Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/34352e3136322e372e302f32342d3234203d3e20323638343932.roa
File:                     34352e3136322e372e302f32342d3234203d3e20323638343932.roa (raw, json)
Hash identifier:          6oFQ+6xR4eQ25uBgZB9OVv7tl8Z/ImPPFFRbm8w9Fzk=
Subject key identifier:   F9:B4:C6:EB:33:D3:D5:A8:02:1B:53:FA:C1:87:84:20:C6:BE:3A:BC
Certificate issuer:       /CN=862E6B4A1CBE91545E258A4AB625E41F54CC86BE
Certificate serial:       435DC57F1CF195EB7E8A7BF136C9FABA46648D9E
Authority key identifier: 86:2E:6B:4A:1C:BE:91:54:5E:25:8A:4A:B6:25:E4:1F:54:CC:86:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/34352e3136322e372e302f32342d3234203d3e20323638343932.roa
Signing time:             Thu 04 Jul 2024 23:43:16 +0000
ROA not before:           Thu 04 Jul 2024 23:38:16 +0000
ROA not after:            Thu 03 Jul 2025 23:43:16 +0000
asID:                     268492
IP address blocks:        45.162.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.crl
                          rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 18:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5d:c5:7f:1c:f1:95:eb:7e:8a:7b:f1:36:c9:fa:ba:46:64:8d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862E6B4A1CBE91545E258A4AB625E41F54CC86BE
        Validity
            Not Before: Jul  4 23:38:16 2024 GMT
            Not After : Jul  3 23:43:16 2025 GMT
        Subject: CN=F9B4C6EB33D3D5A8021B53FAC1878420C6BE3ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9d:80:92:4e:f4:07:3f:75:22:ea:b0:7e:18:
                    5d:df:e4:b5:20:99:64:22:e9:e0:7e:ef:ed:d7:d4:
                    ba:82:92:db:c7:55:cf:9b:1e:f3:2b:c4:0d:cc:f5:
                    22:b0:5a:cf:08:0d:4a:6c:59:cf:d5:00:c7:8d:ab:
                    a2:e0:51:cd:b9:5d:e1:2f:27:86:15:79:ff:f2:5a:
                    eb:0f:53:4d:d5:50:9c:1a:83:92:9c:a6:82:ac:b4:
                    3a:ff:57:fe:c0:29:e3:c1:6d:f5:2b:7e:e9:26:1a:
                    b8:12:99:df:1b:a8:06:16:4b:91:f1:07:3f:ad:47:
                    3d:50:32:cd:13:01:d3:95:51:f1:7a:e9:78:28:d7:
                    75:fb:28:69:87:62:57:a2:cf:eb:79:d3:23:4b:27:
                    f9:da:bf:bd:55:81:7f:7d:e8:7a:78:42:9f:33:27:
                    0d:e0:b6:b0:c9:f5:79:89:3f:9c:dd:bc:c5:b8:b9:
                    42:81:19:b2:4a:e4:de:62:cb:0e:68:a8:7e:11:5a:
                    17:4c:c0:1a:fd:3f:27:87:d4:ff:fc:76:8b:7c:dd:
                    47:c7:a4:dc:e0:84:8b:f6:e8:10:69:30:57:07:58:
                    b7:8b:1d:4a:77:dd:86:b6:ae:03:ee:3b:cc:9f:67:
                    8b:08:07:47:ec:46:84:13:55:d3:8e:5c:ff:cc:b0:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B4:C6:EB:33:D3:D5:A8:02:1B:53:FA:C1:87:84:20:C6:BE:3A:BC
            X509v3 Authority Key Identifier:
                keyid:86:2E:6B:4A:1C:BE:91:54:5E:25:8A:4A:B6:25:E4:1F:54:CC:86:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/34352e3136322e372e302f32342d3234203d3e20323638343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:9e:ee:9d:7a:de:1c:01:f1:a0:9e:ee:3b:51:97:f3:07:8a:
         7f:09:14:9e:35:a5:71:7c:e7:1a:dd:52:fb:ea:84:7b:68:07:
         f0:e0:00:8c:00:fc:c9:fe:2c:f5:32:f0:19:d5:85:34:61:b2:
         42:a4:d4:43:10:30:9e:f4:6b:35:20:fe:c5:ed:8f:18:d6:f5:
         2b:10:5a:7f:73:44:04:4c:91:cc:47:d8:4f:15:7e:f2:39:36:
         36:5b:30:c6:01:7a:10:fb:d5:0e:0e:26:42:c1:67:3a:e0:a3:
         dc:24:96:73:69:cb:63:01:93:58:ca:ba:91:96:c3:74:21:08:
         a2:5d:14:a6:c5:2b:fe:94:33:cd:e7:ee:aa:54:59:ad:09:ee:
         69:66:fe:db:41:28:10:5e:81:47:44:48:c7:e5:3b:b2:bb:31:
         58:1a:de:31:b8:a5:e2:1b:ae:0e:ae:d9:e1:8c:8e:c4:25:59:
         30:46:e1:d6:08:c7:a6:f3:8e:7a:a8:57:33:85:e3:0d:90:bc:
         01:c7:bf:7e:23:d0:03:98:7b:6f:21:f1:ad:10:81:13:25:a3:
         42:6d:99:26:8f:97:4e:9e:6d:0f:e6:5f:d4:34:af:ca:3c:8b:
         7d:fc:28:e8:91:2a:04:e5:25:af:93:79:17:6c:31:06:1f:85:
         c8:18:bb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 18:27:40 2024 by rpki-client on console-ams.rpki-client.org