Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/1/34352e3138362e34302e302f32322d3332203d3e20323639343130.roa
File:                     34352e3138362e34302e302f32322d3332203d3e20323639343130.roa (raw, json)
Hash identifier:          CEuPaBzrS1O1LvfwwTtegfsM32yGGftVieEBPkQcDbE=
Subject key identifier:   91:B2:A1:CB:A3:4A:31:5B:B2:13:63:0B:CD:6A:C9:83:E7:00:BD:B7
Certificate issuer:       /CN=97D3A19503990A77B10974CDCEE1CED41F9D742C
Certificate serial:       3D00C3E51D371900A7AB9439E26DAE5995EE313F
Authority key identifier: 97:D3:A1:95:03:99:0A:77:B1:09:74:CD:CE:E1:CE:D4:1F:9D:74:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97D3A19503990A77B10974CDCEE1CED41F9D742C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/1/34352e3138362e34302e302f32322d3332203d3e20323639343130.roa
Signing time:             Thu 04 Apr 2024 11:02:18 +0000
ROA not before:           Thu 04 Apr 2024 10:57:18 +0000
ROA not after:            Thu 03 Apr 2025 11:02:18 +0000
asID:                     269410
IP address blocks:        45.186.40.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/1/97D3A19503990A77B10974CDCEE1CED41F9D742C.crl
                          rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/1/97D3A19503990A77B10974CDCEE1CED41F9D742C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97D3A19503990A77B10974CDCEE1CED41F9D742C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:00:c3:e5:1d:37:19:00:a7:ab:94:39:e2:6d:ae:59:95:ee:31:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97D3A19503990A77B10974CDCEE1CED41F9D742C
        Validity
            Not Before: Apr  4 10:57:18 2024 GMT
            Not After : Apr  3 11:02:18 2025 GMT
        Subject: CN=91B2A1CBA34A315BB213630BCD6AC983E700BDB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:4f:ae:43:0c:bf:58:7a:85:9c:64:b5:f8:
                    4e:52:90:b9:0f:b7:a3:f7:50:50:dd:19:62:d6:33:
                    e8:f6:a7:aa:94:f5:a2:56:b7:e4:1f:a9:1e:ef:2a:
                    be:9b:15:8c:33:45:35:2b:77:cd:7f:4b:d8:98:e8:
                    4e:cd:3b:76:38:0a:05:51:e1:78:8b:e3:c5:a6:43:
                    0e:17:01:45:88:84:27:b2:cd:2c:a7:32:68:51:72:
                    6e:bf:3d:fa:89:ab:11:f4:b3:e2:e9:8d:ac:52:33:
                    60:43:5e:80:69:f6:ed:1b:64:b3:65:6a:a8:ef:8f:
                    18:94:cb:74:3d:b7:fd:da:64:f4:cb:27:5f:39:50:
                    37:80:57:1b:7e:5f:38:24:35:8b:3c:7d:00:75:eb:
                    42:a2:25:a8:f9:03:fd:00:10:83:c2:d2:87:e1:4c:
                    5b:66:04:64:3d:9e:8a:22:b0:f3:c6:e7:78:ef:b1:
                    a3:b2:34:76:e1:fc:e8:dc:24:05:d0:19:9a:bc:b4:
                    f3:23:9e:34:ee:c3:c0:82:1b:b0:33:36:87:3f:97:
                    27:f2:0c:13:fc:fd:0c:d8:e2:48:35:00:a7:6e:48:
                    fb:00:67:b8:67:15:d2:cf:bb:5b:97:b6:2c:90:74:
                    94:f2:31:82:0e:8c:a9:2d:71:7d:6d:a4:81:1a:ae:
                    94:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B2:A1:CB:A3:4A:31:5B:B2:13:63:0B:CD:6A:C9:83:E7:00:BD:B7
            X509v3 Authority Key Identifier:
                keyid:97:D3:A1:95:03:99:0A:77:B1:09:74:CD:CE:E1:CE:D4:1F:9D:74:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/1/97D3A19503990A77B10974CDCEE1CED41F9D742C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97D3A19503990A77B10974CDCEE1CED41F9D742C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/1/34352e3138362e34302e302f32322d3332203d3e20323639343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:e5:4d:e1:7c:be:9b:a6:ee:bb:72:04:0e:67:3a:73:81:f4:
         35:30:e8:c5:24:f7:a9:9d:ce:c4:d9:62:8e:0e:ba:c1:47:5a:
         db:f0:e8:60:a9:b8:c9:fe:3c:dd:50:1f:e4:f7:bc:d5:af:97:
         00:eb:3b:d6:b3:2f:fd:03:71:40:9a:0a:c4:04:03:88:93:d9:
         d9:08:9d:60:3f:96:e3:b9:76:7d:66:16:d4:a5:3a:9a:ca:7b:
         56:e0:c1:50:f5:a5:3d:ae:b8:6e:e9:0d:87:e2:cd:06:db:b4:
         c5:c8:12:a8:8a:b2:a2:40:cf:61:86:b9:59:e3:70:c5:dc:c5:
         98:0e:ef:ab:c5:98:f9:7b:03:bf:c5:d8:fc:1f:c3:4d:00:e0:
         f4:e4:e8:cd:c2:73:2d:9c:76:0a:9a:6e:fd:00:b8:c7:5a:2b:
         22:6c:50:70:6f:93:fe:ca:d4:66:44:8a:27:c6:42:bc:8e:b9:
         aa:e5:41:21:e0:f8:b4:c5:b3:77:1f:6e:d2:61:41:03:57:54:
         5f:c8:0d:4d:25:42:f0:c0:f2:8e:ac:b6:a1:da:a3:6c:3d:a3:
         b6:7c:ff:1f:bb:cb:b5:da:de:3f:29:8d:77:e6:87:23:9b:59:
         ec:7b:23:1c:13:e2:ac:40:3f:22:9b:db:e6:c5:8c:0b:ff:21:
         09:5c:9b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:48 2024 by rpki-client on console-fra.rpki-client.org