Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/34352e3136392e35362e302f32322d3234203d3e20323638313230.roa
File:                     34352e3136392e35362e302f32322d3234203d3e20323638313230.roa (raw, json)
Hash identifier:          I8mFvflwyWUor88uAmN3FfzpnNFtvDYm1bPi2JEkJRY=
Subject key identifier:   A0:88:E8:83:8E:9B:E2:A2:5E:FD:FD:5D:DB:52:03:17:DE:66:66:5E
Certificate issuer:       /CN=94BE3C088C5997DF6AA8B56878A0239FF601A352
Certificate serial:       6DBD26AA5125741043E9FCBB847B7B53222011A6
Authority key identifier: 94:BE:3C:08:8C:59:97:DF:6A:A8:B5:68:78:A0:23:9F:F6:01:A3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/34352e3136392e35362e302f32322d3234203d3e20323638313230.roa
Signing time:             Thu 04 Apr 2024 13:06:06 +0000
ROA not before:           Thu 04 Apr 2024 13:01:06 +0000
ROA not after:            Thu 03 Apr 2025 13:06:06 +0000
asID:                     268120
IP address blocks:        45.169.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.crl
                          rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bd:26:aa:51:25:74:10:43:e9:fc:bb:84:7b:7b:53:22:20:11:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94BE3C088C5997DF6AA8B56878A0239FF601A352
        Validity
            Not Before: Apr  4 13:01:06 2024 GMT
            Not After : Apr  3 13:06:06 2025 GMT
        Subject: CN=A088E8838E9BE2A25EFDFD5DDB520317DE66665E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:8d:6e:25:83:e1:5b:b7:82:66:fe:e0:10:
                    c1:83:ed:35:e7:1f:2c:45:32:64:c6:0d:43:a7:f1:
                    8e:f3:fb:79:3c:16:6d:f6:44:57:7b:fe:f2:24:82:
                    40:3b:e3:57:87:74:5f:46:23:b0:72:78:89:4f:dc:
                    aa:b4:e9:f7:f9:5f:a4:9d:c0:3e:0e:59:80:ea:64:
                    6c:83:76:00:35:33:30:bb:e5:26:4f:07:9e:55:4c:
                    58:40:07:1b:1c:68:46:89:43:60:94:7d:d3:55:0b:
                    80:47:2f:fa:17:31:6e:ad:8f:c5:4c:c5:02:26:47:
                    a2:ba:f1:f1:dd:9c:e0:34:91:cf:57:80:36:5b:57:
                    ad:30:7d:a0:99:c3:53:1b:a7:e8:b5:ed:e2:cb:d6:
                    f2:70:e2:c3:f1:09:da:90:7b:13:39:2f:d4:61:c6:
                    3c:8a:1d:48:39:88:44:67:0f:39:27:f6:84:11:60:
                    30:67:26:b1:f1:74:73:b9:03:cb:78:49:3a:b6:34:
                    b3:6f:d4:6a:55:e8:27:2b:e9:35:3a:1f:36:7e:d9:
                    ad:35:85:00:48:1c:f8:db:d2:86:f5:bb:55:00:67:
                    0f:91:57:2b:18:4d:b6:77:bb:64:86:8d:f6:c3:9e:
                    a9:91:da:a3:82:cb:c0:1c:bd:4b:c5:c1:45:b1:f1:
                    3a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:88:E8:83:8E:9B:E2:A2:5E:FD:FD:5D:DB:52:03:17:DE:66:66:5E
            X509v3 Authority Key Identifier:
                keyid:94:BE:3C:08:8C:59:97:DF:6A:A8:B5:68:78:A0:23:9F:F6:01:A3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/34352e3136392e35362e302f32322d3234203d3e20323638313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:08:86:06:22:e9:58:d0:42:db:18:b9:02:7e:ee:e5:75:c6:
         4a:27:2e:71:66:9f:d2:95:ad:85:eb:5d:da:63:93:c3:07:0f:
         f2:01:0b:1d:f2:b3:c8:b8:36:95:ea:b8:92:dc:fd:f8:40:37:
         4b:50:56:f7:53:d0:5e:f4:e1:23:a1:f2:fb:cc:49:f5:5c:61:
         fe:b0:a9:27:d0:ac:05:fd:93:a7:b9:ee:0b:80:46:53:c9:ea:
         32:77:99:5f:f2:7d:f0:4e:49:3b:11:0a:6f:fd:f2:d7:88:f3:
         c0:bd:0b:3c:c2:dc:48:97:48:cf:71:1b:dd:8c:c4:7a:b8:ed:
         54:cf:d2:cb:d2:c6:87:c2:b0:99:11:1f:00:b9:01:11:2b:98:
         84:c3:14:91:80:1a:8a:76:66:db:20:06:c5:6f:d3:42:fb:b9:
         82:7a:04:07:12:00:af:27:f9:af:52:32:08:1d:e0:5c:87:cf:
         7d:42:99:15:0a:a0:5d:4d:c3:6b:5d:bb:8b:77:6a:46:48:58:
         30:23:dd:21:28:1d:07:ab:0b:fc:07:b6:2b:33:ce:10:23:24:
         75:74:49:23:7d:9b:c8:0b:4a:a0:cf:ac:a5:39:48:74:06:f7:
         e8:f6:82:bb:6b:36:5a:92:d5:aa:20:2d:94:a3:31:9b:7e:23:
         af:06:27:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:13 2024 by rpki-client on console-fra.rpki-client.org