Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32332d3233203d3e203631353931.roa
File:                     34352e3233372e37322e302f32332d3233203d3e203631353931.roa (raw, json)
Hash identifier:          oSLuM/ooZmQgPmL30WZIgFTG+uNL7tN6x2YaJKIDaIU=
Subject key identifier:   D4:54:C3:A4:84:C1:DF:DE:6D:B5:2B:5A:78:2D:07:37:9F:51:A2:3E
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       6392E5614DC3470D992328C14D738FAD2F84C84B
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32332d3233203d3e203631353931.roa
Signing time:             Mon 12 Aug 2024 20:45:10 +0000
ROA not before:           Mon 12 Aug 2024 20:40:10 +0000
ROA not after:            Mon 11 Aug 2025 20:45:10 +0000
asID:                     61591
IP address blocks:        45.237.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:92:e5:61:4d:c3:47:0d:99:23:28:c1:4d:73:8f:ad:2f:84:c8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Aug 12 20:40:10 2024 GMT
            Not After : Aug 11 20:45:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:78:4c:73:ae:2a:df:1d:d6:2b:42:7f:4f:
                    ee:24:33:11:f4:b9:c3:af:a8:18:1d:c6:09:20:c6:
                    39:d4:80:35:64:6e:a8:98:5d:b7:75:b1:01:8f:42:
                    e5:ff:4a:18:7c:8b:aa:50:a7:0e:0e:84:63:0b:ab:
                    94:5f:31:de:e8:4c:5e:81:77:af:23:bc:1b:27:b7:
                    16:c9:88:38:a2:7a:e9:5c:a3:70:3d:aa:bc:cd:c6:
                    d3:d7:c3:96:72:4b:15:65:6c:3b:7b:c6:b6:f6:0d:
                    df:83:0e:f2:06:4c:57:c5:ea:3c:26:a5:a9:c2:fc:
                    75:f9:4e:89:96:ba:02:92:30:14:29:18:2a:17:38:
                    61:57:8b:de:48:d1:33:c5:27:b2:59:b2:73:ea:ed:
                    b6:f7:91:b5:ed:37:20:0e:08:11:96:ad:a5:6e:2e:
                    4a:b1:78:3e:ab:6c:b4:df:a6:28:e4:f7:8b:66:a7:
                    76:3b:2c:66:3f:bb:a2:ee:ba:3c:d7:d2:4b:3d:9f:
                    a4:63:5c:cb:d6:3d:03:c7:c8:7c:f7:43:fd:8a:d9:
                    49:7b:83:6a:2f:b0:cb:8b:7e:be:9d:ca:21:9e:47:
                    7a:47:f2:7d:9f:56:c2:26:cf:d1:ed:3b:5b:49:55:
                    c6:01:e4:1d:7a:f8:2f:cc:55:66:c9:74:24:33:48:
                    51:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:54:C3:A4:84:C1:DF:DE:6D:B5:2B:5A:78:2D:07:37:9F:51:A2:3E
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32332d3233203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:06:9d:f9:e6:58:e3:5c:38:cc:e1:50:6c:1c:f8:8d:8e:0a:
         ba:c2:cb:2a:83:dd:82:51:e8:30:db:e0:42:e4:a3:55:ad:53:
         06:fa:8c:a4:d2:03:c4:ca:60:ad:eb:39:36:81:15:6d:3b:59:
         bb:93:52:b4:c5:e3:26:67:34:11:78:f3:12:0b:61:d8:2c:af:
         7d:a1:9d:78:5b:e7:8f:05:2d:a4:53:0f:27:54:2b:87:c3:16:
         8a:33:c7:ad:c9:f4:be:75:72:b5:4b:d6:ba:05:f2:4a:08:e2:
         52:87:44:34:3a:49:60:d7:54:5b:f5:f7:00:92:8f:7f:1f:82:
         69:ed:ba:ee:06:c9:e2:82:36:b9:44:8d:af:df:fa:14:72:3e:
         39:7a:e3:98:2d:88:73:9c:d2:a5:95:3b:30:f6:4d:be:32:95:
         59:c4:12:6b:1b:f3:ee:18:8b:8a:6b:3e:11:51:9b:18:cd:18:
         f1:2e:63:9c:64:34:c3:99:66:40:f1:d0:25:c8:30:61:9a:0c:
         4c:b5:81:4f:80:39:38:7f:2d:95:50:4d:3f:0a:cb:cd:e4:48:
         66:5e:06:c4:8c:52:63:5d:7f:59:3b:66:14:5f:07:ce:e8:83:
         7e:bb:d2:7f:34:9f:64:6e:1b:10:4d:8c:82:cd:6f:e7:08:e7:
         a2:7b:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:31 2024 by rpki-client on console-ams.rpki-client.org