Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/34352e3138352e37362e302f32322d3332203d3e20323639333637.roa
File:                     34352e3138352e37362e302f32322d3332203d3e20323639333637.roa (raw, json)
Hash identifier:          4PgzQ9zPEHfpICNZWGf0hiSTP4C4Rq9idpThQyDVlwA=
Subject key identifier:   CE:63:8D:ED:D3:DB:12:0E:2F:67:0C:E5:B2:D2:4E:40:BC:9A:90:2F
Certificate issuer:       /CN=110BEE0AC24D6678F28E9522A64E0A2D9C666A15
Certificate serial:       2204E12AD052C1565EE94B179C0F0BE4C1F43C95
Authority key identifier: 11:0B:EE:0A:C2:4D:66:78:F2:8E:95:22:A6:4E:0A:2D:9C:66:6A:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/34352e3138352e37362e302f32322d3332203d3e20323639333637.roa
Signing time:             Thu 04 Apr 2024 00:09:01 +0000
ROA not before:           Thu 04 Apr 2024 00:04:01 +0000
ROA not after:            Thu 03 Apr 2025 00:09:01 +0000
asID:                     269367
IP address blocks:        45.185.76.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.crl
                          rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:04:e1:2a:d0:52:c1:56:5e:e9:4b:17:9c:0f:0b:e4:c1:f4:3c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110BEE0AC24D6678F28E9522A64E0A2D9C666A15
        Validity
            Not Before: Apr  4 00:04:01 2024 GMT
            Not After : Apr  3 00:09:01 2025 GMT
        Subject: CN=CE638DEDD3DB120E2F670CE5B2D24E40BC9A902F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:21:a0:d6:c5:ab:aa:a7:69:74:29:be:f3:89:
                    7d:3f:cf:4f:d0:c2:2e:8b:00:85:d8:d3:52:a5:b0:
                    46:90:21:47:aa:68:0f:8f:fc:a8:b0:5b:7d:5b:25:
                    10:cc:f7:7b:71:03:87:dc:1b:91:64:d3:dc:ec:a1:
                    10:88:80:dd:af:eb:60:71:28:f6:03:e9:9d:55:e0:
                    93:4f:c8:f2:04:cb:5f:c8:9d:f3:92:5f:0b:08:0f:
                    71:1e:57:59:50:f0:22:14:5e:43:15:f7:2a:eb:02:
                    54:84:08:b8:29:f4:80:9f:c6:0a:31:84:4e:50:23:
                    55:e4:2a:e1:8f:32:ab:3d:af:4f:c1:36:83:e6:58:
                    81:79:4c:ee:1c:fa:81:b9:1f:bb:75:39:72:74:8b:
                    d5:07:d7:94:bf:2e:df:24:bd:0a:e6:6e:8a:f2:d5:
                    ba:77:11:58:ce:95:a9:55:9c:91:ec:49:e1:79:ec:
                    76:5d:a1:ed:4a:0d:b1:52:ec:97:bb:ee:76:de:d8:
                    37:6b:2c:33:03:45:34:8b:1f:fa:f1:9c:4c:ab:4e:
                    89:6a:e4:17:9d:d5:5a:8a:dc:c2:62:7e:9e:a1:e5:
                    04:3d:d0:be:29:65:fc:6a:13:7f:25:1c:0b:cd:d4:
                    65:46:08:c7:fb:84:f3:bb:ce:ef:3c:ff:1f:d1:84:
                    02:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:63:8D:ED:D3:DB:12:0E:2F:67:0C:E5:B2:D2:4E:40:BC:9A:90:2F
            X509v3 Authority Key Identifier:
                keyid:11:0B:EE:0A:C2:4D:66:78:F2:8E:95:22:A6:4E:0A:2D:9C:66:6A:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/34352e3138352e37362e302f32322d3332203d3e20323639333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:68:59:de:61:97:56:f5:39:7b:4e:6e:d4:6a:cc:2a:6b:22:
         06:8f:e4:87:49:1b:22:63:b5:2e:1f:ac:f1:8f:29:c0:c5:cc:
         a4:3b:eb:ab:00:bd:44:e2:d0:b8:33:f3:88:00:c7:9a:dd:74:
         b8:70:e1:10:d7:f7:33:b6:f7:bc:34:78:e1:5a:a0:3b:c7:24:
         79:b0:3c:05:e0:61:c9:2e:19:21:a7:79:41:96:5e:7b:c9:64:
         b4:c7:6d:db:48:5c:68:31:dd:94:6f:00:e2:6a:da:2c:a4:ef:
         42:a2:17:a0:d8:24:07:af:f4:f9:e9:0e:40:fc:d2:38:ef:8c:
         34:14:8b:8f:58:5d:95:d8:a8:cf:88:92:54:4a:d3:c2:76:b8:
         6e:e1:ab:e2:15:da:0d:2d:5f:c5:77:d1:03:e3:93:8e:8d:89:
         9f:22:5b:26:47:f5:44:e5:42:10:ed:00:08:7a:cf:94:11:0a:
         ef:9e:f8:c4:86:dc:8f:65:6b:57:ce:da:f1:a0:5b:37:bd:73:
         33:87:47:0f:12:2d:d0:38:45:7e:ac:3e:44:ea:05:5e:a6:fd:
         b3:76:83:1e:0b:d7:47:e5:60:01:0c:09:93:d1:69:99:2c:47:
         c2:64:de:ab:9d:00:67:6b:27:f4:86:c8:55:6c:08:d9:f0:06:
         bf:d9:1a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:32 2024 by rpki-client on console-fra.rpki-client.org