Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233322e302f32322d3234203d3e20323731363536.roa
File:                     34352e3138362e3233322e302f32322d3234203d3e20323731363536.roa (raw, json)
Hash identifier:          2+gZQ/6ii+Id+wVAnxRBU5Op4V9CxDzPWpvQUHxRUIQ=
Subject key identifier:   03:F5:40:F8:D1:C1:24:B6:B5:61:74:57:6E:CF:A7:0B:24:A7:7E:12
Certificate issuer:       /CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Certificate serial:       17905C590F4EFE873C9BDE48E7EF6C7296010DC7
Authority key identifier: 40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233322e302f32322d3234203d3e20323731363536.roa
Signing time:             Wed 05 Jun 2024 19:22:10 +0000
ROA not before:           Wed 05 Jun 2024 19:17:10 +0000
ROA not after:            Wed 04 Jun 2025 19:22:10 +0000
asID:                     271656
IP address blocks:        45.186.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl
                          rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:90:5c:59:0f:4e:fe:87:3c:9b:de:48:e7:ef:6c:72:96:01:0d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
        Validity
            Not Before: Jun  5 19:17:10 2024 GMT
            Not After : Jun  4 19:22:10 2025 GMT
        Subject: CN=03F540F8D1C124B6B56174576ECFA70B24A77E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a4:d8:6d:24:5c:fd:72:a3:cb:27:04:c7:9e:
                    f1:98:b3:7e:58:aa:e2:a8:96:f6:08:94:1d:af:f1:
                    e5:81:25:f9:2e:2f:f8:66:c5:a3:9d:80:af:a3:f8:
                    14:17:47:4f:37:69:8c:5d:f3:a9:d8:71:4b:82:1b:
                    5a:b0:86:86:ae:d6:86:b5:5d:3c:cb:8b:f8:4e:6e:
                    f8:c1:2f:91:5e:ab:52:1c:e3:15:c9:7c:8b:c8:16:
                    04:7a:f7:f6:9d:51:8c:de:47:8c:2c:16:f2:6d:71:
                    cb:94:f1:da:42:22:2e:59:ef:75:d5:35:fb:5c:e4:
                    57:a9:bc:44:b5:3d:ce:65:3f:56:e3:7f:a4:76:66:
                    a3:67:5c:ca:f4:ba:38:e5:e0:36:ff:e3:f6:38:6f:
                    88:6c:88:60:c4:52:15:59:cf:d6:be:1f:21:88:46:
                    c4:50:13:a6:d8:6c:a7:94:54:ae:e0:88:56:f0:2b:
                    80:64:e6:b0:92:f7:0f:0a:57:fa:6c:6f:a7:aa:7c:
                    13:69:6a:57:91:88:d8:29:9b:c7:e4:f9:92:6e:7d:
                    cb:37:c6:18:5e:75:09:70:af:6d:ae:30:8a:de:bb:
                    bb:d5:11:a7:b5:1c:f5:76:cb:3d:8c:e2:1b:7c:ae:
                    f5:26:ef:49:b5:ab:f0:0b:8d:32:09:1e:fa:d6:e6:
                    74:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F5:40:F8:D1:C1:24:B6:B5:61:74:57:6E:CF:A7:0B:24:A7:7E:12
            X509v3 Authority Key Identifier:
                keyid:40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233322e302f32322d3234203d3e20323731363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:67:bc:42:21:40:52:53:f5:da:59:c0:77:a2:43:cd:2c:62:
         13:f3:6a:a7:8c:05:a3:04:5a:f6:b1:35:7e:77:dc:f4:97:d5:
         77:8e:da:fc:a1:8b:1e:a1:4b:81:43:a5:ce:d5:87:fb:6d:ab:
         4c:4f:26:b8:7b:65:c0:a6:a3:68:b8:54:a6:84:e5:81:cf:ed:
         42:d0:c1:bd:d5:f9:9c:51:26:2b:c7:fc:7a:c2:d0:16:60:60:
         fd:e4:db:cc:08:7e:f8:5f:aa:b8:e6:85:f4:b1:53:11:1c:0b:
         66:85:ba:3e:b9:2a:84:cd:53:0f:84:5e:b3:e6:7f:79:b9:af:
         eb:45:8a:2f:7c:65:6e:24:17:2f:7e:1b:22:d5:57:5f:b7:eb:
         6f:d7:fd:11:9d:c4:1f:89:24:67:d3:66:5d:4f:64:38:c0:f0:
         be:35:ba:ec:82:66:16:81:18:b6:78:23:90:09:84:a7:14:d7:
         e7:f5:80:df:bf:15:45:b5:80:8d:17:2f:b6:e1:7b:b6:e9:c6:
         2b:23:14:62:cb:93:d2:37:0a:79:b9:5b:f7:36:bb:54:a8:b5:
         c5:61:fe:d0:f3:62:cc:a5:e3:2c:7a:c2:a9:96:2f:26:d2:8b:
         ba:b2:8e:a6:5c:40:a9:41:b8:21:4b:07:4a:7b:dd:2a:d5:39:
         34:54:bb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:38 2024 by rpki-client on console-ams.rpki-client.org