Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32332d3233203d3e20323639313832.roa
File:                     34352e3138312e3130322e302f32332d3233203d3e20323639313832.roa (raw, json)
Hash identifier:          j1eHz+Iw9dDo0ifAv3raGA4wphBvabV0/vFYszSQekY=
Subject key identifier:   C1:70:BE:81:B5:3A:30:6A:B4:E1:F7:88:21:9E:09:A8:C7:26:FE:EB
Certificate issuer:       /CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
Certificate serial:       5FD5BA8C76315394A736B2502A0591AE03972D74
Authority key identifier: 88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32332d3233203d3e20323639313832.roa
Signing time:             Mon 15 Apr 2024 14:01:09 +0000
ROA not before:           Mon 15 Apr 2024 13:56:09 +0000
ROA not after:            Mon 14 Apr 2025 14:01:09 +0000
asID:                     269182
IP address blocks:        45.181.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d5:ba:8c:76:31:53:94:a7:36:b2:50:2a:05:91:ae:03:97:2d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
        Validity
            Not Before: Apr 15 13:56:09 2024 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=C170BE81B53A306AB4E1F788219E09A8C726FEEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fa:5a:81:66:2b:30:52:d4:c7:dd:2f:ef:b1:
                    2f:7e:ff:f1:19:9e:bb:3c:0c:f8:8b:a8:c2:4b:35:
                    56:80:4c:00:3f:cf:00:1b:95:3e:43:c8:a7:bf:22:
                    96:1d:96:05:f6:eb:b5:fb:11:69:a4:bc:9e:96:2a:
                    06:b7:c9:05:b8:83:6f:a1:85:34:1a:34:9d:2b:2d:
                    78:b3:c6:25:f5:5a:d0:a7:f9:da:1d:26:14:83:fd:
                    a0:93:03:b0:c7:fb:88:92:78:d9:06:9d:a9:a2:bb:
                    63:69:1e:a2:f9:d2:6c:d7:90:8e:15:fe:ef:14:b4:
                    e2:e3:25:71:3b:56:9e:3b:43:a4:71:d1:97:23:ab:
                    76:9d:85:f5:c7:a7:f2:8d:8b:15:73:3c:a9:bb:c0:
                    b9:a2:b5:d6:5c:3a:ff:cd:f9:7c:6a:81:de:cc:4f:
                    dc:91:56:8d:a4:18:14:87:74:92:43:c0:39:93:ad:
                    9a:c3:a4:44:5e:4c:31:92:91:06:e3:d1:2b:58:ff:
                    be:41:78:c5:20:9f:cd:78:b4:d2:2f:e8:08:9f:e5:
                    e2:26:62:48:84:f5:f0:40:74:e7:71:1f:0a:f4:a6:
                    da:c4:a3:31:b6:1c:f9:02:46:e0:d0:e3:4e:0c:11:
                    fa:a2:3f:19:67:10:f9:34:dd:c0:89:ea:1e:0f:2b:
                    1c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:70:BE:81:B5:3A:30:6A:B4:E1:F7:88:21:9E:09:A8:C7:26:FE:EB
            X509v3 Authority Key Identifier:
                keyid:88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32332d3233203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:ff:02:61:fd:09:3a:3c:80:e5:77:7c:23:df:60:55:61:44:
         e9:1c:38:f5:5f:2f:a9:1e:19:1d:02:1e:81:49:47:93:3b:4a:
         fe:fa:ec:1a:04:6d:f4:ea:bb:33:93:f9:cc:fb:11:41:f3:d6:
         26:70:6a:fe:64:69:40:a5:76:1e:f6:7a:3b:d0:12:f2:53:9f:
         87:06:59:e3:97:fe:b5:14:ba:84:8c:9d:fd:b7:53:73:ab:bf:
         a1:04:0d:4d:e1:e1:94:d5:1b:dd:6d:b9:b6:0d:68:0e:00:a5:
         0b:1d:d0:83:eb:a0:1a:11:5b:3f:a1:11:b1:0a:cf:0d:22:5f:
         00:d9:98:40:bc:a9:8c:fc:1c:3e:84:aa:d4:05:5d:d6:29:2e:
         a3:43:2e:98:02:0c:95:48:aa:00:38:d8:b3:e4:98:3f:57:ec:
         c2:51:3d:cf:6c:59:09:79:e3:70:c1:a4:a3:63:b0:86:64:3a:
         8c:92:8f:0c:a4:89:5e:ed:c2:4a:03:04:45:d1:ad:3b:a9:17:
         04:51:6c:92:34:2a:f4:47:55:56:05:73:38:9e:08:a0:bb:69:
         8d:89:ec:87:ca:7d:65:a2:ad:31:2f:5d:45:03:c4:92:c6:dc:
         7b:76:35:2d:81:af:2b:f4:1b:eb:4e:aa:32:89:48:43:8e:c6:
         76:bd:cf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:10 2024 by rpki-client on console-ams.rpki-client.org