Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32322d3232203d3e20323639343637.roa
File:                     34352e3138372e3134302e302f32322d3232203d3e20323639343637.roa (raw, json)
Hash identifier:          W2b4fysC67tvhLLeGudNKLms0gt9aqb63g3ZLJjXGys=
Subject key identifier:   C0:F7:61:90:78:B3:AA:08:3D:D8:21:31:DF:C1:53:C8:F5:37:A6:FB
Certificate issuer:       /CN=04AD1F05D68B9B203EF5342540FC9B754E8F2B50
Certificate serial:       3163E65A438C175DD37184A4691EEC8E4354ACE1
Authority key identifier: 04:AD:1F:05:D6:8B:9B:20:3E:F5:34:25:40:FC:9B:75:4E:8F:2B:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32322d3232203d3e20323639343637.roa
Signing time:             Fri 19 Jul 2024 13:17:42 +0000
ROA not before:           Fri 19 Jul 2024 13:12:42 +0000
ROA not after:            Fri 18 Jul 2025 13:17:42 +0000
asID:                     269467
IP address blocks:        45.187.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.crl
                          rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:63:e6:5a:43:8c:17:5d:d3:71:84:a4:69:1e:ec:8e:43:54:ac:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04AD1F05D68B9B203EF5342540FC9B754E8F2B50
        Validity
            Not Before: Jul 19 13:12:42 2024 GMT
            Not After : Jul 18 13:17:42 2025 GMT
        Subject: CN=C0F7619078B3AA083DD82131DFC153C8F537A6FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:0e:f4:84:39:e9:a8:43:84:50:c0:d1:18:
                    00:cf:6d:5e:64:f8:d9:52:58:5f:5e:62:7f:49:cd:
                    8b:f4:ae:04:68:a2:89:3e:73:cd:da:32:47:76:56:
                    8f:8c:4b:15:5f:9c:e8:e3:21:25:e5:97:d6:a5:92:
                    aa:1b:ed:52:a3:3f:c7:dc:6b:dc:9b:73:19:42:36:
                    ec:40:c7:49:0a:47:b5:0e:2b:1d:3b:ce:f6:41:60:
                    15:26:6b:c8:e9:6b:5f:18:03:cc:c5:07:44:ef:0b:
                    fa:89:a8:84:25:8c:6b:9b:b8:bc:e0:85:b9:51:c3:
                    85:0a:e6:bb:a7:b4:0b:1d:52:98:d5:87:c2:84:e8:
                    f3:63:fb:a5:08:85:ef:04:f2:db:c4:b9:f1:9c:c4:
                    85:5c:0e:99:93:25:04:43:93:6a:ce:a0:26:03:a5:
                    60:00:79:91:71:e9:1b:cc:e1:f9:02:47:42:1f:d3:
                    44:46:65:4e:9f:cf:06:ce:98:90:fa:0c:c2:c1:37:
                    e0:e4:c3:55:6b:5a:c4:b6:6b:7d:71:48:67:b8:6b:
                    4c:55:0b:8c:15:db:f4:14:c2:d1:a3:c5:47:d2:c0:
                    e1:0b:30:88:a2:24:60:fd:55:98:81:3b:bd:56:90:
                    d2:19:f2:93:4f:eb:90:e8:40:e0:f0:2c:04:cf:fa:
                    36:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F7:61:90:78:B3:AA:08:3D:D8:21:31:DF:C1:53:C8:F5:37:A6:FB
            X509v3 Authority Key Identifier:
                keyid:04:AD:1F:05:D6:8B:9B:20:3E:F5:34:25:40:FC:9B:75:4E:8F:2B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32322d3232203d3e20323639343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:80:84:88:78:6b:a3:f4:86:2b:d5:0c:fa:eb:6e:4b:35:53:
         be:ef:c0:1f:31:4e:4c:29:71:b1:af:9f:14:ec:c1:5e:00:02:
         36:cb:d4:04:63:86:7f:17:3d:4b:41:08:32:d3:38:aa:2b:fd:
         3d:c2:e5:18:52:8a:93:97:de:01:53:ab:ec:d4:ff:25:c7:e2:
         0e:1a:93:e4:a6:6b:f9:9f:b9:3a:8f:5d:d6:20:ed:00:24:ac:
         de:e6:de:48:42:c7:ec:9a:0e:b7:ed:c7:f3:71:04:03:33:dc:
         2f:8d:ff:84:21:34:39:05:b2:0b:c0:85:fb:33:e8:92:5e:84:
         c8:bf:ca:bd:11:ec:80:d1:1a:d1:66:0b:41:a5:d8:73:a2:e1:
         20:1f:d9:0d:ab:f1:84:96:69:c6:7a:0d:9a:8f:36:71:c2:5b:
         57:f8:0c:00:20:b1:c6:bb:7e:7d:77:ae:7f:eb:c6:ab:71:c9:
         d0:5a:cb:67:7a:ff:9a:1c:25:b2:ea:78:e2:31:a2:1a:c2:fd:
         67:99:2c:3d:d3:0d:4e:53:3a:66:91:c2:fc:e4:32:7e:b1:2b:
         6a:70:11:b6:a3:43:51:e3:45:f5:45:83:49:e6:7f:9a:f8:c7:
         03:09:d4:51:40:bc:f7:6d:8b:62:1d:9e:cb:e4:e6:8c:9a:c7:
         89:3d:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:39 2024 by rpki-client on console-fra.rpki-client.org