Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/34352e3138312e39322e302f32322d3232203d3e20323639313735.roa
File:                     34352e3138312e39322e302f32322d3232203d3e20323639313735.roa (raw, json)
Hash identifier:          7rQfeU3CB3y/+EjqkyKUqhD9shYG5CJbTC9U3HdL/3c=
Subject key identifier:   95:48:9D:8A:4B:96:16:84:31:C3:29:13:03:34:33:55:2D:80:DE:41
Certificate issuer:       /CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
Certificate serial:       367BA8D02A04FA79E712C5D38BC80A081A7942B8
Authority key identifier: D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/34352e3138312e39322e302f32322d3232203d3e20323639313735.roa
Signing time:             Wed 03 Apr 2024 21:10:52 +0000
ROA not before:           Wed 03 Apr 2024 21:05:52 +0000
ROA not after:            Wed 02 Apr 2025 21:10:52 +0000
asID:                     269175
IP address blocks:        45.181.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 18:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7b:a8:d0:2a:04:fa:79:e7:12:c5:d3:8b:c8:0a:08:1a:79:42:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
        Validity
            Not Before: Apr  3 21:05:52 2024 GMT
            Not After : Apr  2 21:10:52 2025 GMT
        Subject: CN=95489D8A4B96168431C32913033433552D80DE41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7f:dd:d7:dc:e1:d5:97:e5:96:2b:07:4b:53:
                    d7:2b:4a:8e:c4:bd:c4:77:bb:5a:80:88:86:ef:9d:
                    1f:1d:c9:5b:b3:44:a0:71:e1:c9:18:18:6e:ea:d6:
                    f1:c9:30:b1:96:4c:f2:c8:df:80:b2:4f:ce:94:b7:
                    b6:70:6b:bb:fe:97:61:20:dc:21:98:7e:19:58:f9:
                    89:39:a7:15:e0:89:8b:48:50:3a:bd:eb:54:5c:25:
                    b1:33:0b:bd:7b:d5:92:94:45:ad:81:7b:7e:c8:9a:
                    b1:94:e3:46:73:ae:4e:34:56:9e:50:3b:32:fe:8e:
                    5e:04:47:5e:fb:a6:61:ed:38:00:06:19:03:be:60:
                    f1:fa:f0:aa:69:45:cb:02:24:b2:5c:48:eb:4b:d2:
                    44:76:00:19:96:fb:6b:af:a5:d3:af:bc:78:d4:04:
                    08:3b:ce:67:e3:a3:67:e3:31:69:5a:35:4b:02:8d:
                    bf:18:34:02:e9:40:0e:57:d8:57:21:ac:24:49:e8:
                    b3:be:39:a6:3a:ee:3e:62:2f:48:dd:5c:1e:8d:6d:
                    13:3c:ad:da:44:8d:2b:ac:e2:d4:4b:b5:1a:7c:8f:
                    fa:c9:ba:87:00:cb:45:32:93:2a:64:79:8c:c2:ef:
                    c4:d0:fc:06:e2:ac:c1:26:69:4b:41:ef:bd:e8:37:
                    b3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:48:9D:8A:4B:96:16:84:31:C3:29:13:03:34:33:55:2D:80:DE:41
            X509v3 Authority Key Identifier:
                keyid:D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/34352e3138312e39322e302f32322d3232203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:f1:bd:88:83:05:ab:ba:ab:aa:d4:2e:99:72:7b:ff:58:df:
         b2:79:6b:b5:a7:b4:ec:2d:0c:84:cc:28:26:c3:75:cc:cc:16:
         01:a6:f1:d8:65:37:9e:11:1e:3f:30:fe:42:8b:53:8a:c9:cf:
         10:5c:ab:92:32:7d:aa:88:88:7b:6d:00:5b:16:41:be:d4:cc:
         a1:9e:51:ce:38:03:c8:3c:67:05:7e:01:d8:3d:ae:04:a2:ae:
         51:00:eb:c8:10:34:fd:2b:61:e2:dc:9f:62:40:cf:b0:ab:fb:
         90:f1:66:ab:34:57:4e:88:61:32:fd:10:c5:1e:c9:39:97:a4:
         06:98:9f:26:74:6c:2e:ec:57:71:4a:b8:62:d6:16:85:d0:27:
         79:93:be:09:5b:1d:c1:b3:22:d3:4e:ad:48:d6:86:e7:f8:35:
         99:85:29:00:de:1d:a9:c9:0f:8e:62:0c:74:f2:26:c1:32:2d:
         d2:53:3a:1f:a1:7c:d8:a8:09:b6:57:2a:72:ca:5a:a2:44:92:
         bd:20:42:c8:28:8e:26:d7:17:20:ef:80:26:3b:4e:2e:ea:6e:
         27:db:93:9f:ae:4a:41:65:73:2e:a2:7f:e6:c2:38:39:07:d6:
         e0:44:cb:2a:a2:1b:c4:c3:8c:7e:47:d1:d0:ef:c0:bc:a1:1f:
         01:fe:87:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 21:50:11 2024 by rpki-client on console-ams.rpki-client.org