Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/34352e3138322e382e302f32322d3232203d3e20323639323632.roa
File:                     34352e3138322e382e302f32322d3232203d3e20323639323632.roa (raw, json)
Hash identifier:          teQz1cIQGDN3nhxSYnwIJG8j9ZRXbylsm2ti64Z5YLI=
Subject key identifier:   4F:C2:A0:6F:8B:A7:50:73:75:DF:E0:48:8E:FE:F3:8D:3F:60:DB:FF
Certificate issuer:       /CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
Certificate serial:       0D1EC95991CC85657EFE59D44189D861E49CCD16
Authority key identifier: F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/34352e3138322e382e302f32322d3232203d3e20323639323632.roa
Signing time:             Thu 04 Apr 2024 07:29:07 +0000
ROA not before:           Thu 04 Apr 2024 07:24:07 +0000
ROA not after:            Thu 03 Apr 2025 07:29:07 +0000
asID:                     269262
IP address blocks:        45.182.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.crl
                          rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1e:c9:59:91:cc:85:65:7e:fe:59:d4:41:89:d8:61:e4:9c:cd:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
        Validity
            Not Before: Apr  4 07:24:07 2024 GMT
            Not After : Apr  3 07:29:07 2025 GMT
        Subject: CN=4FC2A06F8BA7507375DFE0488EFEF38D3F60DBFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:fe:12:89:89:af:32:98:28:03:20:9b:20:
                    3a:5f:5d:17:65:1d:41:ea:fa:3d:43:6d:0c:e5:00:
                    61:df:2b:36:c5:53:35:82:58:1d:b2:16:2f:e9:6c:
                    19:12:19:cc:7c:57:37:d2:54:62:ec:c2:bf:2d:6a:
                    ee:fe:92:74:be:6a:13:cd:a4:92:a3:25:12:c9:25:
                    01:0a:4a:86:a2:1d:74:77:ba:64:3f:6d:c8:7c:ef:
                    f6:9f:64:e6:a0:f2:af:ce:10:9f:8b:23:cf:c1:52:
                    c5:a4:25:3a:d5:c8:74:fa:88:8e:07:00:da:0a:b0:
                    27:bb:da:9d:1e:33:a8:4a:d2:87:23:09:ae:c8:26:
                    f9:51:41:3c:67:b4:75:8c:cb:3c:0f:51:89:2c:14:
                    ce:3b:1b:87:70:7c:02:a5:f6:e3:08:b7:bb:ee:5b:
                    44:19:02:11:ba:9d:4f:ca:f7:c2:f8:8b:d2:80:8f:
                    ab:91:56:cb:34:a4:35:9b:cf:63:43:b5:a7:da:8e:
                    39:7a:3b:0a:cb:d5:d8:b5:2f:4c:85:20:ef:24:6b:
                    a5:89:49:4e:e6:d4:a1:a3:56:d6:27:97:44:e8:54:
                    f4:25:45:f5:b1:4b:e2:49:b9:9e:f8:b3:62:34:0e:
                    75:1c:3c:a8:4c:63:99:ad:3c:5c:8b:6f:c0:78:85:
                    d3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C2:A0:6F:8B:A7:50:73:75:DF:E0:48:8E:FE:F3:8D:3F:60:DB:FF
            X509v3 Authority Key Identifier:
                keyid:F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/34352e3138322e382e302f32322d3232203d3e20323639323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:fd:bf:9b:43:42:21:3a:9c:83:d8:79:70:b2:b0:1a:b6:7f:
         ec:4c:24:bb:43:52:b1:d6:76:15:37:6d:bc:a7:0a:3b:b2:8b:
         84:e1:49:97:f1:45:d2:92:ac:f6:03:1d:ce:d8:04:1f:63:14:
         3c:41:c4:6e:01:c4:8a:68:97:06:e0:d5:db:cb:4e:65:5f:6a:
         ba:4a:49:da:be:9d:97:ff:5b:40:50:45:d0:2e:32:07:3d:63:
         02:05:93:e3:33:94:e3:05:ee:6a:b6:65:b3:1f:2d:95:9a:b9:
         06:98:b5:c0:1c:c7:2f:32:da:1e:42:d2:03:a7:6a:61:ed:c8:
         c1:2b:ec:4e:b1:79:bd:d4:64:fa:a7:d4:88:55:75:be:a0:bb:
         ae:86:5f:70:6d:d4:5f:c1:89:d3:ad:16:40:59:27:41:3a:f7:
         5c:dc:ad:e0:da:f3:16:0e:08:bb:4d:fe:f5:a1:d4:ca:23:f9:
         03:3a:a9:09:b1:60:cf:10:ff:de:c6:b2:3d:69:1e:79:71:28:
         e8:2d:69:ec:3a:86:69:b9:4f:aa:42:c2:2a:72:ee:76:e0:cc:
         47:2b:d9:0e:22:c1:56:0f:70:ba:b9:6b:ba:78:d9:6b:74:34:
         9c:c4:2d:0b:ae:c7:07:14:f5:c3:66:ef:f8:73:47:92:8c:1d:
         56:91:36:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:37 2024 by rpki-client on console-ams.rpki-client.org