Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/34352e3137342e3139362e302f32322d3232203d3e20323731353939.roa
File:                     34352e3137342e3139362e302f32322d3232203d3e20323731353939.roa (raw, json)
Hash identifier:          ZC67GVUXo/+BVEyO8zNQtDqB8++nCYstfo0dlViuBJQ=
Subject key identifier:   96:90:44:FC:30:36:AB:B0:BF:D6:D9:E7:97:C8:F9:78:FB:DA:B6:F3
Certificate issuer:       /CN=085B4B97D0BA72E679EC0F52343750221AD51660
Certificate serial:       7C7F98B7292C78143EBAF890EFA1DB1514EF3D
Authority key identifier: 08:5B:4B:97:D0:BA:72:E6:79:EC:0F:52:34:37:50:22:1A:D5:16:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/34352e3137342e3139362e302f32322d3232203d3e20323731353939.roa
Signing time:             Thu 04 Apr 2024 13:04:31 +0000
ROA not before:           Thu 04 Apr 2024 12:59:31 +0000
ROA not after:            Thu 03 Apr 2025 13:04:31 +0000
asID:                     271599
IP address blocks:        45.174.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.crl
                          rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7f:98:b7:29:2c:78:14:3e:ba:f8:90:ef:a1:db:15:14:ef:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085B4B97D0BA72E679EC0F52343750221AD51660
        Validity
            Not Before: Apr  4 12:59:31 2024 GMT
            Not After : Apr  3 13:04:31 2025 GMT
        Subject: CN=969044FC3036ABB0BFD6D9E797C8F978FBDAB6F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:56:79:e5:da:74:80:5d:55:26:6a:66:12:
                    a5:a5:e3:9a:4a:92:c9:9d:7d:a4:d7:e4:c4:12:70:
                    5d:3b:d0:1b:10:f0:59:d9:e0:48:3a:8b:4d:74:69:
                    8c:77:f6:c9:e7:2f:da:3e:3a:6a:a2:27:3d:91:25:
                    aa:05:14:fa:84:42:e1:aa:91:ba:60:08:48:4e:e1:
                    cd:ef:a6:bb:ab:88:4a:ca:22:02:87:be:a8:39:24:
                    30:14:67:5b:f4:a5:0c:f2:e1:dd:84:93:85:d7:ac:
                    08:5d:2f:f8:fd:41:f6:cf:43:c1:e8:81:c1:28:6c:
                    d9:fa:9e:2f:2e:a4:cd:f3:e9:89:b5:73:e0:ac:a4:
                    76:65:6c:1d:67:e4:4b:49:76:c0:a7:e9:8d:c0:9e:
                    db:18:36:be:94:44:bc:33:d4:c6:c5:9a:b5:db:dc:
                    4b:cd:40:96:7b:b4:e5:22:05:0f:c9:fe:d2:99:2b:
                    48:96:37:a3:f7:a4:c9:34:2d:2e:07:18:9a:0c:c0:
                    47:a9:d9:bf:5f:48:0b:5f:bb:fc:f7:a3:06:d1:b0:
                    e6:7f:12:de:e5:9a:95:64:85:01:ba:ce:b8:68:69:
                    6f:26:90:7a:d9:c6:2e:08:9a:20:d3:53:1d:a3:ec:
                    52:3e:57:54:47:6b:74:6d:3e:0c:1e:76:9a:62:43:
                    21:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:90:44:FC:30:36:AB:B0:BF:D6:D9:E7:97:C8:F9:78:FB:DA:B6:F3
            X509v3 Authority Key Identifier:
                keyid:08:5B:4B:97:D0:BA:72:E6:79:EC:0F:52:34:37:50:22:1A:D5:16:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/34352e3137342e3139362e302f32322d3232203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:ec:7c:96:5f:85:22:6b:71:4d:81:67:55:46:a8:9d:79:6b:
         47:16:ee:ee:ad:be:36:fc:b7:6b:12:f7:2f:33:83:d0:3c:04:
         2f:71:94:cd:22:a5:38:82:fa:50:fd:8e:44:13:55:37:15:10:
         8b:20:99:5e:f7:08:66:cd:ee:88:f5:ca:87:cd:e8:bc:b6:80:
         70:db:2e:ea:45:e5:ae:c1:fb:4c:1b:a3:84:61:13:92:52:3c:
         43:da:97:ab:2d:82:59:dd:7e:84:2f:72:de:da:db:e7:cc:05:
         16:f2:60:07:a6:bd:05:d7:3a:56:c0:cf:43:07:3a:d6:e1:2d:
         25:5d:3e:e7:01:74:ab:13:f1:da:24:9e:a5:dd:aa:b5:2c:51:
         49:da:16:37:64:4b:10:59:11:cc:5e:ba:10:73:67:f8:ba:e4:
         ca:be:ac:05:3f:18:d6:8a:b5:67:69:18:ee:44:71:79:b9:1e:
         85:82:14:20:0b:e4:cd:dc:66:e9:54:04:83:36:d5:f1:47:45:
         2c:47:71:29:2e:f7:56:03:a7:04:e3:c9:d6:59:38:6d:73:c8:
         96:3c:fc:39:cd:ea:3e:db:2e:89:81:25:07:5b:22:c6:2b:e6:
         26:57:9d:7f:7b:2d:84:02:01:95:14:53:05:bd:77:3c:f5:2d:
         4c:46:b2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org