Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/34352e3232362e342e302f32322d3234203d3e20323636393533.roa
File:                     34352e3232362e342e302f32322d3234203d3e20323636393533.roa (raw, json)
Hash identifier:          lp3Icwy1tSWTlwAXxZ+DnFRHYyTnB5M+iMfFzOlmiGI=
Subject key identifier:   F6:9E:E7:90:35:DA:9E:B0:08:BE:92:0F:80:1C:1A:D4:D4:EB:C2:30
Certificate issuer:       /CN=1831D063E0344DB28842F9021C022493CC6A6192
Certificate serial:       1A6201FA7CEBB3C4E010728289E3A1042EABEB05
Authority key identifier: 18:31:D0:63:E0:34:4D:B2:88:42:F9:02:1C:02:24:93:CC:6A:61:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1831D063E0344DB28842F9021C022493CC6A6192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/34352e3232362e342e302f32322d3234203d3e20323636393533.roa
Signing time:             Mon 30 Sep 2024 13:19:42 +0000
ROA not before:           Mon 30 Sep 2024 13:14:42 +0000
ROA not after:            Mon 29 Sep 2025 13:19:42 +0000
asID:                     266953
IP address blocks:        45.226.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/1831D063E0344DB28842F9021C022493CC6A6192.crl
                          rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/1831D063E0344DB28842F9021C022493CC6A6192.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1831D063E0344DB28842F9021C022493CC6A6192.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:62:01:fa:7c:eb:b3:c4:e0:10:72:82:89:e3:a1:04:2e:ab:eb:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1831D063E0344DB28842F9021C022493CC6A6192
        Validity
            Not Before: Sep 30 13:14:42 2024 GMT
            Not After : Sep 29 13:19:42 2025 GMT
        Subject: CN=F69EE79035DA9EB008BE920F801C1AD4D4EBC230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:5a:69:35:5e:31:ec:d5:6f:cd:98:bf:36:
                    5f:bb:5b:9d:66:3d:d0:68:21:7a:05:7a:fb:fe:f8:
                    45:51:3f:aa:5d:84:b7:ef:0d:71:6f:0f:9f:37:9e:
                    f6:37:69:fb:df:91:02:6e:1f:69:50:dd:4e:7a:e0:
                    d9:22:5c:88:e9:ca:89:b6:cf:c4:48:ed:4e:96:cb:
                    9e:78:9c:e2:c4:6c:93:a2:7e:6e:28:ca:9e:05:64:
                    23:47:14:af:eb:28:a1:87:91:99:74:80:58:d1:fd:
                    f9:27:8c:99:4e:c9:87:90:d1:d4:a0:17:2a:c2:7d:
                    cf:cf:31:ca:01:3d:fe:7f:e2:70:35:84:a8:77:a8:
                    f7:df:91:af:a8:41:68:dc:6a:80:06:4f:de:16:f1:
                    d2:0c:b0:5a:95:12:ca:dc:6b:cc:b2:ab:e3:23:74:
                    e1:f3:9a:97:d9:18:b3:d5:3a:9f:a6:31:77:59:df:
                    81:2e:f7:62:48:9f:4f:21:c4:f8:4b:63:c1:aa:2e:
                    4c:0f:66:35:4a:80:58:8f:f3:6a:2b:8a:4f:ce:28:
                    7e:a6:e7:63:65:98:c6:6d:b7:6a:2b:06:a0:48:c2:
                    64:fb:19:4b:0b:66:57:eb:4e:23:d1:86:68:f6:f7:
                    5e:de:98:d5:bd:55:d3:72:59:70:d6:2a:c9:d5:34:
                    be:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9E:E7:90:35:DA:9E:B0:08:BE:92:0F:80:1C:1A:D4:D4:EB:C2:30
            X509v3 Authority Key Identifier:
                keyid:18:31:D0:63:E0:34:4D:B2:88:42:F9:02:1C:02:24:93:CC:6A:61:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/1831D063E0344DB28842F9021C022493CC6A6192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1831D063E0344DB28842F9021C022493CC6A6192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/34352e3232362e342e302f32322d3234203d3e20323636393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:9b:72:09:48:11:9b:10:41:30:da:1d:ff:13:56:bd:46:58:
         f9:34:4b:a0:60:44:c9:bc:06:e9:f3:61:a6:d5:51:b6:01:e6:
         0a:cb:2d:70:55:b6:03:76:07:22:88:d8:ba:f3:a7:84:8a:4f:
         8c:d5:da:4e:21:22:68:5b:72:68:c2:af:2d:0c:85:fc:b9:07:
         af:2d:18:c7:a6:4f:5d:46:fe:cd:27:0b:e3:7c:d6:cd:ac:69:
         3d:93:cb:f6:fe:a3:7d:bc:24:74:6d:9a:11:60:a6:49:5f:9e:
         20:ce:15:70:eb:ac:a6:88:bb:95:8f:ca:79:fa:9f:39:63:66:
         38:05:b8:88:88:e0:70:85:1e:12:40:75:87:9c:97:d3:67:3a:
         68:ed:10:d9:44:30:e3:f1:d5:71:5a:69:63:10:6c:79:1e:d7:
         11:e0:93:fd:36:79:c9:6f:69:1f:1e:43:12:c3:42:12:7d:15:
         d6:26:a6:97:64:2c:6a:75:3f:8d:3f:09:75:43:19:c3:a8:3a:
         19:ba:5a:5c:4a:b9:30:ab:a1:d8:ba:eb:bd:74:1e:b1:fd:97:
         b5:86:e6:03:0e:57:84:7e:4c:5a:e7:76:3e:5a:4b:63:88:e6:
         81:81:2a:08:3a:ad:04:70:ad:f5:af:71:f0:10:55:20:da:76:
         b9:a3:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:47 2024 by rpki-client on console-ams.rpki-client.org