Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/34352e3138372e3134342e302f32332d3233203d3e20323639343935.roa
File:                     34352e3138372e3134342e302f32332d3233203d3e20323639343935.roa (raw, json)
Hash identifier:          NYn79TUXrQUawUdw72rASsEEUFcOqYDzybpJVRgazZo=
Subject key identifier:   93:CB:CB:C9:FE:D0:1A:87:C5:62:D0:2C:E3:70:EE:98:EC:A4:91:20
Certificate issuer:       /CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
Certificate serial:       7303EF60D2341E44ABAB94FB419E59783C08A26C
Authority key identifier: 14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/34352e3138372e3134342e302f32332d3233203d3e20323639343935.roa
Signing time:             Wed 03 Apr 2024 19:13:48 +0000
ROA not before:           Wed 03 Apr 2024 19:08:48 +0000
ROA not after:            Wed 02 Apr 2025 19:13:48 +0000
asID:                     269495
IP address blocks:        45.187.144.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl
                          rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:09:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:03:ef:60:d2:34:1e:44:ab:ab:94:fb:41:9e:59:78:3c:08:a2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
        Validity
            Not Before: Apr  3 19:08:48 2024 GMT
            Not After : Apr  2 19:13:48 2025 GMT
        Subject: CN=93CBCBC9FED01A87C562D02CE370EE98ECA49120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:fe:3d:2d:73:34:79:4c:43:be:94:54:c8:
                    80:a9:8f:32:ff:96:9e:31:c0:d6:20:ef:b0:00:5d:
                    95:4f:34:f0:46:ad:94:4c:87:df:b4:dd:42:7e:ef:
                    61:75:29:41:bf:f2:94:2b:23:2d:79:1e:08:5b:91:
                    c7:02:7c:5c:3d:65:c3:fb:85:05:03:0b:bf:29:0d:
                    d1:8c:c7:20:2e:72:c1:98:66:fc:4a:6d:b1:7b:bc:
                    8b:34:04:b8:8b:94:68:5e:33:e3:c6:71:61:b3:9a:
                    1a:ab:58:04:b3:56:5e:5b:86:50:1a:45:98:75:51:
                    ae:3f:a9:91:b5:65:b4:39:e2:e1:0d:84:1b:42:5c:
                    c5:4c:18:f9:25:24:44:0c:57:35:02:99:ae:af:bd:
                    a7:e9:ee:5d:b2:66:8c:99:73:de:a3:81:61:45:a1:
                    98:1d:15:26:a3:7b:1b:bf:79:20:3b:02:f3:21:27:
                    2c:df:78:38:dc:93:82:ff:6e:2e:32:d3:ad:e2:94:
                    0b:45:9e:11:54:b7:cc:05:e4:5f:a3:b4:54:43:e3:
                    35:68:53:44:1a:a5:8a:41:b4:be:99:e1:99:8a:55:
                    1f:27:f0:d5:5d:cd:a6:da:2f:98:69:a7:e7:88:1b:
                    ca:16:98:69:7c:db:73:b9:69:a2:f6:a7:09:ba:94:
                    b3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CB:CB:C9:FE:D0:1A:87:C5:62:D0:2C:E3:70:EE:98:EC:A4:91:20
            X509v3 Authority Key Identifier:
                keyid:14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/34352e3138372e3134342e302f32332d3233203d3e20323639343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:b8:c7:0c:65:11:e3:e3:cc:fb:df:4a:96:2a:e7:c8:fd:da:
         a7:12:c7:57:58:8a:40:9c:74:63:ee:72:25:e9:32:ba:c6:a7:
         88:fb:f7:1c:1c:ff:07:29:89:ab:8e:d3:d6:0f:fb:6a:b1:b6:
         2a:10:41:10:55:0f:97:c8:95:e3:b0:70:b9:8c:51:f6:29:86:
         15:54:86:bc:0e:84:06:84:ab:0d:dc:e4:30:a2:4b:b4:79:4c:
         d6:d3:4c:82:d6:6a:0a:a1:9b:29:ca:a7:38:80:54:00:40:1f:
         df:59:5f:73:e3:dc:81:94:d7:b0:31:57:49:4f:8f:14:9b:e1:
         7b:e9:66:a3:b8:77:22:12:a4:a5:5e:65:c4:9d:f9:27:a6:70:
         fa:c8:1a:26:b5:d4:d6:0b:dc:c6:0b:27:d5:b1:c1:b8:8f:a1:
         67:d2:e9:a5:cb:15:d4:4e:52:f4:f5:4c:34:ba:7d:2a:c4:d2:
         68:ba:7b:d6:12:5d:d5:7c:4b:71:47:56:b8:c5:f6:6e:53:c2:
         22:b7:6c:1a:d7:fc:ff:fd:bb:0b:7b:12:12:ad:21:c9:c4:ac:
         b4:aa:c2:db:8a:95:7d:b4:ba:3d:39:22:4d:32:74:d8:85:75:
         37:56:1c:d4:9d:fd:93:9b:86:12:d5:60:36:d0:f8:82:77:43:
         de:4a:9e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:34 2024 by rpki-client on console-ams.rpki-client.org