Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136362e302f32332d3233203d3e20323639323838.roa
File:                     34352e3138332e3136362e302f32332d3233203d3e20323639323838.roa (raw, json)
Hash identifier:          ypfzFmW8R2tQ6aJVH2dxegfDaasnTccRKrPbUgc3yas=
Subject key identifier:   E4:F9:50:4B:55:D7:F6:28:01:32:23:03:63:7F:99:F0:CC:BB:1E:40
Certificate issuer:       /CN=41E49D87299166D22055B6ADC5AA3AED91A219F6
Certificate serial:       4CE823B412841CBF52D3CD922EE86320BCEFA1AA
Authority key identifier: 41:E4:9D:87:29:91:66:D2:20:55:B6:AD:C5:AA:3A:ED:91:A2:19:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41E49D87299166D22055B6ADC5AA3AED91A219F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136362e302f32332d3233203d3e20323639323838.roa
Signing time:             Sun 21 Jul 2024 23:33:30 +0000
ROA not before:           Sun 21 Jul 2024 23:28:30 +0000
ROA not after:            Sun 20 Jul 2025 23:33:30 +0000
asID:                     269288
IP address blocks:        45.183.166.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/41E49D87299166D22055B6ADC5AA3AED91A219F6.crl
                          rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/41E49D87299166D22055B6ADC5AA3AED91A219F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41E49D87299166D22055B6ADC5AA3AED91A219F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e8:23:b4:12:84:1c:bf:52:d3:cd:92:2e:e8:63:20:bc:ef:a1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E49D87299166D22055B6ADC5AA3AED91A219F6
        Validity
            Not Before: Jul 21 23:28:30 2024 GMT
            Not After : Jul 20 23:33:30 2025 GMT
        Subject: CN=E4F9504B55D7F62801322303637F99F0CCBB1E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:46:f9:0f:ad:20:75:ac:db:e2:4e:ca:7d:5a:
                    26:fb:2f:a5:5a:41:de:34:2d:48:31:d9:1b:21:fd:
                    4b:f5:3f:c1:70:1c:91:43:73:43:04:41:dd:47:ae:
                    20:8d:21:9a:76:ff:68:0f:be:52:6e:de:b8:82:51:
                    39:96:0f:9e:18:fd:6a:72:cc:72:02:f0:61:2e:20:
                    79:be:4c:f8:bb:98:8e:bc:ae:e7:8f:3f:fe:f4:62:
                    98:93:4f:65:fe:82:3f:6c:14:df:55:85:92:4b:d9:
                    6b:25:d0:cf:35:47:ae:c6:2f:cd:b4:9d:03:bd:bf:
                    43:8d:5a:09:1d:96:2a:cd:bf:79:44:62:c9:e9:a5:
                    fb:58:8e:68:0e:4e:c1:60:d0:df:70:e7:5a:ec:af:
                    4f:4c:3f:c5:b1:a1:24:c6:43:18:47:1f:87:01:39:
                    0c:99:64:0a:75:db:ea:71:9c:eb:91:74:6a:f6:99:
                    30:e8:58:e8:a9:45:ff:95:f1:54:81:c7:16:73:5c:
                    a8:29:78:14:f7:c5:13:c7:83:f6:7a:36:d1:f2:ff:
                    8d:71:57:a3:df:5f:00:41:05:54:46:5d:63:8e:09:
                    d4:3d:23:17:e6:e1:95:ad:05:e6:c3:1e:fa:a1:26:
                    6d:49:6d:79:93:02:a7:ea:f8:d6:5c:cd:8a:f5:d0:
                    ad:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F9:50:4B:55:D7:F6:28:01:32:23:03:63:7F:99:F0:CC:BB:1E:40
            X509v3 Authority Key Identifier:
                keyid:41:E4:9D:87:29:91:66:D2:20:55:B6:AD:C5:AA:3A:ED:91:A2:19:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/41E49D87299166D22055B6ADC5AA3AED91A219F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41E49D87299166D22055B6ADC5AA3AED91A219F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136362e302f32332d3233203d3e20323639323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:3f:4b:b9:a4:8c:8f:65:3b:8b:b0:e1:d2:43:c2:9e:5c:42:
         58:db:ad:fa:94:50:e5:6c:c9:bb:b1:84:cc:c2:ce:75:b6:a7:
         e2:eb:ff:14:58:5c:6e:6b:2b:3a:bb:ae:c4:47:b7:64:2d:01:
         45:be:3b:56:0f:4b:a9:ef:10:cb:10:7c:bf:b6:f2:5c:7c:cc:
         36:08:3c:b0:26:2f:ce:a5:a2:c3:9e:e2:41:81:ea:91:6e:58:
         f8:de:aa:6a:c5:03:1c:4a:3c:35:bd:e3:4f:a4:0f:ec:89:cb:
         bd:3e:c1:6c:3a:13:79:95:99:54:29:a4:47:9a:bf:c9:a6:31:
         3f:0a:1e:80:69:7c:85:a7:97:bc:26:3a:e5:f0:f0:a7:9f:27:
         56:98:a4:d8:f7:b9:a3:2c:4e:c2:d3:3b:3c:33:c4:fe:0b:fb:
         07:c7:3b:8d:d3:dd:97:59:ef:2d:9f:38:61:9e:5e:86:a6:00:
         2c:8f:e4:36:b9:1e:b0:c2:1f:4d:94:56:1c:85:bc:d4:80:34:
         b7:e3:9c:7e:1f:c6:38:dc:3c:77:1c:ff:b6:da:4a:b6:ed:26:
         1d:8e:0f:aa:4c:81:1a:84:d6:d0:66:1f:16:06:a3:83:ab:6b:
         9f:5b:77:84:08:51:a5:a7:bb:e8:6d:07:0a:1a:2e:79:b6:51:
         f7:99:0b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:17 2024 by rpki-client on console-fra.rpki-client.org