Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/34352e3136352e39322e302f32322d3234203d3e20323638363831.roa
File:                     34352e3136352e39322e302f32322d3234203d3e20323638363831.roa (raw, json)
Hash identifier:          P+D/GI20ukm/6HnuPK+ezIgdcjMh8F9KVsdjB4dqBvI=
Subject key identifier:   DE:03:43:3A:EE:25:F8:3B:1B:85:3D:11:2B:95:4C:FE:EC:36:0E:38
Certificate issuer:       /CN=C415922F5BDCB2CDCF5C2142D49F80F8789A0F49
Certificate serial:       6D37D3968E5A46E0BB3F56E761186B6DCE0BB993
Authority key identifier: C4:15:92:2F:5B:DC:B2:CD:CF:5C:21:42:D4:9F:80:F8:78:9A:0F:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/34352e3136352e39322e302f32322d3234203d3e20323638363831.roa
Signing time:             Thu 04 Apr 2024 19:47:52 +0000
ROA not before:           Thu 04 Apr 2024 19:42:52 +0000
ROA not after:            Thu 03 Apr 2025 19:47:52 +0000
asID:                     268681
IP address blocks:        45.165.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl
                          rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:37:d3:96:8e:5a:46:e0:bb:3f:56:e7:61:18:6b:6d:ce:0b:b9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C415922F5BDCB2CDCF5C2142D49F80F8789A0F49
        Validity
            Not Before: Apr  4 19:42:52 2024 GMT
            Not After : Apr  3 19:47:52 2025 GMT
        Subject: CN=DE03433AEE25F83B1B853D112B954CFEEC360E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7f:45:ca:6d:0f:b6:86:79:90:73:70:d2:6a:
                    2b:96:a7:b9:64:ed:e8:8b:a5:d3:95:fb:2f:4e:0e:
                    ba:f4:41:0d:7e:10:a2:48:db:4e:b1:4b:44:13:d9:
                    d2:28:fb:c2:f8:6f:79:7a:db:ec:53:4e:da:60:eb:
                    da:ee:83:0f:8c:9c:dd:eb:81:2f:dc:cc:07:ed:ed:
                    97:e7:39:83:b0:5a:f3:f3:49:f3:f1:b5:a6:95:66:
                    d7:93:e7:97:a2:51:0f:cc:a6:9e:25:57:a3:90:b1:
                    24:4f:4b:28:ac:c5:03:79:6e:b2:c3:37:5d:02:ee:
                    d6:21:c8:4f:5a:e8:74:d2:8c:81:de:84:64:99:38:
                    0b:81:b5:b4:4d:56:14:50:16:51:e4:38:16:e7:ca:
                    83:46:ac:6c:8a:24:45:b7:e9:6a:d3:30:f4:9d:3a:
                    9d:0f:ad:7b:bb:0c:78:d7:e1:de:b4:ef:78:c9:f6:
                    a8:d4:7a:f2:09:d5:02:34:6f:c7:18:3b:eb:bc:18:
                    09:9d:d5:dd:7c:06:4d:0e:a3:f2:f6:75:ce:e8:e7:
                    aa:d7:1e:e0:23:02:75:31:ae:9e:d3:83:06:c8:55:
                    96:08:9e:d2:b6:73:e7:ac:22:64:6a:ca:3e:f1:71:
                    62:1d:6d:a3:11:5d:b6:82:ed:20:90:15:78:46:14:
                    0d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:03:43:3A:EE:25:F8:3B:1B:85:3D:11:2B:95:4C:FE:EC:36:0E:38
            X509v3 Authority Key Identifier:
                keyid:C4:15:92:2F:5B:DC:B2:CD:CF:5C:21:42:D4:9F:80:F8:78:9A:0F:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/34352e3136352e39322e302f32322d3234203d3e20323638363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:a0:d1:95:a7:c9:86:b3:c2:dd:72:f7:1e:1f:48:9c:3a:37:
         ae:b4:07:a3:ce:73:6d:3c:d3:46:b1:e3:ea:95:fd:48:2b:b2:
         71:6d:9d:94:3d:dc:1e:47:38:9a:08:1f:bd:bc:ab:e9:60:06:
         78:ac:4b:54:16:5c:ee:81:f8:16:1f:fe:d4:a2:58:bc:a7:f1:
         1e:67:8a:f5:e7:28:b2:31:79:7a:be:35:ef:1a:54:94:11:ff:
         14:23:5c:28:05:73:d1:f1:f7:3f:45:b2:95:95:de:a0:8b:ed:
         63:5e:cf:00:5c:c1:9d:44:d7:14:75:ea:31:bd:a5:52:02:37:
         a6:7e:82:43:ed:6f:4f:b3:d5:71:13:8e:b4:77:7f:9b:af:ba:
         8e:00:72:8d:83:d4:40:40:19:9b:d6:52:6d:c3:f3:14:32:48:
         40:31:5f:5f:35:d5:bf:90:33:7a:5f:fa:1c:0a:7f:06:9e:8e:
         a6:bb:4a:e0:0b:9f:bc:c4:23:ad:69:a4:e4:73:a6:1c:a6:2f:
         0c:c2:aa:0c:ef:59:82:4f:ff:88:c0:65:ed:05:d1:6b:95:87:
         1d:f2:94:e0:9b:10:de:49:4a:c3:95:30:6c:18:a5:ab:8f:52:
         d1:05:ed:d4:3e:a1:76:e1:f0:7b:00:ff:24:94:ec:ba:16:39:
         31:86:72:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:13 2024 by rpki-client on console-ams.rpki-client.org