Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136342e302f32322d3232203d3e20323638363237.roa
File:                     34352e3136342e3136342e302f32322d3232203d3e20323638363237.roa (raw, json)
Hash identifier:          bs7jsNRjDx3sEX1eHs4CM1wRZJHzmFxcZApG/Ssd6ms=
Subject key identifier:   80:CB:96:02:17:4C:D4:19:44:BD:DB:C7:3C:46:AB:BE:97:33:4C:BD
Certificate issuer:       /CN=B22E94C68C47105DBC96228B65437C19A68102C7
Certificate serial:       4F704A208C493DEDAC36532693DE03E9815C3539
Authority key identifier: B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136342e302f32322d3232203d3e20323638363237.roa
Signing time:             Wed 03 Apr 2024 18:32:30 +0000
ROA not before:           Wed 03 Apr 2024 18:27:30 +0000
ROA not after:            Wed 02 Apr 2025 18:32:30 +0000
asID:                     268627
IP address blocks:        45.164.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.crl
                          rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:70:4a:20:8c:49:3d:ed:ac:36:53:26:93:de:03:e9:81:5c:35:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B22E94C68C47105DBC96228B65437C19A68102C7
        Validity
            Not Before: Apr  3 18:27:30 2024 GMT
            Not After : Apr  2 18:32:30 2025 GMT
        Subject: CN=80CB9602174CD41944BDDBC73C46ABBE97334CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ca:8f:b1:14:ad:f3:c7:06:9f:20:29:0c:22:
                    d1:61:a3:34:3a:52:2a:7c:fb:bf:54:c4:fe:da:ce:
                    2d:75:57:5b:6c:73:64:4e:a4:2a:b0:66:5d:3f:4b:
                    e1:ce:c4:35:ec:c3:ed:0d:29:c8:48:5f:77:aa:85:
                    cf:59:77:b0:75:c7:4e:78:75:02:d5:2f:f1:e3:43:
                    99:7c:82:51:e6:5e:76:8e:de:11:e8:f3:01:46:05:
                    18:ad:32:d9:42:17:fe:41:d2:03:d7:26:84:7a:3b:
                    d4:da:85:6c:02:ff:69:2c:0f:ee:59:6f:24:a4:23:
                    26:3c:52:4e:05:45:3a:55:5a:ba:b4:42:d0:7b:c8:
                    f7:cf:7e:9f:a5:e7:ac:b7:12:97:a7:df:fb:da:ee:
                    2e:e8:c7:e5:45:d6:73:9b:53:c1:2e:08:44:9b:87:
                    9c:96:02:45:06:0d:d1:3a:ca:de:f9:f9:84:44:d4:
                    d9:e1:8a:4e:95:0b:d7:cb:67:35:8b:44:db:a0:ae:
                    25:c9:bc:7a:c0:db:86:1d:48:33:87:60:73:ba:32:
                    74:ef:64:d1:28:51:12:88:73:ce:a8:e5:51:49:f3:
                    91:6c:92:55:4b:60:95:ee:79:67:7f:9b:47:49:fb:
                    2c:1e:fa:6f:46:be:8e:cd:51:de:b2:9d:bd:3e:51:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CB:96:02:17:4C:D4:19:44:BD:DB:C7:3C:46:AB:BE:97:33:4C:BD
            X509v3 Authority Key Identifier:
                keyid:B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136342e302f32322d3232203d3e20323638363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:04:f4:e4:7b:64:e4:4f:cb:a2:7b:73:c2:96:93:70:ee:90:
         28:c5:22:f9:ba:c6:6e:33:60:66:95:84:64:ff:a7:2f:64:81:
         9d:4d:ad:c8:2e:e7:ec:45:b5:87:5e:7e:2b:3e:dc:24:61:b1:
         61:ba:ef:fb:ed:93:66:46:37:a1:a6:8e:81:5d:64:b2:7c:19:
         c2:2b:7b:88:60:e4:33:5e:ff:50:c9:0d:3a:ee:e3:31:b7:23:
         62:f8:b9:eb:e6:82:13:79:81:c6:c0:13:fe:97:6c:76:47:57:
         74:3f:2d:d6:66:2e:f9:bd:c3:bf:ab:f8:18:ee:ce:21:a6:f8:
         f7:a4:20:b7:7b:2c:91:7b:6f:af:92:18:91:e6:ad:d0:03:0b:
         15:ee:cd:9b:f1:49:16:76:a9:4e:a7:a3:1d:6b:22:90:34:12:
         6a:2c:77:fc:a1:0c:aa:76:78:3e:33:70:8f:71:c4:eb:37:29:
         bc:7b:f4:d6:cb:3c:8e:51:4e:46:27:39:5c:96:cc:f6:11:e2:
         4e:27:d3:b1:64:1f:62:d8:86:57:06:c0:e4:21:3d:05:c6:72:
         0e:55:33:92:02:5a:77:f9:8b:72:94:30:bb:4a:c6:aa:88:f5:
         cf:63:f0:93:c6:0e:7d:dc:00:27:04:0d:93:87:55:cc:37:8f:
         32:30:b9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:03 2024 by rpki-client on console-ams.rpki-client.org