Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32332d3233203d3e20323639363637.roa
File:                     34352e3139312e36302e302f32332d3233203d3e20323639363637.roa (raw, json)
Hash identifier:          ThOJXsKXb4r9cKSm/c6eToZc8iVSZ8V415aBmBqpDgk=
Subject key identifier:   C5:94:BD:1F:DC:EC:04:E6:01:A5:5C:83:4C:90:3A:A5:47:B4:A8:9C
Certificate issuer:       /CN=022A5382F6AB07ABD3C44930CF179443F389439D
Certificate serial:       6CBE98DC7A0840929AD72897B75908E6F9C19274
Authority key identifier: 02:2A:53:82:F6:AB:07:AB:D3:C4:49:30:CF:17:94:43:F3:89:43:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/022A5382F6AB07ABD3C44930CF179443F389439D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32332d3233203d3e20323639363637.roa
Signing time:             Wed 04 Dec 2024 20:37:03 +0000
ROA not before:           Wed 04 Dec 2024 20:32:03 +0000
ROA not after:            Wed 03 Dec 2025 20:37:03 +0000
asID:                     269667
IP address blocks:        45.191.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/022A5382F6AB07ABD3C44930CF179443F389439D.crl
                          rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/022A5382F6AB07ABD3C44930CF179443F389439D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/022A5382F6AB07ABD3C44930CF179443F389439D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:be:98:dc:7a:08:40:92:9a:d7:28:97:b7:59:08:e6:f9:c1:92:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A5382F6AB07ABD3C44930CF179443F389439D
        Validity
            Not Before: Dec  4 20:32:03 2024 GMT
            Not After : Dec  3 20:37:03 2025 GMT
        Subject: CN=C594BD1FDCEC04E601A55C834C903AA547B4A89C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:67:f9:90:81:5f:8f:12:04:e3:af:b2:41:
                    82:fc:bc:d7:89:d7:e8:47:5a:ab:a7:87:91:f0:a8:
                    b0:91:3f:c0:2b:09:c4:05:7c:ad:58:fe:0c:45:81:
                    2b:80:db:6e:35:22:89:ec:22:28:b7:11:20:2a:17:
                    e3:58:db:d4:35:af:37:8d:a2:ba:d0:84:11:76:7d:
                    7a:8c:fc:bc:fe:51:84:8a:1a:1a:33:65:e1:d0:58:
                    7f:8d:bc:c4:78:05:da:df:c2:06:61:a5:0a:93:56:
                    83:f9:6d:fb:5e:d2:32:81:77:63:72:03:d2:de:6a:
                    3c:e5:00:d8:ba:ef:3f:86:36:c7:6d:d5:9a:d7:05:
                    d0:6f:1f:1d:8d:32:ea:4a:ca:29:35:44:5d:c9:74:
                    6d:2d:93:84:a8:b7:7d:0c:3d:05:1d:63:da:0c:29:
                    89:41:73:17:59:9e:22:f7:dc:41:e5:62:d5:c8:12:
                    04:9c:27:cb:75:bb:da:82:21:70:4b:09:fa:ca:d5:
                    f9:71:b0:a9:fe:34:cb:dc:16:a3:b1:e5:26:f3:a6:
                    71:9c:c4:b6:69:e7:1d:9b:b4:6b:6c:ea:04:f4:49:
                    cb:59:65:99:60:d8:7b:a2:5d:36:59:71:74:73:a0:
                    2f:a3:f0:d5:c2:5b:af:88:89:3b:36:4f:61:63:96:
                    17:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:94:BD:1F:DC:EC:04:E6:01:A5:5C:83:4C:90:3A:A5:47:B4:A8:9C
            X509v3 Authority Key Identifier:
                keyid:02:2A:53:82:F6:AB:07:AB:D3:C4:49:30:CF:17:94:43:F3:89:43:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/022A5382F6AB07ABD3C44930CF179443F389439D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/022A5382F6AB07ABD3C44930CF179443F389439D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32332d3233203d3e20323639363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:cc:96:6f:06:cb:a3:d1:1a:50:2e:ee:39:7c:01:d0:ee:fb:
         08:79:e8:7d:42:1d:79:33:a4:52:0d:05:cb:cf:fc:b2:ac:8d:
         68:7e:f8:ec:34:b7:a6:ad:e9:1f:2d:bf:4a:c3:22:7b:fa:5c:
         3f:0a:3e:eb:97:82:43:4c:a0:0d:aa:08:f3:20:39:fb:3b:fd:
         21:ae:1b:d5:0a:79:d8:92:43:d8:08:06:57:c0:d8:45:6c:d4:
         e6:c3:bb:42:15:70:2f:a4:9d:1f:c8:18:64:c4:6e:6a:c5:ce:
         3b:fb:9f:e6:d2:99:15:58:4e:46:cd:55:bd:8e:bb:37:cd:8b:
         fa:a5:06:07:7c:1e:50:ad:e0:d6:23:7b:2c:4e:ed:bd:f5:cb:
         86:d1:a6:66:49:0a:5d:ac:8a:c7:02:d7:f7:57:c9:03:b7:ed:
         06:19:b9:4c:ff:d7:41:b0:a2:c4:c2:c3:ed:4f:46:01:3f:59:
         cd:8c:9c:b9:44:e6:2a:1f:1e:d6:ad:0c:0c:17:f2:85:77:00:
         c2:5d:5f:ea:d8:7c:98:21:6a:e5:64:f0:02:eb:3a:68:1c:19:
         a1:81:71:25:c9:2c:96:d8:3e:7f:e2:70:79:f8:56:aa:2d:00:
         b0:37:38:4a:6e:5a:f9:f6:69:3b:19:8a:b3:ac:a5:2a:f0:57:
         86:64:fc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:32 2025 by rpki-client