Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32342d3234203d3e20323639313832.roa
File:                     34352e3138312e3130302e302f32342d3234203d3e20323639313832.roa (raw, json)
Hash identifier:          Z/AqW9xpyZBJKENpqvHOWYmMG+Z+19suzyNNWAt4ARg=
Subject key identifier:   D0:4F:2B:F7:92:81:A8:6D:F6:71:C5:5C:54:36:A6:A7:C5:50:B8:D7
Certificate issuer:       /CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
Certificate serial:       332ED1DE833972E621B50F35E5F321B1F6560DE2
Authority key identifier: 88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32342d3234203d3e20323639313832.roa
Signing time:             Mon 15 Apr 2024 14:01:08 +0000
ROA not before:           Mon 15 Apr 2024 13:56:08 +0000
ROA not after:            Mon 14 Apr 2025 14:01:08 +0000
asID:                     269182
IP address blocks:        45.181.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2e:d1:de:83:39:72:e6:21:b5:0f:35:e5:f3:21:b1:f6:56:0d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
        Validity
            Not Before: Apr 15 13:56:08 2024 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=D04F2BF79281A86DF671C55C5436A6A7C550B8D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:32:4d:c9:f6:bd:7b:50:54:63:88:85:e7:
                    32:d9:76:39:e6:4e:65:2b:ae:35:d1:c3:fc:ef:8d:
                    0f:28:fc:27:17:27:29:2c:94:8e:4f:9f:37:8b:65:
                    f3:90:53:a9:cd:71:41:78:49:54:c1:3e:2b:b6:8e:
                    f2:f8:55:fe:ce:8d:44:be:66:5c:d6:e9:23:e0:a4:
                    59:0f:a0:a4:d1:c6:71:5b:06:99:af:f3:78:37:4a:
                    57:39:ab:23:b7:c4:72:b6:3a:70:7b:13:fb:d3:78:
                    0b:9f:5b:39:56:2b:8b:46:96:ec:50:0f:cc:c2:b3:
                    03:a9:93:d8:c1:54:5f:36:d3:bd:4d:db:86:7a:e2:
                    2c:4b:49:d1:31:63:74:d4:01:26:d7:fb:00:9e:14:
                    16:de:c9:13:5f:29:d7:90:25:e1:42:9d:2c:86:8e:
                    a5:3b:e1:71:4d:fe:5d:53:fc:33:e5:93:a1:4d:41:
                    fa:af:56:a0:91:a8:55:99:32:ee:e9:10:86:f1:bc:
                    4b:f2:9d:7b:1e:2a:4a:a3:0d:e4:89:fe:4f:b6:3c:
                    c8:b1:8e:a8:43:7a:69:52:5a:fd:43:45:75:d6:f2:
                    de:31:b7:63:b2:8c:0c:72:86:bf:83:ce:51:c4:e5:
                    25:e1:63:31:e4:b0:76:08:51:79:cf:da:cf:7c:8c:
                    1c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4F:2B:F7:92:81:A8:6D:F6:71:C5:5C:54:36:A6:A7:C5:50:B8:D7
            X509v3 Authority Key Identifier:
                keyid:88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32342d3234203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:86:94:29:6f:32:15:4f:2a:b5:e3:68:24:0e:02:c9:c9:a3:
         74:2e:63:ed:ed:9a:8c:25:42:c0:5c:b6:79:b7:a1:21:c3:8a:
         97:a0:d4:3c:b2:45:d6:79:c5:b4:9f:e1:a8:4a:ed:0e:3c:95:
         50:ae:d2:00:f6:56:1a:d6:40:be:00:58:0e:83:87:f0:e8:a0:
         12:14:84:cf:d9:15:b6:de:57:b0:36:a4:f5:7d:63:91:63:1e:
         64:aa:ea:5a:22:d6:2e:88:3a:2f:cd:cb:e6:4b:74:16:d6:52:
         00:9a:0c:2c:5e:3b:41:0b:44:6b:95:6e:89:b1:74:5f:10:06:
         65:96:dc:88:c6:7d:2e:07:8d:e0:9f:55:5d:97:52:1a:55:9e:
         3b:af:90:cd:34:81:13:8a:d8:97:4f:49:d4:6d:c1:0f:6a:42:
         32:c2:41:45:3b:d5:71:b8:9c:71:e4:d2:7a:df:61:c4:e4:55:
         06:e4:ff:25:9c:1f:15:17:db:35:a3:01:14:0a:77:35:45:36:
         e1:35:95:ff:2c:33:55:c7:76:a0:17:d9:43:e3:95:ba:db:d9:
         97:75:22:b3:87:c2:e4:2e:34:3b:be:fa:9c:f5:1a:48:0d:5b:
         cd:c5:8b:35:bc:55:24:24:74:a1:ba:a1:b1:a7:54:f9:d2:15:
         b6:7e:ec:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:10 2024 by rpki-client on console-ams.rpki-client.org