Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/1/34352e3139302e302e302f32322d3234203d3e20323639363036.roa
File:                     34352e3139302e302e302f32322d3234203d3e20323639363036.roa (raw, json)
Hash identifier:          dyAfRLOJ2e5lA515GXKO77pVgAqYsSUKVMNfC40PgTs=
Subject key identifier:   93:90:84:31:63:0B:B9:9F:A8:2F:B1:9B:25:51:BC:38:B0:FA:5F:A0
Certificate issuer:       /CN=930F94B2822A4E39333379C77F34FE55610ADE71
Certificate serial:       37EFD39E5251428513D6236185633F4CDD8C299E
Authority key identifier: 93:0F:94:B2:82:2A:4E:39:33:33:79:C7:7F:34:FE:55:61:0A:DE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/930F94B2822A4E39333379C77F34FE55610ADE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/1/34352e3139302e302e302f32322d3234203d3e20323639363036.roa
Signing time:             Thu 04 Apr 2024 22:48:22 +0000
ROA not before:           Thu 04 Apr 2024 22:43:22 +0000
ROA not after:            Thu 03 Apr 2025 22:48:22 +0000
asID:                     269606
IP address blocks:        45.190.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/1/930F94B2822A4E39333379C77F34FE55610ADE71.crl
                          rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/1/930F94B2822A4E39333379C77F34FE55610ADE71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/930F94B2822A4E39333379C77F34FE55610ADE71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ef:d3:9e:52:51:42:85:13:d6:23:61:85:63:3f:4c:dd:8c:29:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930F94B2822A4E39333379C77F34FE55610ADE71
        Validity
            Not Before: Apr  4 22:43:22 2024 GMT
            Not After : Apr  3 22:48:22 2025 GMT
        Subject: CN=93908431630BB99FA82FB19B2551BC38B0FA5FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b1:c7:d7:24:73:18:20:ed:10:ee:42:65:6e:
                    4a:28:e9:e2:37:42:af:ad:13:29:b2:99:e0:8f:4b:
                    d3:06:e6:c9:f2:ac:28:5c:b1:38:94:95:eb:1d:d9:
                    36:dc:75:e6:9a:7a:f8:e0:6f:c0:ee:b7:64:90:9a:
                    03:48:57:e0:dc:d0:29:43:17:84:b5:33:c0:d2:3e:
                    48:3b:6a:de:cc:73:be:67:45:c9:33:3e:61:1d:75:
                    2e:f8:23:3c:11:d6:91:04:03:2d:25:fc:24:1f:8e:
                    6f:6e:0b:55:e4:87:57:5d:f2:77:03:8e:77:5d:5c:
                    1f:6e:9e:24:01:70:a9:ae:a9:c2:15:bc:7a:6a:bc:
                    4e:0b:5b:53:22:38:25:f1:28:e0:04:74:61:b3:81:
                    79:9d:4b:3c:87:69:f8:af:4f:cd:f7:dc:d3:76:44:
                    ad:ee:81:f5:5a:66:2d:ff:02:79:a3:ad:df:3e:26:
                    63:20:9b:dc:1f:44:05:64:35:a7:c0:44:a4:8a:57:
                    3c:7a:cb:39:26:44:eb:25:33:a0:0c:13:75:b5:03:
                    b1:d7:cd:b1:e9:04:82:1f:87:d7:87:f6:b6:de:49:
                    ef:29:68:99:f7:20:c1:91:89:33:85:ef:95:c4:f6:
                    af:25:bf:99:f7:08:ad:22:1e:ba:96:96:a3:75:7b:
                    59:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:90:84:31:63:0B:B9:9F:A8:2F:B1:9B:25:51:BC:38:B0:FA:5F:A0
            X509v3 Authority Key Identifier:
                keyid:93:0F:94:B2:82:2A:4E:39:33:33:79:C7:7F:34:FE:55:61:0A:DE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/1/930F94B2822A4E39333379C77F34FE55610ADE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/930F94B2822A4E39333379C77F34FE55610ADE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/1/34352e3139302e302e302f32322d3234203d3e20323639363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:97:5a:c7:f4:89:77:34:52:4f:83:90:0a:5b:33:87:3c:d7:
         82:7a:d9:4d:2c:ab:fd:4a:7f:d7:69:17:0c:69:5c:11:f8:9a:
         93:d0:7d:01:a4:70:3a:d8:5e:09:6d:90:37:30:8a:05:af:e7:
         bd:6b:3b:49:3d:af:99:c9:72:75:88:7e:92:0f:b0:58:e1:2f:
         fd:22:66:68:31:8a:c1:ba:e8:ff:df:1d:21:fd:64:62:34:7c:
         82:98:c7:5b:35:45:21:02:cb:4f:98:85:6f:c8:ee:87:27:a3:
         bb:fa:82:c9:6c:d1:49:19:42:c9:97:df:52:a0:42:bc:a7:31:
         c5:95:89:8d:b3:20:c2:7c:9d:c2:02:95:7a:47:42:39:c6:c9:
         a1:3c:37:a7:6d:3b:93:c0:65:ca:ca:4b:75:0b:e0:8a:db:47:
         d5:0b:f5:97:67:b2:26:e2:f7:40:8f:57:b9:a6:c4:47:ec:8d:
         b1:3d:a8:fd:d1:d8:be:d5:2d:11:17:b5:78:89:71:58:21:b8:
         4b:99:c5:89:13:05:b4:e6:ff:46:dd:10:75:d1:b6:14:40:63:
         eb:0f:22:43:b7:77:ec:ea:10:d4:87:52:15:c1:b8:fc:f5:2f:
         eb:e2:a1:af:dc:a6:2f:81:df:85:49:5e:e2:e9:a2:6d:70:f7:
         67:d2:d5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:57 2024 by rpki-client on console-ams.rpki-client.org