Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/34352e3137392e34302e302f32322d3234203d3e20323639303832.roa
File:                     34352e3137392e34302e302f32322d3234203d3e20323639303832.roa (raw, json)
Hash identifier:          RXHGaViEdbaCQFdRWSsrzbbiELimi0w1RHDtlBlPN0c=
Subject key identifier:   1D:30:06:A2:21:CA:AE:91:48:CC:5E:A6:5C:92:8D:11:11:1F:8C:3C
Certificate issuer:       /CN=E205EB197526993ADD700764E53493B3E4B2EEB8
Certificate serial:       7005ECE59D8793660E3E38CB677D31CDAA219811
Authority key identifier: E2:05:EB:19:75:26:99:3A:DD:70:07:64:E5:34:93:B3:E4:B2:EE:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E205EB197526993ADD700764E53493B3E4B2EEB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/34352e3137392e34302e302f32322d3234203d3e20323639303832.roa
Signing time:             Thu 04 Apr 2024 07:29:37 +0000
ROA not before:           Thu 04 Apr 2024 07:24:37 +0000
ROA not after:            Thu 03 Apr 2025 07:29:37 +0000
asID:                     269082
IP address blocks:        45.179.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.crl
                          rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E205EB197526993ADD700764E53493B3E4B2EEB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:05:ec:e5:9d:87:93:66:0e:3e:38:cb:67:7d:31:cd:aa:21:98:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E205EB197526993ADD700764E53493B3E4B2EEB8
        Validity
            Not Before: Apr  4 07:24:37 2024 GMT
            Not After : Apr  3 07:29:37 2025 GMT
        Subject: CN=1D3006A221CAAE9148CC5EA65C928D11111F8C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:eb:af:39:46:90:89:3f:df:9e:17:93:58:
                    be:81:84:78:84:7e:18:47:2e:a3:35:08:2f:33:26:
                    21:04:e3:61:83:12:d1:ad:e2:e7:11:20:95:b6:39:
                    d5:48:4c:32:82:0b:cf:ff:ee:21:0e:91:72:3d:15:
                    e9:67:f4:ee:30:2f:c2:51:35:b3:3b:b1:b0:3d:78:
                    07:be:e6:f5:ae:b0:8a:95:0c:5f:7b:fa:d8:05:70:
                    2f:1c:1e:6b:27:86:e2:79:c0:51:82:74:11:38:99:
                    c7:a7:8e:17:76:8a:67:27:cf:00:3c:5b:f8:a4:f7:
                    62:9c:95:0a:5a:5b:15:fc:44:42:c7:5c:d9:b8:3a:
                    98:3e:1d:de:bd:0f:d2:ab:c6:26:0a:a0:b6:05:1d:
                    f6:fc:6d:87:c2:2b:2a:33:34:f7:26:9a:a3:19:db:
                    d8:88:99:47:a0:f6:6a:38:04:36:57:ec:17:7c:8d:
                    b4:94:09:5f:67:b1:10:aa:56:fd:c4:85:dd:cb:f1:
                    6b:71:c0:52:6e:8b:97:84:f3:f2:04:bc:7a:cd:57:
                    28:6e:04:2a:06:de:b3:4b:0c:08:65:d9:17:7d:dc:
                    cf:97:ca:71:63:15:3e:e0:27:97:b3:c1:30:cd:e3:
                    65:97:12:ef:70:81:07:bf:dc:e6:62:2c:f0:03:36:
                    5b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:30:06:A2:21:CA:AE:91:48:CC:5E:A6:5C:92:8D:11:11:1F:8C:3C
            X509v3 Authority Key Identifier:
                keyid:E2:05:EB:19:75:26:99:3A:DD:70:07:64:E5:34:93:B3:E4:B2:EE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E205EB197526993ADD700764E53493B3E4B2EEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/34352e3137392e34302e302f32322d3234203d3e20323639303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:74:ac:7d:f7:de:bf:82:02:f9:b8:ce:73:81:1f:14:be:3b:
         93:b3:d5:57:0c:65:bc:ff:5b:a0:b3:ee:5f:ce:f2:3c:b3:d8:
         b1:25:b5:e3:0e:ad:37:ac:cb:7a:d9:b7:2d:7a:38:81:81:fe:
         91:3f:b9:38:0d:f0:9c:3e:81:3f:2a:4c:9f:fe:14:62:36:d9:
         36:68:8c:a5:cd:65:32:1f:8c:49:6b:0d:ad:7e:7d:77:24:df:
         26:63:cf:7c:47:7e:17:03:a2:9a:97:81:70:48:4b:8a:63:6c:
         39:24:25:79:74:cc:05:b4:e0:5c:46:1a:b4:2f:55:88:8b:b9:
         99:f2:4e:98:ce:d9:b5:36:4c:02:ed:2a:b0:80:90:e3:50:99:
         66:41:57:f4:1e:0b:51:97:58:54:d8:d7:13:91:ba:06:32:59:
         a3:aa:a2:97:d5:da:6c:ac:06:aa:6d:98:10:5a:dc:32:1d:f9:
         fa:81:9e:ea:ed:1e:f2:1d:53:fe:8b:b0:e4:e6:fc:30:ba:ad:
         b9:30:0f:a5:3f:da:d3:9c:cb:aa:64:09:02:7c:f5:a5:9d:5c:
         73:40:12:39:43:70:f2:50:ae:16:8a:6f:6e:c1:1c:d7:a0:88:
         30:12:09:8b:53:c5:1c:80:84:1a:39:25:3f:c8:ec:37:de:1c:
         dc:d9:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:37 2024 by rpki-client on console-fra.rpki-client.org