Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e342e302f32322d3232203d3e20323638393235.roa
File:                     34352e3137362e342e302f32322d3232203d3e20323638393235.roa (raw, json)
Hash identifier:          wFHpDAHihDkSsDCH3jl1A8uCXfP4jNJAYm4CdJoxbH8=
Subject key identifier:   D9:01:82:7A:6C:96:76:4B:12:DB:34:8A:DF:EA:6C:BC:56:86:38:C2
Certificate issuer:       /CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
Certificate serial:       766ED93CFD20E1858F481F9DB8AB2FBFD32790C2
Authority key identifier: B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e342e302f32322d3232203d3e20323638393235.roa
Signing time:             Thu 04 Apr 2024 07:39:08 +0000
ROA not before:           Thu 04 Apr 2024 07:34:08 +0000
ROA not after:            Thu 03 Apr 2025 07:39:08 +0000
asID:                     268925
IP address blocks:        45.176.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.crl
                          rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6e:d9:3c:fd:20:e1:85:8f:48:1f:9d:b8:ab:2f:bf:d3:27:90:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
        Validity
            Not Before: Apr  4 07:34:08 2024 GMT
            Not After : Apr  3 07:39:08 2025 GMT
        Subject: CN=D901827A6C96764B12DB348ADFEA6CBC568638C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:69:2e:5a:95:dc:15:49:13:b3:0e:36:b5:
                    38:15:c5:80:f2:59:18:c0:72:e3:4d:c4:db:28:44:
                    22:27:fa:7e:f7:f1:ed:15:60:d1:fb:9e:9e:35:de:
                    ba:39:fb:bb:ce:28:cc:5b:ca:61:e9:4c:d2:4b:e6:
                    b1:7f:c7:86:2f:74:8a:76:98:b9:fb:e9:9e:02:e9:
                    be:2b:40:3c:10:48:ba:f7:89:3a:e7:7c:12:af:5f:
                    4d:2b:2d:0d:6c:f5:77:51:c4:79:2b:66:6e:28:56:
                    09:48:f5:74:f1:70:ce:6e:36:8e:1f:04:1b:ac:aa:
                    78:1b:fa:69:37:7f:99:7c:66:87:0c:59:61:bf:96:
                    a3:88:e0:3d:d4:34:43:b9:40:b7:be:e4:32:eb:fc:
                    61:4f:a0:aa:6f:8f:e9:e7:37:40:24:23:72:58:bb:
                    36:8b:10:49:ed:c2:3b:e8:a7:ff:a3:dd:5d:9e:0b:
                    47:be:50:81:c7:ed:ff:34:bc:e7:88:38:5d:f0:f8:
                    1b:bd:0d:ce:4c:1d:28:05:32:fb:1d:d5:c5:7d:64:
                    c8:5b:47:6c:81:cd:b6:36:20:aa:ce:38:5a:dd:8e:
                    fb:d5:20:5f:61:a0:b3:2f:ce:f1:f5:ae:19:22:89:
                    b9:dd:ea:c1:e1:aa:a4:a1:78:9d:93:cf:9f:18:7c:
                    6b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:01:82:7A:6C:96:76:4B:12:DB:34:8A:DF:EA:6C:BC:56:86:38:C2
            X509v3 Authority Key Identifier:
                keyid:B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e342e302f32322d3232203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:42:d0:59:7f:1a:2e:af:87:66:ef:51:78:78:c6:93:ea:6a:
         80:c5:fb:7c:03:64:d2:cf:0e:1d:9e:db:8e:4e:d6:7f:e2:d8:
         9f:37:4d:58:0c:27:be:c1:74:3a:5a:28:bd:42:f3:f5:53:aa:
         9c:6b:e1:9d:a3:24:f4:e2:21:05:09:e7:b8:f8:5d:6f:8f:a8:
         42:9b:44:1e:75:10:81:f8:03:2a:95:04:18:56:c5:47:8f:e3:
         6b:c9:48:d2:21:e7:da:85:95:bd:0c:16:3e:0f:b9:d9:a3:a4:
         57:bf:41:ba:2e:62:41:52:85:a6:2a:2b:0b:2e:85:ed:70:ee:
         b7:57:58:9f:9b:58:f0:a0:da:21:9e:49:18:25:16:b3:4f:85:
         41:31:63:20:5b:6f:44:f7:f8:42:d4:6f:53:90:19:50:b2:2d:
         40:90:b6:26:2d:68:7b:dd:9d:7b:b7:b0:1a:67:9b:6c:0d:75:
         d2:d9:d0:e4:2e:df:cd:0f:64:00:1b:43:a9:e6:f1:17:1e:50:
         32:88:53:eb:93:40:3c:66:c0:eb:e5:0b:fb:01:03:78:f1:99:
         e3:2d:44:c0:d0:b9:89:3a:7e:01:37:97:e2:13:83:f4:47:27:
         74:0f:03:17:2a:00:16:e8:44:b9:9d:72:99:ac:e1:c4:91:f5:
         32:cf:9d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org