Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa
File:                     34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa (raw, json)
Hash identifier:          RFkZafYItnwm1cuAbjYFAbIztZLQE6nItSvxOdF4uRI=
Subject key identifier:   46:C5:75:B8:F3:3A:DC:36:3D:81:8A:59:89:AD:AA:4F:93:F1:17:9C
Certificate issuer:       /CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
Certificate serial:       3AB987F13575AA5DFFC8DB43D3F3263E7302087B
Authority key identifier: 91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa
Signing time:             Wed 03 Apr 2024 18:32:05 +0000
ROA not before:           Wed 03 Apr 2024 18:27:05 +0000
ROA not after:            Wed 02 Apr 2025 18:32:05 +0000
asID:                     268101
IP address blocks:        45.168.158.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl
                          rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b9:87:f1:35:75:aa:5d:ff:c8:db:43:d3:f3:26:3e:73:02:08:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
        Validity
            Not Before: Apr  3 18:27:05 2024 GMT
            Not After : Apr  2 18:32:05 2025 GMT
        Subject: CN=46C575B8F33ADC363D818A5989ADAA4F93F1179C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fe:25:af:b2:a9:9a:9a:69:ca:0b:ad:37:91:
                    ec:c2:90:27:18:ea:72:82:7c:f9:21:83:8d:07:f0:
                    94:35:23:7e:8f:8d:73:c4:82:ad:26:40:5f:c4:da:
                    c0:fd:7c:47:45:2e:33:50:20:e4:79:55:5b:b7:7b:
                    19:e4:d3:d0:e1:51:f6:d4:93:87:32:ae:46:cc:73:
                    d2:b0:88:50:bd:a6:0f:78:27:74:94:63:64:76:ed:
                    21:0f:8f:ac:7e:3e:e6:8c:77:95:a0:c5:e3:0d:c6:
                    6c:bd:a8:87:27:b9:4c:7f:20:b4:3c:2c:de:33:82:
                    3a:9b:ab:b2:85:6e:70:19:61:85:a3:d4:2c:ca:c3:
                    fa:2f:bd:35:f7:f8:db:db:4c:99:26:31:dd:fa:02:
                    96:e0:71:29:af:a7:ee:5e:a5:2c:c8:12:23:3f:ec:
                    ca:8b:10:85:25:ae:0e:3f:88:11:7d:68:cc:e3:6d:
                    cc:9a:14:77:3b:a0:ba:bd:25:16:45:f5:13:ce:02:
                    cc:c2:d9:c7:12:0d:8f:6d:44:6a:5f:a9:2d:66:0e:
                    6b:d7:b7:5f:2f:c6:f7:2a:fb:69:36:b3:3a:4e:13:
                    47:f1:75:46:6d:40:43:1d:af:84:30:d3:d9:1b:4e:
                    27:1b:5e:58:4c:8c:77:52:b7:d0:70:1d:2f:0c:92:
                    1c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C5:75:B8:F3:3A:DC:36:3D:81:8A:59:89:AD:AA:4F:93:F1:17:9C
            X509v3 Authority Key Identifier:
                keyid:91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:f1:93:e4:b1:b0:d7:a3:cf:e0:ed:55:31:2f:5b:df:45:4d:
         8f:34:42:14:e3:98:03:7e:e8:2d:2d:00:b9:79:d4:07:42:27:
         4e:99:29:74:34:55:20:63:ae:ce:b8:bb:96:6c:56:ef:e7:2e:
         d1:52:0a:f9:ab:bf:be:77:09:9b:aa:c1:35:0b:4d:16:c0:95:
         22:00:c7:42:47:87:5f:be:35:00:d3:d0:fc:c0:c3:c2:ce:79:
         81:23:01:22:af:82:db:16:06:78:b2:27:e6:dd:f0:bc:ac:99:
         59:fb:05:e6:c1:68:30:dd:ef:da:59:2b:51:33:64:e1:e3:4d:
         cd:2b:59:d2:0c:fc:52:81:e9:5e:1b:1f:71:aa:e5:52:ef:c8:
         2f:0e:eb:56:8e:7c:8d:df:ab:3f:04:d3:77:5a:1c:1d:c5:54:
         5e:60:d1:8c:e6:f3:59:9a:e2:3b:f0:c6:19:84:4c:96:e7:2d:
         84:3a:a6:cb:62:72:1d:83:95:11:16:04:5f:4f:2d:fe:e2:33:
         3d:ff:13:01:09:a2:3e:75:d1:26:ab:43:c5:86:b5:b9:e9:7b:
         e1:dd:19:05:b2:10:33:03:42:bb:68:a5:1f:ce:7d:b5:e3:85:
         4c:e8:2b:f2:f1:07:28:0e:0a:aa:63:c2:15:38:66:41:2a:38:
         7b:5d:d1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org