Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/34352e3137392e38382e302f32322d3332203d3e20323639303730.roa
File:                     34352e3137392e38382e302f32322d3332203d3e20323639303730.roa (raw, json)
Hash identifier:          mKCB5H/2wDFDO/5x59kK1XLRyHwYcd2QKthNGfl6d4k=
Subject key identifier:   5A:01:31:CA:E8:90:F9:4F:85:D8:6C:68:41:16:3F:64:79:C6:B6:4B
Certificate issuer:       /CN=BC4626991569184D81CCF322C25715DD37F1D01B
Certificate serial:       27BC3F776DEAD0627B6E299CB8791230FD7A4E77
Authority key identifier: BC:46:26:99:15:69:18:4D:81:CC:F3:22:C2:57:15:DD:37:F1:D0:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4626991569184D81CCF322C25715DD37F1D01B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/34352e3137392e38382e302f32322d3332203d3e20323639303730.roa
Signing time:             Wed 03 Apr 2024 18:30:09 +0000
ROA not before:           Wed 03 Apr 2024 18:25:09 +0000
ROA not after:            Wed 02 Apr 2025 18:30:09 +0000
asID:                     269070
IP address blocks:        45.179.88.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.crl
                          rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4626991569184D81CCF322C25715DD37F1D01B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bc:3f:77:6d:ea:d0:62:7b:6e:29:9c:b8:79:12:30:fd:7a:4e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC4626991569184D81CCF322C25715DD37F1D01B
        Validity
            Not Before: Apr  3 18:25:09 2024 GMT
            Not After : Apr  2 18:30:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f1:28:2b:c5:8f:2f:76:2b:e2:96:f4:28:ac:
                    8a:03:f7:95:31:cf:f2:03:57:da:43:a4:62:c5:73:
                    52:7f:e8:84:4d:ea:85:0e:f3:57:52:f0:06:68:49:
                    66:e1:bb:92:25:1c:ec:6b:44:21:96:91:f3:a8:1a:
                    df:d3:dc:b7:7a:b3:42:48:f6:23:57:63:b4:aa:3c:
                    55:dd:67:41:54:8b:0e:eb:9b:fb:ba:72:78:0a:9f:
                    0a:98:2c:61:b0:f7:03:0e:1a:3b:c7:89:1a:27:28:
                    c1:3b:09:4e:9e:4f:37:5c:fb:f6:4c:26:93:ec:6d:
                    58:f6:19:7f:e1:aa:c7:f6:a9:c0:da:4c:34:12:fd:
                    2b:ac:33:9a:09:f5:33:46:b1:d5:25:51:06:da:27:
                    dd:6b:b1:b4:8c:28:22:a6:fa:3c:4a:50:f7:f9:43:
                    5f:8d:7b:03:a7:51:bb:27:49:f2:78:bd:30:07:30:
                    8e:45:52:6b:e0:ac:b5:98:8e:ec:58:86:d7:bb:18:
                    81:20:b5:8f:e0:22:d2:7d:9f:88:4b:47:e0:ac:81:
                    55:2d:c8:94:e5:a2:9f:bd:4b:19:7a:00:b9:3a:6a:
                    dd:be:85:ae:c1:07:c0:f9:ea:69:1e:91:ab:ff:cd:
                    e0:7f:71:1d:91:d8:13:70:ed:61:b8:5d:31:e9:0c:
                    1b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:01:31:CA:E8:90:F9:4F:85:D8:6C:68:41:16:3F:64:79:C6:B6:4B
            X509v3 Authority Key Identifier:
                keyid:BC:46:26:99:15:69:18:4D:81:CC:F3:22:C2:57:15:DD:37:F1:D0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4626991569184D81CCF322C25715DD37F1D01B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/34352e3137392e38382e302f32322d3332203d3e20323639303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:68:88:da:8b:1f:72:e1:f5:24:91:7d:1d:de:b1:3c:b8:33:
         62:41:f5:0e:3d:6d:a3:77:e2:8c:86:73:02:80:73:18:3f:c2:
         c6:26:7f:ab:cd:13:5b:b6:8e:a1:ee:69:d7:51:45:88:03:16:
         b9:1f:38:d2:8c:28:f0:1f:24:37:f3:40:44:6b:84:a9:90:bc:
         de:65:55:eb:6d:a3:f6:81:5a:97:df:70:4f:82:b6:44:75:a9:
         f0:98:78:75:e2:df:55:c9:e9:af:ea:87:4f:16:6c:01:ab:b2:
         c3:e5:d6:21:10:08:21:88:28:e0:db:4c:89:8a:fa:0e:10:b9:
         cc:d4:cf:52:df:4e:b4:fa:37:cf:33:92:7e:ae:22:9b:ac:2c:
         14:0e:5b:ad:5e:6c:f8:81:7c:ac:82:f7:6a:61:c1:b1:bd:62:
         7b:9a:f5:b5:b5:2a:09:e8:bf:66:f5:4d:c6:9c:bf:b5:ec:16:
         64:20:a3:a1:56:a8:08:42:68:d6:a4:18:07:b4:44:97:7a:cd:
         4c:15:53:00:4a:5e:88:46:60:5d:77:bd:c2:af:06:d9:ba:bb:
         93:9f:79:8d:73:a6:ca:c4:f5:fb:55:9b:35:22:dd:dc:a4:b0:
         46:30:74:f2:05:0b:83:fa:f8:c1:51:cd:58:31:67:a0:15:df:
         a9:35:e4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 19:47:21 2024 by rpki-client on console-fra.rpki-client.org