Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35352e302f32342d3234203d3e20323639323835.roa
File:                     34352e3138322e35352e302f32342d3234203d3e20323639323835.roa (raw, json)
Hash identifier:          iOl1Jhws0osNJtC4QhQxd1miHQOtEQjp0Segq2G7SBk=
Subject key identifier:   43:C2:86:78:23:67:5D:8D:2C:09:99:A6:C3:B9:C2:3F:3E:66:CE:1D
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       4AACA9EF38E8488FC17587DE5B87533B1C2EAF73
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35352e302f32342d3234203d3e20323639323835.roa
Signing time:             Wed 28 Aug 2024 16:17:45 +0000
ROA not before:           Wed 28 Aug 2024 16:12:45 +0000
ROA not after:            Wed 27 Aug 2025 16:17:45 +0000
asID:                     269285
IP address blocks:        45.182.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ac:a9:ef:38:e8:48:8f:c1:75:87:de:5b:87:53:3b:1c:2e:af:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Aug 28 16:12:45 2024 GMT
            Not After : Aug 27 16:17:45 2025 GMT
        Subject: CN=43C2867823675D8D2C0999A6C3B9C23F3E66CE1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:47:a4:95:e4:93:62:cf:08:25:c4:a9:b9:dc:
                    fb:4a:b2:f5:e6:88:0e:4f:9e:fb:e2:e5:be:54:60:
                    f8:f6:6b:da:e2:0d:62:85:fa:94:be:7e:14:38:97:
                    9e:65:5c:ef:9a:e0:24:9d:4a:49:35:44:10:62:da:
                    a0:56:1a:d6:f7:b1:46:4a:92:36:e5:7a:7c:b4:fd:
                    bd:bd:c1:bc:af:74:58:36:c3:f4:9c:03:51:af:d0:
                    82:3d:15:0a:0f:8c:eb:7c:ed:83:8d:25:13:f4:e0:
                    43:b9:25:b3:bf:75:b0:21:4e:f2:0b:82:e8:97:2f:
                    84:ea:e4:c3:e5:3e:8c:65:96:96:f3:f6:a5:e7:47:
                    89:2c:5c:ce:45:9c:e1:10:1a:63:79:87:91:42:2d:
                    0f:12:be:22:c6:d5:6b:44:69:f5:6a:05:9f:ed:fb:
                    2b:78:27:2a:fb:4d:e9:23:ae:a4:2d:50:11:b5:62:
                    8a:04:67:dd:f9:69:f8:6f:4a:28:2d:71:62:8f:f8:
                    2a:b2:ee:c8:3f:00:24:1d:63:11:e2:7d:5f:90:19:
                    84:c7:64:79:ae:f0:f1:19:c8:49:46:08:e5:f9:00:
                    af:13:39:6f:94:61:1b:55:8b:2c:cc:a6:e3:aa:4a:
                    f5:f3:5b:f7:d8:8e:90:4f:da:dc:88:73:01:fa:aa:
                    38:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C2:86:78:23:67:5D:8D:2C:09:99:A6:C3:B9:C2:3F:3E:66:CE:1D
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35352e302f32342d3234203d3e20323639323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:7e:ab:17:a7:3d:87:55:8c:ca:44:d2:fa:b5:32:20:95:
         fd:f2:1b:8e:8d:80:54:f0:8b:7f:d5:bc:78:af:67:e8:a9:0c:
         c7:5a:04:e6:88:cd:69:ad:a6:b8:b5:1a:dc:1d:32:6f:c5:92:
         5c:42:28:65:e9:1f:56:a3:b8:7c:61:d7:ee:4f:df:c3:94:03:
         4e:46:2b:fe:89:4d:df:c4:62:42:78:12:04:c9:6d:7f:d9:b7:
         fc:70:d7:8e:78:bb:18:4e:33:1b:67:83:87:36:37:64:e2:8d:
         a0:68:1b:32:fa:5b:59:e8:bb:7d:68:c5:9f:0a:63:6a:7d:86:
         fd:53:09:5d:55:49:82:e5:7a:d2:f3:aa:70:b4:a9:03:39:25:
         5a:be:e4:fa:ed:f7:b8:44:51:bd:41:00:45:0b:93:57:19:02:
         fe:26:aa:a9:65:df:78:35:ad:28:62:99:06:fe:e9:22:4b:b5:
         e7:8a:aa:9b:37:5e:a9:78:0b:a9:bd:79:4c:82:6d:d8:49:8f:
         cd:de:77:b0:50:dd:54:3c:4d:54:e5:f9:c4:7f:9e:9c:e8:1d:
         ac:c4:eb:5f:59:c5:9d:db:dd:ac:8f:7f:4d:86:3d:7e:93:d3:
         65:4d:55:53:04:c7:45:8c:1a:6e:f6:37:07:62:ba:27:dc:48:
         2f:3e:83:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:58 2024 by rpki-client on console-ams.rpki-client.org