7E:C3:AF:DA:78:68:57:81:6A:D7:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7097B123E787E45E7EC3AFDA786857816AD7EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/34352e352e33322e302f32322d3332203d3e20323636393331.roa
Signing time:             Fri 25 Oct 2024 04:39:34 +0000
ROA not before:           Fri 25 Oct 2024 04:34:34 +0000
ROA not after:            Fri 24 Oct 2025 04:39:34 +0000
asID:                     266931
IP address blocks:        45.5.32.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/7B7097B123E787E45E7EC3AFDA786857816AD7EC.crl
                          rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/7B7097B123E787E45E7EC3AFDA786857816AD7EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7097B123E787E45E7EC3AFDA786857816AD7EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c3:39:43:0a:67:9b:ff:f3:56:9d:90:75:b5:7d:a8:b7:41:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B7097B123E787E45E7EC3AFDA786857816AD7EC
        Validity
            Not Before: Oct 25 04:34:34 2024 GMT
            Not After : Oct 24 04:39:34 2025 GMT
        Subject: CN=F0C0382633826590790A420FFA0FD6BD8910D51B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:2d:98:cb:3b:5a:de:f6:52:ac:74:4f:23:
                    ac:06:84:5d:e0:61:a8:6f:fc:2a:9f:ef:b3:98:a4:
                    01:fc:14:03:be:0e:95:31:33:dd:37:2b:c3:61:31:
                    b1:3f:b6:33:f1:d1:af:d5:aa:5d:3d:ec:ef:75:7a:
                    1a:c3:14:98:17:e0:ca:69:09:c8:f8:4e:56:ad:b7:
                    03:07:11:41:79:b4:03:b6:42:c6:0a:5e:93:78:13:
                    30:a2:c0:0f:eb:f6:f8:50:87:db:86:eb:45:d7:fc:
                    88:57:bb:47:7e:97:0e:7d:5a:08:6e:52:20:b4:b5:
                    cc:ae:fd:9a:79:31:f4:b4:94:3d:f4:c0:fa:44:05:
                    6f:ff:f1:db:96:07:aa:f2:f1:94:a5:f4:2e:81:10:
                    ae:33:e3:e4:74:3a:39:18:3d:48:91:64:3d:bd:0a:
                    00:93:8c:3f:a9:7e:fc:4a:a1:f0:fc:b7:10:e4:68:
                    98:d9:48:95:ae:f7:f1:d0:2d:1e:8e:67:ed:d4:f4:
                    77:b2:4d:97:7d:5a:a6:e0:64:6e:d7:e2:8b:84:5f:
                    f0:ef:1e:04:1a:af:27:07:9c:55:1d:78:de:c1:a3:
                    85:da:bd:a1:88:d0:84:d1:6e:e5:d3:e8:ac:f4:19:
                    06:ac:77:c7:66:75:72:9c:d3:58:24:85:c3:c4:bf:
                    27:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C0:38:26:33:82:65:90:79:0A:42:0F:FA:0F:D6:BD:89:10:D5:1B
            X509v3 Authority Key Identifier:
                keyid:7B:70:97:B1:23:E7:87:E4:5E:7E:C3:AF:DA:78:68:57:81:6A:D7:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/7B7097B123E787E45E7EC3AFDA786857816AD7EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7097B123E787E45E7EC3AFDA786857816AD7EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/34352e352e33322e302f32322d3332203d3e20323636393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:41:f6:73:88:03:61:42:68:85:95:8c:71:87:11:97:ef:26:
         8b:93:68:b3:72:d7:a3:24:0b:45:3b:97:16:fb:f6:ad:b3:fb:
         65:cc:71:28:b9:d0:12:d1:10:c0:5d:e5:b9:ff:35:67:6e:4f:
         76:fa:cc:db:67:73:03:02:be:db:28:fe:ad:37:0e:3d:06:dd:
         3e:8a:c8:1c:c7:06:2a:50:86:d1:48:03:08:79:40:96:60:e9:
         89:49:3d:b8:7b:46:be:6d:b0:f7:45:a1:da:3e:b4:f6:93:1f:
         b7:2a:44:4d:67:88:56:2e:9c:da:8d:ca:44:ff:e6:b9:d4:37:
         31:f9:a7:19:1b:22:18:3d:e1:79:f4:53:14:f6:65:a1:02:4d:
         5e:09:9b:77:59:70:2f:06:0d:2b:83:b7:04:61:8c:ea:e8:2c:
         e1:4c:7e:9a:d6:e2:a6:47:ac:db:7a:41:eb:f4:b7:b6:f7:b5:
         3f:96:e6:2f:3e:e1:19:7b:7e:c2:a1:07:f9:85:5f:1f:ba:38:
         94:6d:c9:d5:57:d3:61:f6:5c:a4:e9:34:9a:ef:ec:a3:9d:6c:
         04:f7:16:25:69:18:45:9c:2e:99:dc:c9:22:a5:6d:90:f0:78:
         50:3c:e8:fe:a4:2d:cd:e0:03:a7:c6:78:07:5f:48:0f:09:f9:
         2e:f8:43:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:29 2024 by rpki-client on console-ams.rpki-client.org