Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/34352e3232342e3136302e302f32322d3234203d3e20323637363631.roa
File:                     34352e3232342e3136302e302f32322d3234203d3e20323637363631.roa (raw, json)
Hash identifier:          3n0b8x4Kza7VjaYAIsLQie7aQIQa0kMe6rGxX5+wGsk=
Subject key identifier:   06:25:F3:7F:02:30:5B:0E:BF:8F:8C:4B:18:A7:D4:38:3D:7F:CB:7E
Certificate issuer:       /CN=B6D80FE3D906262A28CF60595613CE6FB40B607C
Certificate serial:       66E4DF93214ACA439ECED747C88FC5828B054D88
Authority key identifier: B6:D8:0F:E3:D9:06:26:2A:28:CF:60:59:56:13:CE:6F:B4:0B:60:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6D80FE3D906262A28CF60595613CE6FB40B607C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/34352e3232342e3136302e302f32322d3234203d3e20323637363631.roa
Signing time:             Fri 15 Nov 2024 00:20:02 +0000
ROA not before:           Fri 15 Nov 2024 00:15:02 +0000
ROA not after:            Fri 14 Nov 2025 00:20:02 +0000
asID:                     267661
IP address blocks:        45.224.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/B6D80FE3D906262A28CF60595613CE6FB40B607C.crl
                          rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/B6D80FE3D906262A28CF60595613CE6FB40B607C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6D80FE3D906262A28CF60595613CE6FB40B607C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e4:df:93:21:4a:ca:43:9e:ce:d7:47:c8:8f:c5:82:8b:05:4d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6D80FE3D906262A28CF60595613CE6FB40B607C
        Validity
            Not Before: Nov 15 00:15:02 2024 GMT
            Not After : Nov 14 00:20:02 2025 GMT
        Subject: CN=0625F37F02305B0EBF8F8C4B18A7D4383D7FCB7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:47:95:db:19:cc:5e:06:58:69:5e:57:56:
                    3a:c7:a4:88:cb:60:c4:67:c4:0a:b4:02:1f:b8:f0:
                    ee:85:83:bf:d2:28:16:36:6d:a9:0f:2b:87:2b:7a:
                    bb:9b:2c:ce:52:0f:e3:03:99:6a:d7:27:8d:40:fc:
                    4f:07:04:73:d7:c2:b0:54:ae:68:7d:f7:6e:d6:48:
                    d8:a3:9b:49:fc:9c:d5:b7:44:df:4e:8d:72:ab:6c:
                    9c:2a:57:c2:b8:7f:b6:dc:10:97:3a:f5:78:88:70:
                    5c:5f:32:55:85:35:07:01:ad:09:93:83:41:89:3b:
                    b1:2e:9d:dd:69:d5:97:97:8b:10:41:84:85:1a:a4:
                    bb:3e:84:05:5f:1e:b5:4a:57:e1:12:a1:42:88:bd:
                    07:33:55:4c:8e:b0:27:45:bb:26:27:ed:17:dc:34:
                    10:f3:d2:77:3d:39:be:0f:5d:b4:37:04:85:02:de:
                    e0:a5:26:23:18:31:41:82:ae:8c:e5:92:26:69:7a:
                    90:ae:eb:55:5e:f8:d0:fa:66:65:30:b7:05:c3:73:
                    e0:f4:6a:84:fb:d1:c3:c6:55:b0:99:cc:6d:ac:2b:
                    97:48:60:88:82:db:7a:16:b2:d0:64:91:9d:79:68:
                    13:dc:9c:17:4a:c1:16:c5:6b:c1:a6:7b:a9:31:4c:
                    45:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:25:F3:7F:02:30:5B:0E:BF:8F:8C:4B:18:A7:D4:38:3D:7F:CB:7E
            X509v3 Authority Key Identifier:
                keyid:B6:D8:0F:E3:D9:06:26:2A:28:CF:60:59:56:13:CE:6F:B4:0B:60:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/B6D80FE3D906262A28CF60595613CE6FB40B607C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6D80FE3D906262A28CF60595613CE6FB40B607C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/34352e3232342e3136302e302f32322d3234203d3e20323637363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:9b:d1:1a:f9:c0:65:c5:6b:3d:25:48:10:64:4f:82:69:6d:
         22:9c:29:7b:cc:21:a5:0e:11:a0:72:b0:9b:ab:73:8f:5f:44:
         f3:b7:1c:4e:0f:5e:b2:68:a1:cf:a2:d4:fc:18:81:7e:46:8c:
         62:0a:c1:4c:35:ca:db:50:38:a1:65:76:8b:7b:18:8d:6c:9b:
         1e:98:36:e8:cd:73:df:ca:93:63:36:21:85:4c:13:b1:21:34:
         0f:42:2b:05:06:22:0a:e5:4e:4b:74:92:e5:c3:ea:0c:38:ca:
         5a:c8:36:20:5e:27:f8:76:5f:eb:4d:fc:8e:04:37:96:89:af:
         1e:bc:9a:dc:55:6f:6b:5f:57:08:eb:6a:a7:38:21:a8:cf:cd:
         e0:55:0c:2f:aa:6d:b3:10:ed:56:6e:79:92:dc:f5:c5:82:98:
         a6:d9:dc:2a:0a:2d:23:04:28:d9:b5:85:0b:90:f9:a5:84:3d:
         86:2c:e5:eb:a5:47:9a:b1:c1:e4:00:24:4f:91:26:b7:8e:24:
         69:6d:08:0e:63:08:ad:54:da:5f:ee:26:6b:a7:3f:14:2b:46:
         c6:be:32:46:7a:15:28:ea:b2:3a:20:80:b7:9a:d7:2f:67:d8:
         ed:bb:e4:97:24:cb:87:85:5c:bb:15:17:38:2b:4b:1d:08:e7:
         ed:f7:3d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:54 2024 by rpki-client on console-fra.rpki-client.org