Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32332d3233203d3e20323639323835.roa
File:                     34352e3138322e35322e302f32332d3233203d3e20323639323835.roa (raw, json)
Hash identifier:          yZuoUZXrLN5QOpQkonHmaQwv1Bwvs5LAhAb58cNmqEQ=
Subject key identifier:   98:28:85:FB:E6:42:95:37:81:04:3B:21:A6:D5:16:20:39:91:A7:A4
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       1CFD30349F24D5A62F8B490E8F610860A2FBF4AD
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32332d3233203d3e20323639323835.roa
Signing time:             Wed 28 Aug 2024 16:17:46 +0000
ROA not before:           Wed 28 Aug 2024 16:12:46 +0000
ROA not after:            Wed 27 Aug 2025 16:17:46 +0000
asID:                     269285
IP address blocks:        45.182.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fd:30:34:9f:24:d5:a6:2f:8b:49:0e:8f:61:08:60:a2:fb:f4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Aug 28 16:12:46 2024 GMT
            Not After : Aug 27 16:17:46 2025 GMT
        Subject: CN=982885FBE642953781043B21A6D516203991A7A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6e:54:8a:7f:7a:c3:92:06:fb:c8:9a:ce:ef:
                    0d:68:7b:64:40:d1:83:d3:d1:9a:19:25:99:95:89:
                    a4:d0:98:de:c2:81:f2:c6:75:c2:ff:e7:fb:fa:fd:
                    f8:1f:5b:ab:ab:cf:dc:76:bd:81:bc:54:74:ed:c5:
                    19:c4:ad:a7:17:71:e0:51:11:bc:b8:50:df:0e:de:
                    31:a6:a1:af:48:86:3f:51:12:8c:9c:f5:3e:01:6b:
                    8d:7b:6e:5b:f0:66:88:3f:08:cb:7d:5b:00:1c:2e:
                    f8:66:b9:aa:39:20:13:91:b3:40:20:87:75:1b:6b:
                    80:c2:f0:2e:c3:9a:b0:28:a9:c9:07:5d:4a:08:73:
                    03:9f:fc:df:c5:7e:55:99:37:d7:42:ef:4e:3b:11:
                    80:c8:9f:be:10:5d:91:5f:33:9f:8d:37:56:45:cc:
                    34:2b:54:1e:14:1e:5f:f8:25:4e:90:dd:81:f8:3d:
                    d5:2e:24:74:f9:f8:df:44:58:bf:51:46:a5:0b:70:
                    58:76:a0:6b:07:51:6a:c4:ba:a8:e4:16:f7:c8:f6:
                    3a:b9:53:24:1b:ec:33:d9:31:f6:f5:b2:0e:b7:d3:
                    60:99:c5:88:1d:d0:1d:e8:64:a9:6c:64:3c:60:85:
                    2e:d8:91:6e:0b:cd:ee:8b:81:ca:68:ed:83:fa:e6:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:28:85:FB:E6:42:95:37:81:04:3B:21:A6:D5:16:20:39:91:A7:A4
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32332d3233203d3e20323639323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:86:1d:33:3c:42:b3:da:7a:7a:c2:7d:97:89:05:86:17:11:
         eb:f9:db:02:78:ef:f1:ad:0e:fe:4d:da:5f:1d:f9:05:ac:bf:
         01:24:24:da:b4:e8:fc:b4:0a:ff:25:a8:70:8c:62:8a:85:b1:
         a3:2b:31:54:d2:3e:01:64:3b:6e:f9:00:81:e8:f9:99:f0:6b:
         8a:0d:61:bd:d8:1a:99:08:e1:d8:b7:a4:8e:47:71:e5:28:c3:
         74:41:0f:12:05:c9:ec:ec:1b:6d:3a:09:7a:2c:9b:eb:78:fd:
         32:12:e8:bb:7f:cb:50:86:38:15:3f:7a:f8:0e:ac:7a:49:86:
         5c:b5:cf:3f:92:e9:ed:0a:c0:78:51:7d:bd:40:bf:f8:e2:d5:
         d7:fd:06:09:68:b7:75:f1:90:c8:06:f6:67:75:45:39:80:3a:
         dd:67:7e:11:a4:9d:18:38:1f:61:25:0d:31:a8:e7:46:7a:a9:
         4b:af:f0:66:78:bd:7c:1c:25:6d:e3:d1:03:7a:43:3a:c9:2c:
         fb:26:a5:ac:ab:94:86:a4:29:c0:fa:7e:2c:2b:e7:b5:f5:ec:
         8c:79:59:3c:67:60:e3:45:2a:ba:03:b1:df:d2:06:90:90:95:
         a3:73:c7:43:9e:7e:a4:9a:a1:90:fe:ea:de:14:a3:69:0b:aa:
         e0:2d:d2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:58 2024 by rpki-client on console-ams.rpki-client.org