Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/34352e3137392e35322e302f32332d3233203d3e20323639303533.roa
File:                     34352e3137392e35322e302f32332d3233203d3e20323639303533.roa (raw, json)
Hash identifier:          vyEgRpCJBatVLCfUAQcl3JmVFJBYCiraJnukX++THpI=
Subject key identifier:   C6:B4:BC:A5:1C:90:4E:D9:19:44:3E:68:87:5A:2C:7F:79:41:07:FB
Certificate issuer:       /CN=7809B770F256907DD528D90BF9096D8C2F05A4CA
Certificate serial:       159E7F84831988BDC803164D4CF2F07D66A1FB03
Authority key identifier: 78:09:B7:70:F2:56:90:7D:D5:28:D9:0B:F9:09:6D:8C:2F:05:A4:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/34352e3137392e35322e302f32332d3233203d3e20323639303533.roa
Signing time:             Wed 03 Apr 2024 23:10:49 +0000
ROA not before:           Wed 03 Apr 2024 23:05:49 +0000
ROA not after:            Wed 02 Apr 2025 23:10:49 +0000
asID:                     269053
IP address blocks:        45.179.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.crl
                          rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9e:7f:84:83:19:88:bd:c8:03:16:4d:4c:f2:f0:7d:66:a1:fb:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7809B770F256907DD528D90BF9096D8C2F05A4CA
        Validity
            Not Before: Apr  3 23:05:49 2024 GMT
            Not After : Apr  2 23:10:49 2025 GMT
        Subject: CN=C6B4BCA51C904ED919443E68875A2C7F794107FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:99:c6:03:1d:68:7e:09:71:05:80:2c:dd:
                    c0:13:30:c6:ff:c8:f3:e1:e2:6d:8f:c1:14:d3:eb:
                    49:34:ed:52:04:5c:09:1e:5b:fd:cb:35:40:7c:f1:
                    76:3b:b5:16:d2:d8:ff:2b:c2:1b:ef:ef:42:eb:54:
                    0e:61:43:0e:99:43:7d:3a:2c:aa:98:76:01:7b:4a:
                    49:15:d5:67:4b:2a:7b:0a:9c:00:6d:54:ce:5e:ad:
                    83:2b:13:c1:08:c7:4c:95:a4:94:0f:af:22:31:cd:
                    3e:8d:07:0e:ad:8a:b4:cf:0b:61:e9:f6:5f:e5:a5:
                    2f:6d:4b:4d:02:12:8e:75:01:79:93:8a:5e:19:ab:
                    f5:4f:c0:84:6a:87:99:48:24:7e:82:9a:e1:76:c8:
                    8b:7e:55:96:01:ec:87:d8:48:f9:78:cd:c8:01:8e:
                    b2:f3:d5:34:14:ab:b2:18:36:65:25:37:1a:4c:b2:
                    26:6c:ad:68:c3:09:a7:e7:83:82:98:23:73:d4:96:
                    a2:5d:83:cc:24:f6:01:bb:b7:1c:76:97:1b:e9:be:
                    0e:9f:ee:0d:6c:9a:de:50:63:c7:0b:1c:a8:e2:6f:
                    23:d7:f2:63:10:e5:e6:cc:d3:ac:a4:a0:d9:d3:e5:
                    94:43:68:89:f1:15:c6:46:b1:30:7e:22:4f:16:75:
                    43:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B4:BC:A5:1C:90:4E:D9:19:44:3E:68:87:5A:2C:7F:79:41:07:FB
            X509v3 Authority Key Identifier:
                keyid:78:09:B7:70:F2:56:90:7D:D5:28:D9:0B:F9:09:6D:8C:2F:05:A4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/34352e3137392e35322e302f32332d3233203d3e20323639303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:60:91:42:f3:0b:0d:97:23:bb:98:9d:42:37:1e:4f:27:98:
         29:f2:d7:8b:fb:b8:6b:29:22:28:3c:3f:65:06:85:4f:17:6a:
         86:cc:3e:65:ad:1c:f8:c6:fb:21:48:05:75:2a:3a:c3:19:b4:
         0b:b5:5a:35:f6:6e:e9:c1:e0:38:04:a7:6e:b4:6f:12:d8:e2:
         7f:a1:bd:bb:61:bf:66:93:48:bc:32:77:40:e8:d9:44:62:de:
         4c:9c:7c:81:01:29:72:2b:78:9d:56:49:a0:be:6a:15:10:1c:
         78:e0:9b:74:43:ba:de:ad:01:50:3a:76:58:74:0f:0a:d1:c9:
         74:d1:6f:72:83:84:2d:38:7c:d6:97:b7:e7:5a:9d:8d:62:c4:
         8e:c7:6f:04:a0:9d:87:c2:87:6d:28:ac:92:55:15:8a:80:fd:
         1b:60:eb:72:52:a6:84:a5:7a:7e:90:d6:dd:a0:d2:42:ab:ed:
         47:aa:33:80:fe:24:29:72:12:07:3d:87:70:a8:af:60:7c:01:
         38:e9:e3:ac:ca:06:28:e5:15:ab:f4:f5:12:7c:6c:dd:c5:7f:
         10:8a:6c:5d:6c:5a:5c:0c:6b:c7:fc:23:7b:2c:49:52:76:d1:
         bd:af:23:07:10:7d:36:f1:ec:7e:98:d5:57:d0:ca:5e:6e:c9:
         5c:ee:0f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:28 2024 by rpki-client on console-ams.rpki-client.org