Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/1/34352e3139302e35322e302f32322d3234203d3e20323639363237.roa
File:                     34352e3139302e35322e302f32322d3234203d3e20323639363237.roa (raw, json)
Hash identifier:          SjtItByAgwqtI9w/mkOkkV6TQ8SEK7j07FGkg0ljkP4=
Subject key identifier:   16:95:80:6D:5D:BE:60:7B:FD:0E:9D:29:56:17:F8:F4:E5:FC:17:50
Certificate issuer:       /CN=D885130E44A5EE4B6DB18729BFAF1D19E78DA95A
Certificate serial:       5EF0ED5079E635125A9BE12CACB797D91D8CC4BD
Authority key identifier: D8:85:13:0E:44:A5:EE:4B:6D:B1:87:29:BF:AF:1D:19:E7:8D:A9:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/1/34352e3139302e35322e302f32322d3234203d3e20323639363237.roa
Signing time:             Wed 23 Oct 2024 16:44:52 +0000
ROA not before:           Wed 23 Oct 2024 16:39:52 +0000
ROA not after:            Wed 22 Oct 2025 16:44:52 +0000
asID:                     269627
IP address blocks:        45.190.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/1/D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.crl
                          rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/1/D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f0:ed:50:79:e6:35:12:5a:9b:e1:2c:ac:b7:97:d9:1d:8c:c4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D885130E44A5EE4B6DB18729BFAF1D19E78DA95A
        Validity
            Not Before: Oct 23 16:39:52 2024 GMT
            Not After : Oct 22 16:44:52 2025 GMT
        Subject: CN=1695806D5DBE607BFD0E9D295617F8F4E5FC1750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:ce:3b:1b:2d:b8:d9:7b:6e:57:17:06:53:
                    5a:9b:50:02:9b:13:1b:89:93:c0:f0:1d:9f:cc:f4:
                    d7:32:96:e8:33:20:ef:9d:49:31:32:3b:b8:d2:b5:
                    b9:1b:1b:4b:42:1b:b2:38:89:d5:16:3b:1f:cc:ef:
                    27:cb:b4:a3:9e:48:3e:32:4e:42:6f:55:9c:a6:f0:
                    f3:9a:a3:d6:e9:8e:02:3b:4d:78:ab:89:09:11:a6:
                    c9:85:f4:25:13:6f:69:fb:71:22:85:83:b1:07:d8:
                    b8:d3:4e:09:2f:54:08:3c:8d:0b:5b:ee:26:fb:73:
                    cf:51:dc:00:ef:f1:4b:9b:ba:ad:38:27:5c:af:b7:
                    30:21:a8:f8:75:76:0c:6f:7e:13:1b:2a:02:5b:dc:
                    c6:a2:ac:cd:80:83:e2:c5:81:35:9e:28:3f:50:f0:
                    5a:7f:7b:65:5a:f3:08:18:61:7a:51:2d:fb:91:4d:
                    07:a8:29:b8:ea:4a:b8:dc:9b:6a:a3:27:18:37:d0:
                    ff:77:f5:e7:f8:69:7f:25:bb:74:c2:42:b6:04:d0:
                    88:85:c9:37:b2:b9:1a:65:9a:dc:2d:74:bb:1c:83:
                    7a:b1:7b:1c:1c:bb:75:49:39:d8:d4:89:55:08:98:
                    98:c9:a0:4f:5f:65:0d:a9:f6:64:17:66:59:a4:99:
                    cc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:95:80:6D:5D:BE:60:7B:FD:0E:9D:29:56:17:F8:F4:E5:FC:17:50
            X509v3 Authority Key Identifier:
                keyid:D8:85:13:0E:44:A5:EE:4B:6D:B1:87:29:BF:AF:1D:19:E7:8D:A9:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/1/D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/1/34352e3139302e35322e302f32322d3234203d3e20323639363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:e4:83:2b:d9:01:05:e4:b5:e3:96:10:76:75:42:49:ab:b1:
         3b:32:00:a6:7a:af:5d:e3:0c:be:8c:ba:bf:49:5c:42:dc:5c:
         ab:17:61:26:af:c8:dc:80:61:89:d7:cf:9c:d5:8d:f7:2e:9f:
         3e:3c:08:09:be:f6:1c:24:65:f8:89:ee:2f:8d:44:f9:af:e1:
         62:f9:02:ea:f2:62:6c:58:25:9b:ef:3c:0a:8b:1e:58:84:68:
         35:7f:88:9e:6d:65:90:61:16:27:67:ab:b1:60:d3:e8:e2:a1:
         1c:f5:89:b8:bf:0d:ef:09:26:24:dd:47:cd:94:a9:c9:fa:d0:
         44:6f:a5:f8:f2:0b:4c:f4:cd:a6:39:5d:53:55:e0:d2:58:b6:
         70:62:c0:ab:e0:bf:4b:03:cc:2b:fb:82:71:56:30:eb:67:d0:
         e2:1c:01:6b:91:55:d9:e6:bf:bb:5b:4f:15:23:ed:d6:c3:09:
         d1:4f:b2:a6:b2:0d:df:ab:e8:14:6b:71:2f:63:21:9f:94:50:
         9c:d2:44:98:96:bb:08:9b:fe:c9:d0:9e:87:32:54:13:f6:4f:
         12:37:0b:6d:3b:26:1f:5b:68:cd:1f:30:4b:43:7b:6e:96:22:
         1b:f7:12:87:3c:7b:52:eb:bf:28:08:b9:70:a4:87:b4:b2:68:
         dc:f3:fc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:15 2024 by rpki-client on console-ams.rpki-client.org