Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/34352e3136322e39322e302f32332d3233203d3e20323638353137.roa
File:                     34352e3136322e39322e302f32332d3233203d3e20323638353137.roa (raw, json)
Hash identifier:          SWBLNxXkhgY1dROUd0ghIFaeX5RL8CuI2IagBb+Mqqc=
Subject key identifier:   D5:25:84:A0:C9:43:D8:8D:38:89:50:60:07:9B:C7:23:3C:3D:56:7B
Certificate issuer:       /CN=32D32D34674F0161657AF3F71B992CAF74E2BBB9
Certificate serial:       04E24EADF258BFDC0837CF9743078C095D6F1FEE
Authority key identifier: 32:D3:2D:34:67:4F:01:61:65:7A:F3:F7:1B:99:2C:AF:74:E2:BB:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/34352e3136322e39322e302f32332d3233203d3e20323638353137.roa
Signing time:             Sat 27 Jul 2024 20:04:41 +0000
ROA not before:           Sat 27 Jul 2024 19:59:41 +0000
ROA not after:            Sat 26 Jul 2025 20:04:41 +0000
asID:                     268517
IP address blocks:        45.162.92.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.crl
                          rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e2:4e:ad:f2:58:bf:dc:08:37:cf:97:43:07:8c:09:5d:6f:1f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D32D34674F0161657AF3F71B992CAF74E2BBB9
        Validity
            Not Before: Jul 27 19:59:41 2024 GMT
            Not After : Jul 26 20:04:41 2025 GMT
        Subject: CN=D52584A0C943D88D38895060079BC7233C3D567B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:25:f1:59:e7:66:0f:31:d7:a7:49:89:e7:b3:
                    ed:32:3e:2b:ef:d3:d1:29:f0:9b:cb:91:69:cf:be:
                    13:a5:a8:fb:6a:a5:ed:b7:85:f8:5b:eb:c7:51:83:
                    8d:1f:32:85:30:b8:1e:6f:a8:9e:99:ed:89:c6:83:
                    06:38:24:34:14:9f:84:1f:b3:4c:bf:ee:e5:22:a2:
                    ee:00:3b:24:33:8f:f2:d6:c5:21:c2:13:76:67:ec:
                    65:7a:22:bb:26:e0:fb:5e:69:f4:90:fa:6a:07:58:
                    e6:b8:ff:35:8d:75:cd:62:b6:e9:14:d1:93:b9:57:
                    45:14:d0:02:6a:d4:ce:90:1e:c8:14:a6:14:c5:6b:
                    b1:b0:91:01:8a:3c:57:f9:fb:9d:15:0f:53:51:fc:
                    92:94:ab:ea:d4:a8:b1:38:64:aa:99:5d:21:56:fe:
                    13:79:39:30:fb:0b:de:a9:2f:26:2b:27:01:f8:0b:
                    4c:e7:8a:94:65:ff:a4:1a:8b:50:a5:69:e2:7c:54:
                    f7:92:23:21:fb:07:ef:c1:8a:ac:40:ce:d5:e5:89:
                    75:dc:1c:bf:e5:51:03:cf:c9:80:90:c6:2a:d8:d1:
                    fd:4f:e0:68:41:6d:f6:58:1b:d2:a9:34:59:73:e1:
                    31:98:ee:20:0b:b9:a4:2a:9d:9c:46:e7:fe:4a:17:
                    e5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:25:84:A0:C9:43:D8:8D:38:89:50:60:07:9B:C7:23:3C:3D:56:7B
            X509v3 Authority Key Identifier:
                keyid:32:D3:2D:34:67:4F:01:61:65:7A:F3:F7:1B:99:2C:AF:74:E2:BB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/34352e3136322e39322e302f32332d3233203d3e20323638353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:34:02:25:44:0d:8a:54:e7:48:46:68:55:cd:2a:c9:26:ff:
         b9:b4:6c:b1:d8:b0:35:7b:83:79:90:f2:2c:ed:0f:fa:cc:2e:
         d5:00:30:7f:58:75:15:24:96:23:34:d6:09:20:d6:de:53:62:
         a7:a5:00:a5:6c:ce:20:0e:df:4d:f8:28:6d:d6:f1:7f:36:91:
         c4:81:3b:3c:e8:9d:74:4d:2f:71:5c:a8:8e:e7:b0:39:3e:9b:
         6d:a3:c4:e1:53:e8:e0:37:b0:d0:52:bb:66:33:6c:8a:0c:39:
         e5:70:1c:71:93:33:90:82:84:e3:7e:9d:94:95:e6:68:04:71:
         60:19:93:95:8c:a2:a3:e0:31:bb:3b:ab:13:57:8e:83:c9:c7:
         82:a8:22:88:cd:90:b9:fe:a1:da:94:28:5f:36:b1:fd:df:fa:
         83:67:f8:73:a9:14:b1:38:5c:1d:39:24:f6:10:5e:a6:19:68:
         da:8b:d0:59:01:0c:48:23:b5:91:75:44:0f:79:81:5c:8b:96:
         a7:c8:71:84:35:e3:64:67:4a:55:2e:77:4e:3e:8d:00:16:fd:
         c4:32:45:df:a3:10:60:da:33:65:ac:18:b7:a0:77:11:08:8b:
         ed:1f:e9:71:bf:7f:06:50:62:79:8f:c9:d5:58:23:a2:89:05:
         55:45:c9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:01 2024 by rpki-client on console-ams.rpki-client.org