Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136302e302f32342d3234203d3e20323636313936.roa
File:                     34352e362e3136302e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          xuomqeLznBPansdCARJBB8I1iYcStOkoHOewvVnsVbo=
Subject key identifier:   3A:04:D6:B9:6E:46:CF:39:A5:6C:0C:80:52:74:55:3F:BA:8A:71:00
Certificate issuer:       /CN=F7D184C64B07FEBABED43D8987829C30EDCF1D89
Certificate serial:       310825EE0FE34CCC70B889564A8235EDF7F88D42
Authority key identifier: F7:D1:84:C6:4B:07:FE:BA:BE:D4:3D:89:87:82:9C:30:ED:CF:1D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136302e302f32342d3234203d3e20323636313936.roa
Signing time:             Tue 30 Jul 2024 15:36:48 +0000
ROA not before:           Tue 30 Jul 2024 15:31:48 +0000
ROA not after:            Tue 29 Jul 2025 15:36:48 +0000
asID:                     266196
IP address blocks:        45.6.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:08:25:ee:0f:e3:4c:cc:70:b8:89:56:4a:82:35:ed:f7:f8:8d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D184C64B07FEBABED43D8987829C30EDCF1D89
        Validity
            Not Before: Jul 30 15:31:48 2024 GMT
            Not After : Jul 29 15:36:48 2025 GMT
        Subject: CN=3A04D6B96E46CF39A56C0C805274553FBA8A7100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:85:4b:cd:9f:f6:26:42:50:72:ca:c8:a9:52:
                    12:21:8e:fd:db:18:04:91:5b:e1:f7:fe:f9:96:f9:
                    5c:74:45:3a:1f:9b:ae:45:6c:12:3a:0f:47:1f:0e:
                    a7:45:f1:2a:4a:d0:6b:d7:e0:eb:c9:74:3b:a7:cb:
                    3f:13:3b:6a:c0:00:71:26:49:99:42:6e:6b:a4:07:
                    b7:01:7f:3d:d7:a8:88:4e:17:9f:68:09:c2:a5:a6:
                    b3:e7:7e:a9:95:f3:a3:a2:5b:7a:e6:10:aa:d4:df:
                    0c:d2:14:7c:de:d7:44:dd:25:7d:87:83:62:52:ac:
                    21:ab:fb:95:79:b2:14:b1:75:e7:96:12:d6:35:09:
                    74:1b:dc:bb:7b:4e:ea:8d:83:b5:c0:68:a5:73:65:
                    2e:ea:73:a6:7c:dc:3f:fc:ec:da:16:92:94:ab:bc:
                    56:db:76:ad:0b:e8:b0:7a:9b:40:2a:e4:ad:b6:b8:
                    60:5e:e4:65:db:af:10:a9:2c:a0:1e:73:24:c2:c3:
                    1b:04:ee:c5:78:34:4a:65:5a:06:8c:11:24:a7:b5:
                    48:78:1e:32:4c:ba:6a:65:00:cc:d8:14:81:84:bd:
                    de:f2:b0:46:8e:5c:4f:e5:a0:9d:78:04:97:de:0d:
                    d6:62:17:f5:33:13:73:c9:b6:b9:12:a0:5b:c4:a5:
                    30:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:04:D6:B9:6E:46:CF:39:A5:6C:0C:80:52:74:55:3F:BA:8A:71:00
            X509v3 Authority Key Identifier:
                keyid:F7:D1:84:C6:4B:07:FE:BA:BE:D4:3D:89:87:82:9C:30:ED:CF:1D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136302e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:ae:9a:ce:63:e9:28:c1:80:0d:fc:9b:ae:44:95:a2:28:1d:
         62:05:d3:a8:86:f3:c3:1e:64:e5:e7:ed:3d:ce:43:71:cc:14:
         34:83:4d:e5:a6:34:06:79:ed:a3:cd:24:9e:cc:ea:d9:0f:69:
         c3:77:b3:3c:a7:6d:75:a2:e8:94:10:79:89:f9:b8:0f:41:c4:
         81:98:d2:f5:29:4a:1e:1e:17:26:7c:9d:9f:3c:d5:2d:85:f3:
         54:69:b4:64:2e:ce:42:22:f0:b0:39:e6:ce:74:1e:8d:4e:f2:
         83:72:fa:df:5b:5a:cb:e8:93:c4:78:3a:cf:f6:65:dd:3a:99:
         9c:17:20:48:db:d6:10:c2:09:ad:c7:fa:65:d7:00:8b:06:9c:
         66:2e:98:56:f4:8c:19:db:00:f3:e1:28:2d:83:40:99:1a:ee:
         e2:d6:32:34:25:08:f0:76:b9:d9:a0:4c:65:a8:3d:09:28:b5:
         ad:79:52:10:ee:5c:90:c2:13:16:f4:c9:f9:1f:5a:76:c4:a4:
         41:27:4d:17:86:f6:8f:e7:af:2f:64:08:0b:56:87:e7:e3:66:
         a2:52:cc:bb:95:23:4c:5a:29:5a:2f:9d:ad:05:64:35:8e:ca:
         0a:ea:2f:cf:32:78:63:7e:25:3e:64:44:f7:45:c4:d8:bf:a1:
         1d:d2:1e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:59 2024 by rpki-client on console-ams.rpki-client.org