Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/34352e342e3135362e302f32322d3232203d3e20323637333838.roa
File:                     34352e342e3135362e302f32322d3232203d3e20323637333838.roa (raw, json)
Hash identifier:          JZaHVE5PQbt3f27GFoHSIycJRgwlMn9L9vE/GbFTk0c=
Subject key identifier:   3F:3C:0D:79:0A:6F:B7:BE:C4:9F:CA:44:35:EB:41:18:A6:0A:67:51
Certificate issuer:       /CN=8A9A31995D56C92279C59971190F9CDC7E94D924
Certificate serial:       7827A3D8FFFF91406634F4FEAE2B76B5E9435920
Authority key identifier: 8A:9A:31:99:5D:56:C9:22:79:C5:99:71:19:0F:9C:DC:7E:94:D9:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/34352e342e3135362e302f32322d3232203d3e20323637333838.roa
Signing time:             Wed 15 May 2024 14:21:53 +0000
ROA not before:           Wed 15 May 2024 14:16:53 +0000
ROA not after:            Wed 14 May 2025 14:21:53 +0000
asID:                     267388
IP address blocks:        45.4.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.crl
                          rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:27:a3:d8:ff:ff:91:40:66:34:f4:fe:ae:2b:76:b5:e9:43:59:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9A31995D56C92279C59971190F9CDC7E94D924
        Validity
            Not Before: May 15 14:16:53 2024 GMT
            Not After : May 14 14:21:53 2025 GMT
        Subject: CN=3F3C0D790A6FB7BEC49FCA4435EB4118A60A6751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:22:67:d3:fd:79:d4:58:43:16:ed:77:2b:
                    24:7e:4b:dc:46:95:6b:59:bc:fb:49:c8:d0:cc:1d:
                    28:18:7f:b8:f5:41:f1:69:06:57:2f:d9:62:e5:dd:
                    c1:4d:ec:92:cd:06:c7:f2:66:0f:93:e5:54:17:aa:
                    e7:35:cf:c8:c2:b7:db:54:f7:9d:76:3b:a6:88:80:
                    79:e3:67:b0:2e:97:e3:1f:02:6d:67:25:4e:36:e3:
                    0b:a9:1c:2d:83:08:21:13:0b:77:c1:92:b2:41:f6:
                    a7:4e:00:42:09:80:fe:c8:d8:8e:b5:07:f8:b9:5f:
                    e0:4f:88:d0:92:f7:72:70:64:d4:f2:cb:b3:39:f0:
                    fd:2d:7b:7e:8b:d3:16:a0:79:36:e1:fe:30:b6:b1:
                    f5:3e:e9:d7:cc:41:b9:86:0a:e6:96:ed:d6:19:1e:
                    0e:54:8a:0e:bf:20:13:94:65:de:6e:fa:cb:be:b9:
                    23:42:fe:e2:1f:9f:e5:99:99:ae:e7:2d:89:3f:db:
                    1f:79:84:64:86:88:4f:7d:f7:a4:69:d8:23:a5:f1:
                    52:04:ec:b7:29:05:78:17:82:3f:1c:d6:d1:d7:e5:
                    12:aa:4e:45:74:67:7d:10:c1:17:0f:9a:04:b4:39:
                    00:7b:0d:97:1e:c3:33:75:11:61:72:6b:be:3a:07:
                    5f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3C:0D:79:0A:6F:B7:BE:C4:9F:CA:44:35:EB:41:18:A6:0A:67:51
            X509v3 Authority Key Identifier:
                keyid:8A:9A:31:99:5D:56:C9:22:79:C5:99:71:19:0F:9C:DC:7E:94:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/34352e342e3135362e302f32322d3232203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:db:b0:55:6f:34:fb:6e:6b:c4:5c:c1:07:0a:41:ee:38:59:
         11:5f:53:e1:44:00:bd:88:e1:c5:ee:2d:8a:53:96:7b:69:2c:
         8f:0c:8c:35:3c:50:d8:38:38:3b:d5:a8:f1:ac:94:5e:b6:09:
         b7:96:a0:1e:5f:23:f0:31:4b:92:92:a9:c4:69:e0:4c:75:3d:
         68:d9:c9:38:84:ec:11:83:70:d3:a4:86:a5:b8:72:4f:8b:ed:
         8e:a6:95:a9:71:4a:e2:79:b6:ce:42:4c:0d:67:5a:d8:64:05:
         f6:aa:e9:29:b5:e4:02:a3:69:3b:e5:89:38:bc:2a:98:d1:8a:
         49:ff:f1:35:80:ca:94:b6:41:b3:c3:0f:d4:f9:88:de:31:92:
         45:f0:7b:c8:0c:16:33:95:20:a9:59:c7:b1:57:24:91:c6:6e:
         46:4f:d3:75:0f:43:bb:b3:a8:c3:8b:6d:54:68:64:45:a8:fd:
         56:c7:cf:6f:76:b7:1a:24:c1:07:07:fb:f5:8c:be:1f:68:5c:
         e2:46:a6:a3:3c:99:90:e1:ae:d0:dd:9c:99:4c:ad:2e:62:58:
         5f:f4:ba:01:0d:fa:2d:df:75:d5:41:5c:67:76:f6:4c:27:48:
         f0:e8:0a:cd:f1:1e:e2:87:f8:74:72:f1:f1:d7:bb:62:7f:7a:
         70:c0:21:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:59 2024 by rpki-client on console-ams.rpki-client.org