Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32322d3232203d3e20323639323835.roa
File:                     34352e3138322e35322e302f32322d3232203d3e20323639323835.roa (raw, json)
Hash identifier:          jCASJLtwmLLKSPVjnJWx0y6Nop2/miPxAX+p8ne3kVU=
Subject key identifier:   C7:EF:79:12:2D:82:F2:73:73:2E:BE:3A:29:AC:EE:17:09:C5:68:06
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       134D9BEC73C4455A8D5B704C282608B8D0AD3013
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32322d3232203d3e20323639323835.roa
Signing time:             Wed 28 Aug 2024 16:17:46 +0000
ROA not before:           Wed 28 Aug 2024 16:12:46 +0000
ROA not after:            Wed 27 Aug 2025 16:17:46 +0000
asID:                     269285
IP address blocks:        45.182.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4d:9b:ec:73:c4:45:5a:8d:5b:70:4c:28:26:08:b8:d0:ad:30:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Aug 28 16:12:46 2024 GMT
            Not After : Aug 27 16:17:46 2025 GMT
        Subject: CN=C7EF79122D82F273732EBE3A29ACEE1709C56806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:42:3a:20:0e:fc:26:4d:92:f6:0e:24:a1:
                    d3:d5:c5:2d:a3:19:29:f1:03:52:4a:54:17:1c:fe:
                    56:df:3f:6e:5b:25:d6:73:f8:8a:5a:bd:df:6d:f0:
                    12:c4:3b:68:73:97:71:cb:db:fe:2b:5f:9b:71:7f:
                    92:53:10:ee:75:e9:2f:65:26:55:35:aa:a3:b4:96:
                    36:79:4c:75:cb:82:3f:7b:04:9e:d7:01:3b:02:2a:
                    92:6d:4c:6f:e5:27:49:72:d8:b9:59:ae:d1:cc:c2:
                    fd:04:cd:df:fc:b1:bc:27:24:2d:91:f8:fb:54:a6:
                    b2:27:c9:9e:20:0b:15:04:c1:36:31:c2:8b:4e:46:
                    3b:0e:d3:4b:a3:e4:a2:ed:13:1b:4d:bb:23:ea:40:
                    cf:30:08:f4:fb:5e:de:17:f7:d2:b8:f0:b1:69:08:
                    7e:9b:b6:df:df:df:1f:64:ae:6a:11:12:ba:d2:16:
                    6f:c7:dd:8e:e4:c5:5b:9a:fd:04:e1:39:2b:27:f2:
                    24:11:a2:a5:ce:c2:8d:ae:10:45:5e:cc:a8:57:68:
                    c2:cf:64:5d:af:5f:cd:9d:1a:9b:ee:35:83:5f:1e:
                    28:f8:25:9f:56:b9:6b:8b:cf:88:44:3e:5e:f5:93:
                    82:0c:ba:9d:c5:a8:13:e7:f6:0b:bb:14:e4:6e:e5:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EF:79:12:2D:82:F2:73:73:2E:BE:3A:29:AC:EE:17:09:C5:68:06
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32322d3232203d3e20323639323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:cd:b5:d3:7d:ec:30:40:32:59:29:6b:ef:44:51:c4:39:b8:
         70:24:c9:32:be:d1:66:15:42:cd:a8:e9:d5:1c:af:31:7b:de:
         50:ba:1d:a3:b8:e0:63:2f:b8:3a:73:21:d0:30:51:3d:fc:5d:
         5d:1f:c2:3a:8d:66:58:3f:a3:dd:47:07:ee:ae:6d:3a:58:1f:
         28:10:c7:25:8d:27:82:79:18:1e:0c:c0:b2:3a:3a:8a:da:17:
         5b:57:b0:9f:17:85:49:c9:83:f1:2b:df:d4:72:17:0b:bb:b5:
         34:bc:af:05:c5:f2:92:83:01:a7:f9:6a:aa:00:dc:b0:c6:55:
         a7:44:fd:47:82:03:bb:2c:19:97:d1:7e:29:63:e7:c1:65:46:
         4a:ca:25:de:ef:5b:ae:9d:e5:b2:8d:e8:96:40:9f:0c:32:78:
         1d:96:63:6f:f7:a0:32:6e:34:7c:1e:ce:47:2b:aa:c7:b8:79:
         46:0b:fc:cd:1f:26:a2:76:93:c5:77:66:31:58:ca:0c:a7:f8:
         03:32:19:a0:c4:52:31:62:6d:dd:66:51:f4:fc:b2:27:c8:35:
         61:7e:6a:51:68:de:3b:1a:80:5c:5e:7a:39:0c:f1:7e:92:3b:
         06:fc:8a:e2:60:b6:25:9f:50:1d:dc:a7:03:e6:93:fb:78:d1:
         a8:9f:c1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:58 2024 by rpki-client on console-ams.rpki-client.org