Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/34352e3138342e3234302e302f32322d3234203d3e20323639333632.roa
File:                     34352e3138342e3234302e302f32322d3234203d3e20323639333632.roa (raw, json)
Hash identifier:          QCtDQbleaoTMSBt4Hk0j4keBSfLduu7LI8gwNG2ZS7g=
Subject key identifier:   0B:DD:8F:7B:90:0F:DC:46:B3:8C:B7:17:47:CF:12:FD:E1:85:F0:BD
Certificate issuer:       /CN=2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0
Certificate serial:       12E1B5738759654A7365F8DF88E6C9AFC9E7CDBF
Authority key identifier: 2E:76:E9:05:C3:C2:C8:5E:3D:E4:63:5F:1B:C8:7F:1A:F3:13:FE:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/34352e3138342e3234302e302f32322d3234203d3e20323639333632.roa
Signing time:             Wed 03 Apr 2024 19:03:11 +0000
ROA not before:           Wed 03 Apr 2024 18:58:11 +0000
ROA not after:            Wed 02 Apr 2025 19:03:11 +0000
asID:                     269362
IP address blocks:        45.184.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.crl
                          rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e1:b5:73:87:59:65:4a:73:65:f8:df:88:e6:c9:af:c9:e7:cd:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0
        Validity
            Not Before: Apr  3 18:58:11 2024 GMT
            Not After : Apr  2 19:03:11 2025 GMT
        Subject: CN=0BDD8F7B900FDC46B38CB71747CF12FDE185F0BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a9:18:2a:7f:4d:a8:14:58:c1:64:53:f8:ee:
                    98:71:b8:c9:4c:a4:86:e9:74:01:0f:57:c4:8f:04:
                    ce:3d:87:8a:2e:47:8d:e7:19:08:d1:e5:4f:ba:0e:
                    12:6a:ac:e2:8b:b4:1a:32:0d:93:1b:ac:41:63:3b:
                    40:60:ee:c0:15:c3:22:01:ef:90:04:cc:33:8e:60:
                    6e:70:a7:5c:da:e1:f2:74:0e:a3:11:92:53:a2:44:
                    c2:93:6f:53:43:62:af:3b:46:1a:e1:04:be:41:a9:
                    99:49:91:6b:2e:31:25:5c:9f:1f:26:63:d1:8f:48:
                    40:5d:cb:5e:f3:bf:b3:fb:b3:8d:0c:a9:98:e6:c7:
                    72:b2:0a:91:d2:b2:89:32:bd:2b:81:fd:c8:48:cf:
                    43:8c:f4:5d:7b:b6:05:2f:5e:e9:3d:f7:3e:25:ef:
                    89:ec:c1:21:64:a8:a4:b7:4c:bb:cf:42:39:02:9e:
                    07:bc:20:40:80:57:a6:c1:fc:c3:e9:0c:b9:53:de:
                    f7:51:be:dd:65:04:e8:0c:92:19:6a:ff:3e:73:d5:
                    d5:af:fb:3b:f9:9f:9d:cb:1f:39:41:f2:63:9c:8a:
                    fc:c7:aa:1b:74:24:7d:70:3a:e5:64:a3:59:40:86:
                    50:7e:e1:3f:7b:e6:f5:b5:a2:3d:e7:7b:c0:25:49:
                    c3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DD:8F:7B:90:0F:DC:46:B3:8C:B7:17:47:CF:12:FD:E1:85:F0:BD
            X509v3 Authority Key Identifier:
                keyid:2E:76:E9:05:C3:C2:C8:5E:3D:E4:63:5F:1B:C8:7F:1A:F3:13:FE:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/34352e3138342e3234302e302f32322d3234203d3e20323639333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:6b:ed:65:1d:7e:f1:a4:04:a6:c6:b0:c1:d7:e7:ec:7d:b4:
         91:67:03:b9:8e:f2:c0:43:fa:58:27:dc:41:5c:e4:74:69:d1:
         d0:49:99:f6:84:0d:87:45:25:de:23:94:ce:ea:64:06:8a:5e:
         e0:fa:7e:88:15:6b:65:82:6d:46:81:6e:49:5e:77:57:2e:26:
         c6:6a:b8:d1:27:08:99:60:be:2b:f6:8e:79:8b:af:da:d1:c4:
         b4:dd:9d:11:10:76:b3:97:c8:c6:38:53:b3:b7:db:22:69:4f:
         32:6a:26:58:6a:54:32:65:73:85:b9:2a:ee:4a:bf:8e:0c:b6:
         f5:a7:84:ea:52:cc:f8:d5:9c:74:fa:08:20:f4:d5:e4:69:82:
         0e:0a:1d:e6:69:71:93:d2:f4:12:c4:32:39:44:d4:d6:06:dc:
         89:71:e2:86:7b:24:89:dc:cd:10:66:7e:b4:91:19:23:9f:09:
         54:34:04:4a:0e:0c:20:6a:37:68:36:cf:98:a8:ca:01:b2:7c:
         04:a6:4e:82:b2:b5:c9:18:b7:17:c8:c7:dd:6a:5f:7a:0c:d9:
         f3:33:f1:ca:e3:4a:7e:cb:90:4c:c0:ba:5b:a2:5f:f0:00:ba:
         1d:1c:50:77:2f:d6:a5:90:ec:8f:cc:04:df:ef:c2:e8:98:1a:
         02:aa:17:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:32 2024 by rpki-client on console-fra.rpki-client.org