Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/34352e3137392e35322e302f32342d3234203d3e20323639303533.roa
File:                     34352e3137392e35322e302f32342d3234203d3e20323639303533.roa (raw, json)
Hash identifier:          Lb+GxkunyhW8+b3fsApdzGFK/5nI1+s7NA/s8IIVvkE=
Subject key identifier:   5F:C2:0A:ED:EA:24:9D:5C:E3:26:8B:13:1B:71:AF:5B:88:2E:DC:F2
Certificate issuer:       /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
Certificate serial:       19728B517542765667C22264A61501CC4AF286AA
Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/34352e3137392e35322e302f32342d3234203d3e20323639303533.roa
Signing time:             Fri 01 Nov 2024 23:13:06 +0000
ROA not before:           Fri 01 Nov 2024 23:08:06 +0000
ROA not after:            Fri 31 Oct 2025 23:13:06 +0000
asID:                     269053
IP address blocks:        45.179.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl
                          rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:72:8b:51:75:42:76:56:67:c2:22:64:a6:15:01:cc:4a:f2:86:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
        Validity
            Not Before: Nov  1 23:08:06 2024 GMT
            Not After : Oct 31 23:13:06 2025 GMT
        Subject: CN=5FC20AEDEA249D5CE3268B131B71AF5B882EDCF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:f4:b2:2d:a3:1e:86:c3:83:89:80:5c:6f:
                    4b:ae:d2:2f:54:64:03:8b:e6:32:40:e8:d3:51:16:
                    dc:49:ec:0c:66:9d:8c:82:46:db:78:e7:7d:8e:7f:
                    dc:0d:0a:32:03:53:80:8c:e4:f9:b1:d0:02:c6:55:
                    66:c1:ab:bc:24:cd:29:64:f4:e0:99:41:1b:ca:aa:
                    a6:12:82:e8:e8:a6:2e:93:3c:ab:5b:ab:54:ea:ec:
                    a4:15:de:e0:ad:d6:4d:f1:2c:b3:91:99:8a:5e:45:
                    4d:fb:00:72:12:93:64:ed:db:fc:c7:ae:25:c4:e5:
                    02:34:74:b0:ea:0b:d5:2e:35:7b:55:ea:d7:e0:d8:
                    0c:17:e7:18:ac:42:1e:b0:7e:e1:c7:85:13:d4:f4:
                    a0:b0:c6:60:79:61:44:34:1e:ac:b6:6f:e7:a9:2e:
                    a7:29:3e:8c:99:fc:b3:03:46:81:90:e0:5e:4e:bf:
                    78:cc:39:60:6a:82:43:3e:26:7a:27:2a:76:ed:22:
                    49:2b:87:c2:86:d9:06:0a:4b:3a:ad:b4:00:6f:1b:
                    50:e7:50:3e:4e:48:6d:29:aa:b0:e4:03:75:7c:33:
                    e8:d7:03:42:ad:a3:00:41:8c:8d:71:db:f4:e5:dd:
                    f5:8a:e8:43:f1:e3:f6:04:e6:dc:91:0d:dc:d0:40:
                    c9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C2:0A:ED:EA:24:9D:5C:E3:26:8B:13:1B:71:AF:5B:88:2E:DC:F2
            X509v3 Authority Key Identifier:
                keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/34352e3137392e35322e302f32342d3234203d3e20323639303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:0b:f0:48:70:d4:10:34:30:60:9c:0e:14:da:9d:af:22:fa:
         5b:ca:b8:c4:39:c6:8c:d4:5e:f3:73:4a:fd:53:94:4d:4a:1f:
         6c:3b:68:16:f7:4a:c4:41:53:69:53:77:95:55:c1:41:26:5e:
         16:9f:a1:d7:d0:62:d5:9c:97:c3:d5:e8:42:81:49:05:66:aa:
         70:e8:02:87:c7:30:4b:5c:71:8c:c7:00:5a:69:ec:44:36:ac:
         01:b3:17:49:0d:c7:88:80:51:f0:5d:55:a3:67:dc:c1:74:39:
         c4:f1:06:75:50:80:5d:15:f2:b7:7e:1f:d7:e5:72:32:99:15:
         3a:b1:6d:02:c2:fb:3f:5d:e2:60:bd:3b:a5:b9:49:a5:3f:7d:
         4e:ca:1d:48:04:1f:be:f2:fc:e6:0b:2d:cb:ae:c1:b5:a1:e2:
         5f:59:e8:41:bf:ad:e4:52:ee:ec:73:8c:c5:b2:6c:a2:b7:93:
         61:6a:3f:c1:9e:35:7a:c7:72:f3:b6:03:bd:80:66:28:2c:6d:
         8d:73:7d:79:14:15:89:78:48:49:e9:7a:04:f4:c5:93:7f:03:
         00:7c:87:f1:22:68:9e:79:b2:6a:01:8c:ae:af:f6:52:82:7c:
         74:52:3d:59:49:12:f0:12:92:05:39:c2:37:aa:f0:7f:78:1b:
         f2:19:f6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:17 2024 by rpki-client on console-fra.rpki-client.org