Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32342d3234203d3e20323639313832.roa
File:                     34352e3138312e3130322e302f32342d3234203d3e20323639313832.roa (raw, json)
Hash identifier:          wfhPJ+sJi68S1BHUJhXbtTyDIwuUaGC4/o8iCfB/N/g=
Subject key identifier:   F7:84:28:8E:CE:20:3F:54:66:9F:42:2A:46:D5:6A:F4:A4:1E:04:80
Certificate issuer:       /CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
Certificate serial:       199F878C3A29A0EAA657FF9A86E2AB58BB61B590
Authority key identifier: 88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32342d3234203d3e20323639313832.roa
Signing time:             Mon 15 Apr 2024 14:01:08 +0000
ROA not before:           Mon 15 Apr 2024 13:56:08 +0000
ROA not after:            Mon 14 Apr 2025 14:01:08 +0000
asID:                     269182
IP address blocks:        45.181.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9f:87:8c:3a:29:a0:ea:a6:57:ff:9a:86:e2:ab:58:bb:61:b5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
        Validity
            Not Before: Apr 15 13:56:08 2024 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=F784288ECE203F54669F422A46D56AF4A41E0480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:ad:43:4a:7b:9d:7a:74:6c:7a:7c:24:15:
                    81:89:8b:ea:e2:13:dc:4b:3e:7e:76:ab:0c:fd:03:
                    a9:28:0d:dc:b9:cb:df:d7:b1:86:6b:4d:58:6d:4f:
                    ab:11:45:d9:8e:4c:15:03:8e:c9:ac:0b:25:6a:69:
                    0d:97:99:00:4d:c7:e8:44:a3:5d:de:a1:16:97:07:
                    1b:02:bf:dd:14:45:0b:2e:63:bf:f1:71:96:5f:22:
                    4e:10:21:88:e1:68:7d:f0:04:9b:72:d6:80:46:4d:
                    5a:c5:73:6e:38:e4:48:d0:61:f5:98:59:6c:05:b9:
                    c0:a7:db:5e:f7:ff:b2:4b:eb:d6:26:40:7b:11:3a:
                    08:40:51:e2:f5:ba:25:a9:4f:44:e0:11:cd:a3:0c:
                    c9:3b:b2:22:46:a3:55:35:87:42:50:ef:fd:4e:4f:
                    16:eb:e2:2f:a6:5f:4d:c8:5e:ff:2c:7a:ab:84:fb:
                    ad:2f:9f:9b:56:53:ff:d1:66:3e:b0:6a:49:c9:01:
                    2e:50:b9:ad:81:ae:a9:a5:14:51:39:8e:f1:63:68:
                    4d:e2:0b:85:72:f1:3b:c0:44:df:22:e0:be:1e:a7:
                    b6:67:06:45:37:8a:e1:a8:98:1d:82:18:cc:c4:b8:
                    70:e6:e2:fd:3d:c7:88:c8:63:4f:53:8e:16:c8:38:
                    4c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:84:28:8E:CE:20:3F:54:66:9F:42:2A:46:D5:6A:F4:A4:1E:04:80
            X509v3 Authority Key Identifier:
                keyid:88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32342d3234203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:f9:71:d9:f7:a4:7e:6a:b7:7b:c5:82:31:4b:1c:7d:59:1c:
         5a:54:15:7c:70:c7:69:bf:3a:85:4e:da:79:77:8c:a6:90:7b:
         8a:e0:59:94:f6:14:34:f3:b6:3e:87:b5:30:b9:1b:2b:7a:a5:
         85:09:41:7f:ac:54:7b:b3:e3:31:f9:06:d0:61:2e:bc:20:a3:
         e8:2f:e7:19:1e:6a:fb:d3:4a:fd:b8:2f:7f:03:bc:43:60:39:
         65:09:55:a4:d4:6c:79:7b:7c:54:4a:b1:96:a1:e5:07:b7:1c:
         a2:c7:b1:51:a9:bd:4b:1a:f0:de:04:e5:10:9c:7b:1b:18:e7:
         c0:cd:89:94:8d:4a:b1:0e:b4:3a:e0:e1:c7:0d:05:3e:8e:2e:
         2f:62:96:cf:89:e0:ad:91:3a:4e:fb:9b:80:45:84:1c:cb:e2:
         01:20:74:af:8d:39:26:32:8a:a2:0a:99:1e:93:2d:06:cb:d1:
         80:db:4e:63:07:89:58:fd:88:81:7c:1c:fd:be:52:b1:05:3b:
         0e:04:9f:0f:7b:e9:61:43:4a:d9:f0:a2:fb:6d:f4:57:4e:8b:
         c9:b2:70:13:1e:e7:b5:85:5e:2e:c6:c4:a1:71:5e:26:de:0c:
         9e:1e:b5:cd:5e:a4:38:93:e0:77:a5:0c:dc:4e:45:a4:5a:39:
         be:87:8f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:10 2024 by rpki-client on console-ams.rpki-client.org