Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/1/34352e3138302e3230382e302f32322d3234203d3e20323639313535.roa
File:                     34352e3138302e3230382e302f32322d3234203d3e20323639313535.roa (raw, json)
Hash identifier:          hGpg3jhprktqqGef5v1ZAOOe28+8NhpP5vmo1ffPsrE=
Subject key identifier:   BB:6D:8A:2C:F1:7F:23:17:EE:17:4A:59:AA:E4:9F:42:7C:BC:49:B3
Certificate issuer:       /CN=D0141D0910DD3A1235DA00E3AE363674AF93C9B4
Certificate serial:       264171932D0604DAE6F62694582089857E93FE1B
Authority key identifier: D0:14:1D:09:10:DD:3A:12:35:DA:00:E3:AE:36:36:74:AF:93:C9:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0141D0910DD3A1235DA00E3AE363674AF93C9B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/1/34352e3138302e3230382e302f32322d3234203d3e20323639313535.roa
Signing time:             Thu 04 Apr 2024 04:17:07 +0000
ROA not before:           Thu 04 Apr 2024 04:12:07 +0000
ROA not after:            Thu 03 Apr 2025 04:17:07 +0000
asID:                     269155
IP address blocks:        45.180.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/1/D0141D0910DD3A1235DA00E3AE363674AF93C9B4.crl
                          rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/1/D0141D0910DD3A1235DA00E3AE363674AF93C9B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0141D0910DD3A1235DA00E3AE363674AF93C9B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:41:71:93:2d:06:04:da:e6:f6:26:94:58:20:89:85:7e:93:fe:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0141D0910DD3A1235DA00E3AE363674AF93C9B4
        Validity
            Not Before: Apr  4 04:12:07 2024 GMT
            Not After : Apr  3 04:17:07 2025 GMT
        Subject: CN=BB6D8A2CF17F2317EE174A59AAE49F427CBC49B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e4:b0:7e:02:68:fe:e3:0e:fb:0d:4f:5c:da:
                    21:91:21:86:8f:2b:56:8d:20:17:a9:25:4b:10:4d:
                    65:98:1b:ff:83:a3:f8:d9:5b:97:f1:01:1a:bf:07:
                    8a:04:54:cc:fb:0f:05:b6:fc:f1:8c:80:39:a3:2d:
                    99:72:f5:3b:16:63:04:a7:ed:db:55:60:e8:9a:50:
                    c5:94:e8:38:a9:02:59:bb:cb:0b:e6:62:ff:f0:6e:
                    40:e1:96:5a:8d:67:7b:e0:86:2f:a3:18:05:1f:54:
                    37:a7:51:22:db:e8:27:68:ae:14:1e:f3:62:87:6c:
                    ca:84:4e:22:6c:f0:96:fb:9f:7e:56:77:83:7b:4a:
                    84:bc:16:b3:7e:c2:dc:ad:7a:0a:f2:0b:ec:7b:a1:
                    cd:6a:76:36:db:85:a5:2d:8d:f2:5b:d0:cb:59:9b:
                    f3:6a:72:3b:68:95:a5:d6:30:2b:f6:8c:06:2d:9d:
                    9c:e4:93:80:ca:07:d2:81:2e:fa:c9:63:f8:23:d6:
                    ef:92:b5:ea:d1:bf:8f:17:05:a1:d9:4f:28:58:0c:
                    c4:e6:ab:d7:b3:1e:97:73:37:24:de:bc:87:35:ec:
                    7c:27:8a:6b:67:75:ae:d6:a5:de:e7:a8:84:8e:ea:
                    15:3e:3a:cf:b3:b2:72:53:5a:ce:92:6c:7e:f4:5f:
                    70:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6D:8A:2C:F1:7F:23:17:EE:17:4A:59:AA:E4:9F:42:7C:BC:49:B3
            X509v3 Authority Key Identifier:
                keyid:D0:14:1D:09:10:DD:3A:12:35:DA:00:E3:AE:36:36:74:AF:93:C9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/1/D0141D0910DD3A1235DA00E3AE363674AF93C9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0141D0910DD3A1235DA00E3AE363674AF93C9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/1/34352e3138302e3230382e302f32322d3234203d3e20323639313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:73:a0:48:42:71:6d:ac:08:2b:6f:73:f1:1c:82:64:35:b4:
         d7:df:64:30:aa:b9:3b:24:74:de:b7:24:20:cc:1e:b5:7c:6e:
         74:cd:e9:c8:10:1a:20:35:d6:f0:97:45:3b:7d:7a:57:f9:da:
         ee:23:2e:43:49:73:c1:d1:48:44:5c:a1:81:e0:2e:7a:5a:ee:
         58:ef:27:9d:51:ed:23:5a:73:f6:4f:d7:ec:c1:cd:bd:7e:6b:
         74:ca:fb:8c:ad:ec:99:ff:89:67:54:03:30:8f:ab:6e:fd:84:
         03:22:cc:64:be:c8:2c:1e:6d:5d:2b:38:22:1d:b2:78:0b:41:
         97:70:b6:72:be:24:aa:8c:3a:a9:d8:8d:e5:7e:a3:8d:37:f0:
         21:f5:3b:f0:c0:fb:0d:a9:d9:75:4c:88:22:41:ed:9a:d7:86:
         f6:d4:85:6d:dd:ab:ce:62:63:0d:fd:f1:ae:1c:a3:4a:05:99:
         bb:50:d9:02:3a:a7:c8:39:ce:69:9d:71:4d:79:6b:e4:35:0d:
         a3:e1:d0:07:e5:97:ae:f4:1b:94:f9:f4:3b:8f:5d:4b:6b:fa:
         53:fc:01:bd:a9:57:34:f2:b2:35:ae:1b:df:c7:92:69:ef:e8:
         3a:49:21:bd:f5:45:d9:7b:75:8a:54:70:17:fe:eb:db:4e:6d:
         53:aa:10:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:36 2024 by rpki-client on console-ams.rpki-client.org