Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/34352e3233352e3130342e302f32322d3233203d3e20323637343133.roa
File:                     34352e3233352e3130342e302f32322d3233203d3e20323637343133.roa (raw, json)
Hash identifier:          qOgELYY1S/lDaDtQTHxTqYsmaywyv+mCTpPTVU2VguY=
Subject key identifier:   42:34:50:A1:57:13:3C:C1:A3:1F:CD:B0:78:F9:C9:F4:11:69:71:99
Certificate issuer:       /CN=4B5BC3338DC2CABB21A0AA55A293FE62BF78383E
Certificate serial:       06F5F403925F7B3FF43C73C8353E169B143D85EC
Authority key identifier: 4B:5B:C3:33:8D:C2:CA:BB:21:A0:AA:55:A2:93:FE:62:BF:78:38:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/34352e3233352e3130342e302f32322d3233203d3e20323637343133.roa
Signing time:             Fri 19 Apr 2024 19:53:45 +0000
ROA not before:           Fri 19 Apr 2024 19:48:45 +0000
ROA not after:            Fri 18 Apr 2025 19:53:45 +0000
asID:                     267413
IP address blocks:        45.235.104.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.crl
                          rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f5:f4:03:92:5f:7b:3f:f4:3c:73:c8:35:3e:16:9b:14:3d:85:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B5BC3338DC2CABB21A0AA55A293FE62BF78383E
        Validity
            Not Before: Apr 19 19:48:45 2024 GMT
            Not After : Apr 18 19:53:45 2025 GMT
        Subject: CN=423450A157133CC1A31FCDB078F9C9F411697199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:88:b9:51:73:cf:9d:9a:e7:2d:2b:07:b1:
                    60:30:33:3a:e7:13:3f:d1:4a:c0:42:6d:a5:cf:37:
                    78:95:04:92:f1:3c:49:cb:e8:06:67:27:b4:70:0b:
                    25:19:80:4e:9e:9c:b2:50:88:49:a2:98:85:07:7d:
                    93:ae:ac:84:82:05:bc:d3:64:c7:63:e2:e1:1a:0f:
                    ba:55:96:f7:be:42:a2:f1:4d:18:79:67:2c:cb:51:
                    c0:a6:7c:63:08:06:39:6b:99:a4:7e:a7:a3:e8:f0:
                    dd:c5:40:bb:bd:d0:da:53:ad:b5:8d:ac:17:0a:d9:
                    96:05:7c:03:52:63:4a:12:cc:7c:cf:1a:6d:b2:6e:
                    94:02:31:85:19:eb:e0:b8:43:c5:23:30:eb:83:c2:
                    f4:4d:ae:1f:d3:a1:31:93:66:60:2a:4d:1f:ad:49:
                    0a:50:5f:67:e4:46:b4:48:5b:07:fd:a8:34:4c:8c:
                    00:37:a7:5f:fd:07:9d:48:5f:37:f8:5d:0a:5b:c2:
                    a5:c0:5f:db:8b:d9:b7:7a:6a:75:7f:48:ef:bb:de:
                    3a:fb:3b:5d:5b:d7:08:77:2e:93:ce:d4:1e:6f:aa:
                    43:9d:ea:43:66:9c:7c:5e:71:2b:30:9b:af:7c:a7:
                    a0:3e:a3:c1:83:cf:d8:f5:05:c1:a9:c4:d0:2a:66:
                    bf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:34:50:A1:57:13:3C:C1:A3:1F:CD:B0:78:F9:C9:F4:11:69:71:99
            X509v3 Authority Key Identifier:
                keyid:4B:5B:C3:33:8D:C2:CA:BB:21:A0:AA:55:A2:93:FE:62:BF:78:38:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/34352e3233352e3130342e302f32322d3233203d3e20323637343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:30:53:a1:42:06:7f:f9:59:61:0c:99:a5:68:9f:5d:ba:d1:
         7d:9c:70:bd:46:ce:22:cc:fb:dd:da:76:53:fb:1d:93:23:fd:
         7e:78:97:d3:11:85:4f:6f:5a:45:6a:77:bf:6b:ac:c0:fa:44:
         62:99:73:89:54:b9:2c:60:89:7a:d0:e2:5a:06:6b:9f:77:b2:
         43:de:0b:a0:8e:9b:8e:e0:39:7c:7c:d9:45:e1:6d:b6:69:62:
         cc:30:ec:ce:9e:9d:34:c2:af:ee:41:0b:07:2e:ac:4c:29:d6:
         48:3d:34:8b:b1:39:11:29:d5:32:44:8c:76:d6:ff:85:9f:f6:
         3a:06:ff:3e:27:de:bc:d1:89:32:28:87:6f:6b:c1:8e:65:95:
         31:be:eb:eb:3c:1d:f3:fe:9a:55:67:56:1b:d5:06:8c:cb:d4:
         84:dd:d6:45:7c:84:03:a4:dc:a1:58:7c:26:ec:3b:c3:75:82:
         96:45:2d:b0:ae:c3:ab:34:63:4c:6a:c8:e8:81:da:21:a5:44:
         53:ea:24:42:a8:19:21:db:5a:31:10:96:98:23:53:d7:7c:14:
         ec:08:1c:e6:9d:45:2b:0f:9d:1c:2c:98:06:3f:f6:12:cd:0e:
         33:ea:a8:34:48:e8:08:cf:d0:b4:8c:e6:3a:af:bf:4b:4c:5b:
         8b:52:47:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:34 2024 by rpki-client on console-fra.rpki-client.org