Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135362e302f32322d3232203d3e20323638313031.roa
File:                     34352e3136382e3135362e302f32322d3232203d3e20323638313031.roa (raw, json)
Hash identifier:          3D+mhzx+CASCM2XgtyJH0vay0w/z+zXo6P06CGMefJs=
Subject key identifier:   62:6C:79:E8:1D:3D:4A:28:B6:9C:B1:49:D3:A8:34:E4:D2:AE:0A:67
Certificate issuer:       /CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
Certificate serial:       47AC96A47FCD46BF3D0BCE97AFE6E3326D963601
Authority key identifier: 91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135362e302f32322d3232203d3e20323638313031.roa
Signing time:             Wed 03 Apr 2024 18:32:05 +0000
ROA not before:           Wed 03 Apr 2024 18:27:05 +0000
ROA not after:            Wed 02 Apr 2025 18:32:05 +0000
asID:                     268101
IP address blocks:        45.168.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl
                          rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ac:96:a4:7f:cd:46:bf:3d:0b:ce:97:af:e6:e3:32:6d:96:36:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
        Validity
            Not Before: Apr  3 18:27:05 2024 GMT
            Not After : Apr  2 18:32:05 2025 GMT
        Subject: CN=626C79E81D3D4A28B69CB149D3A834E4D2AE0A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f6:c3:74:c7:3f:bb:db:15:b6:1a:b5:87:55:
                    c3:10:c3:43:05:41:04:40:d8:25:a0:7c:61:ef:b9:
                    e3:99:34:50:6b:ab:d1:78:9f:af:2c:9b:1f:29:88:
                    97:9e:43:41:2f:b9:64:04:8e:2d:04:56:9e:10:de:
                    d2:7e:91:86:9c:18:ba:92:ea:eb:4e:13:32:51:79:
                    0b:30:0a:a9:d6:36:c9:29:fd:4a:87:3a:9b:cb:1c:
                    41:34:bf:53:39:b8:d9:85:ab:32:b9:ff:fa:e2:3d:
                    16:3f:02:13:3e:7e:0b:c4:25:35:b6:b1:9d:c2:dd:
                    ed:bb:1b:ad:30:79:62:e4:27:e1:0f:39:d3:d5:79:
                    02:8a:f3:90:b4:a5:a8:c8:96:30:73:62:6b:55:d1:
                    fc:e0:57:36:3a:db:20:5a:e3:4e:ba:a2:ec:55:b8:
                    a4:da:34:7d:5a:bb:6c:0a:f4:b3:2a:74:21:bc:10:
                    6c:8e:21:fd:09:db:c8:0e:a3:54:de:34:68:77:44:
                    49:e3:3c:18:ff:83:4a:04:be:25:3f:29:bc:b9:74:
                    8f:20:2e:f4:09:89:af:e5:ca:2c:ab:78:a8:7c:e8:
                    c1:95:de:96:1f:f5:9e:c9:0d:5f:16:85:e3:d6:53:
                    9a:54:85:df:fd:22:da:34:b6:2a:b1:1a:59:85:83:
                    90:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6C:79:E8:1D:3D:4A:28:B6:9C:B1:49:D3:A8:34:E4:D2:AE:0A:67
            X509v3 Authority Key Identifier:
                keyid:91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135362e302f32322d3232203d3e20323638313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:f6:53:66:62:45:e5:d7:40:6f:83:ec:19:61:b8:46:7a:1c:
         d4:a5:63:a4:be:40:b4:73:11:62:bf:b7:f8:89:32:25:22:42:
         47:f0:d0:b9:67:42:4e:00:63:ed:e6:b1:fb:36:8e:c7:00:0c:
         a5:5f:7d:bb:5c:8a:6d:4d:7f:67:c7:f3:11:ad:3d:19:1f:f2:
         16:0b:a0:99:82:cd:0e:7a:c8:1e:c1:dd:71:49:52:ca:ae:30:
         e7:d2:27:62:c6:93:40:59:b1:62:9e:67:52:0f:a1:cd:d3:c0:
         40:a4:ce:ad:84:f2:ef:fa:a9:03:79:23:71:96:6c:ce:1b:9d:
         7b:c0:7d:5f:cc:69:79:14:f9:99:89:b8:98:df:ca:db:57:6a:
         18:82:79:2c:20:4e:9b:eb:b5:4c:d9:44:2a:e0:6d:36:e6:d5:
         e9:21:3a:cb:61:6f:94:bd:05:6c:c3:da:4f:bd:28:3f:13:13:
         8b:fd:e9:ec:5e:e4:8c:07:72:2f:1a:4a:bd:6d:4b:1e:82:0b:
         0e:3d:5b:dc:ce:54:47:f5:eb:21:bc:ea:00:a5:6a:42:57:7a:
         f4:2e:ae:f0:e3:8c:87:7b:97:36:71:a2:ac:03:b1:61:47:93:
         d1:48:55:e1:44:b7:f2:b8:a5:97:dc:6f:b8:39:bb:6e:39:05:
         6a:dc:f4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:50 2024 by rpki-client on console-fra.rpki-client.org