Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/34352e3138322e32342e302f32322d3332203d3e20323639323133.roa
File:                     34352e3138322e32342e302f32322d3332203d3e20323639323133.roa (raw, json)
Hash identifier:          mUl9Ms/1J7tEbUX8UOQeAkE2Ds6uDhFF93P15XbPuTw=
Subject key identifier:   DB:1D:5B:5E:5A:63:3B:BB:F7:56:34:73:87:6B:9D:7D:75:4A:14:2F
Certificate issuer:       /CN=2CD9B2A2B015061457F1A9598631FA6CA2004705
Certificate serial:       6D2DD1703737BFBBFA1D7F2ABB11E843EB3A7E6F
Authority key identifier: 2C:D9:B2:A2:B0:15:06:14:57:F1:A9:59:86:31:FA:6C:A2:00:47:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/34352e3138322e32342e302f32322d3332203d3e20323639323133.roa
Signing time:             Thu 04 Apr 2024 07:04:32 +0000
ROA not before:           Thu 04 Apr 2024 06:59:32 +0000
ROA not after:            Thu 03 Apr 2025 07:04:32 +0000
asID:                     269213
IP address blocks:        45.182.24.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.crl
                          rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2d:d1:70:37:37:bf:bb:fa:1d:7f:2a:bb:11:e8:43:eb:3a:7e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD9B2A2B015061457F1A9598631FA6CA2004705
        Validity
            Not Before: Apr  4 06:59:32 2024 GMT
            Not After : Apr  3 07:04:32 2025 GMT
        Subject: CN=DB1D5B5E5A633BBBF7563473876B9D7D754A142F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:14:0f:4a:84:2b:f5:d3:94:9b:6b:7c:fb:
                    e4:fc:08:0d:ad:31:03:13:9b:01:7a:29:cd:15:cd:
                    ec:af:09:d6:5c:a0:2f:da:36:a4:eb:91:d9:7f:d4:
                    28:d1:c7:ec:93:2a:94:0c:0c:fa:bc:70:a5:38:07:
                    bf:c8:05:f9:ff:d4:f6:bc:48:84:f9:f6:e2:e1:4e:
                    c7:5d:39:18:1f:e1:13:f8:2d:85:28:8a:00:c7:7d:
                    e5:e4:2c:61:89:74:41:2a:cf:ac:a6:7e:f2:c0:9c:
                    91:4e:f5:fc:9d:5c:92:bb:67:ec:89:7c:92:25:8d:
                    05:0e:db:80:39:ee:07:ac:dd:df:49:07:de:bc:92:
                    b6:54:b1:7a:73:fa:48:66:93:57:bf:df:fd:be:1e:
                    00:5e:c6:c4:14:cc:32:ab:cf:5a:d8:0e:89:b1:b3:
                    ae:53:b7:49:f9:ec:6b:80:21:62:3a:6f:a8:85:4a:
                    04:28:bc:89:68:28:93:5a:3c:e4:e5:67:91:97:0c:
                    c5:c1:b4:e2:9e:df:a2:1c:f6:ce:b0:90:77:be:93:
                    f7:3f:22:98:da:0d:d2:c9:f4:72:ac:47:57:29:f6:
                    73:c9:9b:f3:63:f2:3b:58:52:4e:ed:c5:5a:6c:57:
                    5a:99:9f:31:2a:ba:83:12:0a:02:bb:da:2e:c3:3d:
                    c6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1D:5B:5E:5A:63:3B:BB:F7:56:34:73:87:6B:9D:7D:75:4A:14:2F
            X509v3 Authority Key Identifier:
                keyid:2C:D9:B2:A2:B0:15:06:14:57:F1:A9:59:86:31:FA:6C:A2:00:47:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD9B2A2B015061457F1A9598631FA6CA2004705.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/1/34352e3138322e32342e302f32322d3332203d3e20323639323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:29:07:07:f3:20:e2:dd:62:96:f5:9a:49:c2:16:7f:03:6f:
         5f:57:ce:81:00:09:58:d2:ef:95:68:27:c6:70:00:bf:71:c5:
         38:d1:a1:9e:f1:f5:8f:89:2f:d5:06:82:b0:b4:83:59:d0:ca:
         ce:e1:96:f3:29:8d:da:a7:ea:a2:89:79:e8:cc:c1:26:91:95:
         4c:c5:37:6b:92:8b:1e:45:fe:87:75:44:48:23:16:9b:16:0b:
         29:c1:ba:82:7b:e7:46:20:ab:47:6d:93:11:d5:04:4a:48:b5:
         ab:63:ef:fb:8d:63:44:2f:8d:fb:bc:bf:2c:87:96:29:61:59:
         8f:ee:a5:1d:c1:27:55:61:b8:9b:6e:40:d1:c1:7f:77:6f:9e:
         41:01:9a:4f:fa:25:ac:ab:38:00:0b:28:3b:38:4f:f2:9f:bf:
         a5:04:f6:24:b0:6f:b6:cd:dd:7c:cc:1b:31:ff:50:66:2e:54:
         72:79:50:1b:36:1c:9f:3b:4f:1a:af:f1:f5:62:d4:2e:e4:de:
         1c:5b:28:35:75:82:e2:7f:72:d8:6f:da:26:61:b5:a8:8e:13:
         e3:7d:ca:a3:f8:f9:aa:4f:76:6f:2b:17:f2:c0:19:34:87:fe:
         80:a3:01:3b:62:46:f7:d2:c3:9d:aa:e9:f6:7b:64:05:85:7e:
         51:eb:1a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 09:54:20 2024 by rpki-client on console-fra.rpki-client.org