Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32322d3232203d3e203631353931.roa
File:                     34352e3233372e37322e302f32322d3232203d3e203631353931.roa (raw, json)
Hash identifier:          O89rlFNO2Lg0Zk0OFzPcfi9tkaFrc8CJoGGSxWhUquc=
Subject key identifier:   65:88:9A:E0:2A:C7:72:3C:93:10:F7:53:51:E7:99:A7:E0:B7:D2:FA
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       5DD9CABB2D30AF6A2519593ED34A1490B37135D2
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32322d3232203d3e203631353931.roa
Signing time:             Mon 12 Aug 2024 20:45:10 +0000
ROA not before:           Mon 12 Aug 2024 20:40:10 +0000
ROA not after:            Mon 11 Aug 2025 20:45:10 +0000
asID:                     61591
IP address blocks:        45.237.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d9:ca:bb:2d:30:af:6a:25:19:59:3e:d3:4a:14:90:b3:71:35:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Aug 12 20:40:10 2024 GMT
            Not After : Aug 11 20:45:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:90:2c:37:b1:67:e0:a5:96:f7:b5:c0:bf:ef:
                    55:63:f6:5d:03:1d:85:6e:4c:02:47:e8:ad:7b:fe:
                    a9:c3:44:bd:bf:bb:cc:6d:1f:05:9a:f8:c7:be:be:
                    eb:05:b4:ab:3f:44:34:07:4d:1d:9c:b5:15:37:f4:
                    0a:10:52:8c:c9:58:fa:73:fc:7d:28:fd:10:1e:db:
                    99:95:24:d1:c2:35:78:9c:96:3a:fd:19:ff:59:68:
                    54:64:99:f4:c9:c3:2e:5b:07:6e:88:41:89:cb:a9:
                    6c:b9:fc:4f:33:14:a7:29:41:c1:a1:e4:aa:56:db:
                    c4:51:a8:c6:92:8b:e9:6e:50:cb:b1:ee:0a:70:9c:
                    5e:0b:fc:1c:f6:d8:f4:a0:8e:89:ea:a5:93:5e:f9:
                    98:f1:b0:40:de:11:04:a9:d0:9f:89:25:c7:b8:3c:
                    6c:e2:ee:3a:61:fa:da:d4:32:7a:31:bd:06:b2:e0:
                    6a:33:c6:10:29:fe:ab:60:eb:07:d2:ef:74:1b:1f:
                    ae:77:7f:1e:29:b4:ac:56:81:40:c4:87:3d:dd:53:
                    6a:a1:4a:45:6a:96:6b:15:db:80:61:42:2c:e0:93:
                    43:21:31:16:9b:17:36:ff:fe:e4:61:12:85:df:32:
                    26:a7:29:78:aa:f6:1d:ad:00:f6:2e:8d:47:fc:59:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:88:9A:E0:2A:C7:72:3C:93:10:F7:53:51:E7:99:A7:E0:B7:D2:FA
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32322d3232203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:d2:19:3c:f6:0a:e7:2b:ce:c8:97:e0:c0:58:51:eb:42:68:
         42:7d:db:57:c4:f6:09:7c:9d:83:57:81:5f:7d:38:fd:17:fa:
         01:a2:f0:29:b1:90:c5:e0:1b:10:0c:cf:d2:2f:ff:a3:3d:9a:
         cc:af:c3:08:d7:b6:87:df:9c:4b:1c:f9:ab:b6:ce:7d:4a:24:
         cc:92:2a:c1:77:46:b4:bc:0e:05:db:ce:db:51:5d:72:aa:86:
         f9:4f:6b:f2:a3:ef:46:a1:65:9d:0c:3d:e6:57:de:08:ee:d3:
         5f:b2:89:bc:b3:7b:63:72:1b:e3:1f:54:14:42:02:ee:2f:d6:
         89:75:80:23:ba:19:53:37:4e:ac:fb:63:69:31:60:4f:e4:20:
         a2:70:42:29:46:8f:4f:1f:d1:f5:61:68:64:59:43:07:ce:23:
         ee:e6:fc:b9:6d:d4:f7:97:7e:d2:e1:42:c4:01:c6:3d:7f:2b:
         c0:17:8d:e0:00:01:96:45:d6:cc:64:29:0c:83:5d:96:d5:96:
         f9:69:a4:53:65:98:8a:6f:40:f7:86:e7:42:99:c2:00:78:50:
         03:7f:61:d6:6c:9f:96:77:ab:ac:9e:dd:17:6f:8a:11:47:80:
         a6:3b:32:07:e0:cb:63:46:5f:12:43:73:63:63:4a:f9:05:15:
         5a:b2:07:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:31 2024 by rpki-client on console-ams.rpki-client.org