Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa
File:                     34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa (raw, json)
Hash identifier:          xG4+sS+gsA1DAj8MNrh/QjPo5b+w06VsEhYvSU0LhdY=
Subject key identifier:   FB:4F:45:16:C3:6E:BF:44:3C:CA:27:22:FD:A9:4C:24:B0:80:72:0E
Certificate issuer:       /CN=450D2460BB579B573599E83A5DA3018696A0F8F6
Certificate serial:       3B4236EA23AFC75544E1E1792576B41B8A4EDFBD
Authority key identifier: 45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa
Signing time:             Mon 12 Aug 2024 17:16:49 +0000
ROA not before:           Mon 12 Aug 2024 17:11:49 +0000
ROA not after:            Mon 11 Aug 2025 17:16:49 +0000
asID:                     271632
IP address blocks:        45.172.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl
                          rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:42:36:ea:23:af:c7:55:44:e1:e1:79:25:76:b4:1b:8a:4e:df:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D2460BB579B573599E83A5DA3018696A0F8F6
        Validity
            Not Before: Aug 12 17:11:49 2024 GMT
            Not After : Aug 11 17:16:49 2025 GMT
        Subject: CN=FB4F4516C36EBF443CCA2722FDA94C24B080720E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:18:ba:91:42:a9:e6:07:11:31:3b:02:44:61:
                    51:a1:e2:05:15:27:28:ca:74:49:c5:94:8f:de:9a:
                    05:84:11:95:87:c0:6b:6c:51:46:9c:58:12:e3:6e:
                    96:0e:cc:88:c7:75:70:02:ee:5c:e2:97:38:7a:0e:
                    6b:70:e3:9e:42:a0:57:a7:46:cb:49:32:33:13:58:
                    48:83:79:86:38:83:fd:cb:9c:13:93:64:64:22:f5:
                    43:d1:b7:07:25:0e:5f:ce:df:54:e0:0e:30:ac:8a:
                    52:e6:53:6f:3e:ef:da:a1:25:fc:d7:96:67:22:e0:
                    fe:e8:ee:65:42:43:1a:1e:fe:8c:97:c5:db:9e:4b:
                    ee:de:9d:dc:99:79:71:72:50:57:24:ec:20:39:7a:
                    1f:b1:73:11:16:4a:d1:94:1e:21:4e:44:ec:eb:1b:
                    a9:9f:22:19:1b:92:ea:3b:56:d9:75:f3:6d:ca:c9:
                    e6:6a:83:8c:e2:38:03:a8:dd:e4:36:7f:5e:0f:ba:
                    f6:9e:7a:bf:46:cd:8f:f5:fa:56:df:41:c3:c7:6c:
                    98:be:6a:e1:c6:bd:5e:9d:69:c8:e7:d8:af:19:9d:
                    01:77:f0:34:74:13:09:10:79:0c:c0:5f:09:d0:46:
                    fd:97:a3:36:cc:4c:1e:42:a1:2f:de:44:36:74:c9:
                    ee:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4F:45:16:C3:6E:BF:44:3C:CA:27:22:FD:A9:4C:24:B0:80:72:0E
            X509v3 Authority Key Identifier:
                keyid:45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:c3:dc:d2:94:14:87:a1:f1:2f:1d:97:11:10:5e:ed:c0:15:
         fb:6e:ef:ed:9e:32:2e:90:22:45:15:fc:6b:d1:ab:7d:e9:a6:
         91:8b:0d:f8:19:8d:df:4c:94:cd:43:96:e2:5c:ae:11:ec:b8:
         00:fa:5c:14:c1:89:7c:6b:aa:f1:97:b6:89:49:e8:f6:7d:94:
         df:19:15:04:ab:1a:18:92:55:6b:b0:cf:8b:e9:07:0b:6c:6c:
         05:5c:a3:ca:95:04:bb:87:36:2b:27:a0:21:aa:fe:a2:67:92:
         b4:c5:f9:55:9b:10:d2:10:85:91:37:43:a0:dd:37:8f:f3:44:
         84:a8:a8:57:1b:c2:b7:50:78:33:be:c1:9f:22:23:53:d6:7c:
         45:89:9f:2f:05:5c:3e:70:be:84:02:e0:39:1e:7e:a9:d0:16:
         47:9f:0d:6f:a8:f4:8f:64:6a:29:d0:ad:63:da:8a:63:5e:d9:
         12:f4:13:43:1f:32:12:dc:33:1e:f3:35:f2:50:1c:9e:19:b0:
         b0:a5:ba:29:77:b0:c9:e9:d2:6a:61:60:e2:a4:98:77:e1:39:
         7a:d1:8e:7e:57:2b:c4:2f:e9:da:a7:80:31:f9:1f:76:60:80:
         d8:0e:9c:72:11:f3:b7:cf:91:14:ad:09:f6:6a:89:ff:11:98:
         b5:e7:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:06 2024 by rpki-client on console-ams.rpki-client.org