Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/34352e342e3131322e302f32322d3234203d3e20323636303730.roa
File:                     34352e342e3131322e302f32322d3234203d3e20323636303730.roa (raw, json)
Hash identifier:          XRQMHg34h2vJKN42GKAlQDoARz15v4ddy9yyRBZJUIo=
Subject key identifier:   31:07:B7:FC:7B:78:65:B6:55:4F:2D:99:60:1F:01:85:80:32:5C:E9
Certificate issuer:       /CN=B32F1FCBEE4B489E658636E1B24545CA0E4EA820
Certificate serial:       4E66A9399DC957D3718EE16E806086A47B2B17DA
Authority key identifier: B3:2F:1F:CB:EE:4B:48:9E:65:86:36:E1:B2:45:45:CA:0E:4E:A8:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/34352e342e3131322e302f32322d3234203d3e20323636303730.roa
Signing time:             Thu 04 Apr 2024 03:54:03 +0000
ROA not before:           Thu 04 Apr 2024 03:49:03 +0000
ROA not after:            Thu 03 Apr 2025 03:54:03 +0000
asID:                     266070
IP address blocks:        45.4.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl
                          rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:66:a9:39:9d:c9:57:d3:71:8e:e1:6e:80:60:86:a4:7b:2b:17:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B32F1FCBEE4B489E658636E1B24545CA0E4EA820
        Validity
            Not Before: Apr  4 03:49:03 2024 GMT
            Not After : Apr  3 03:54:03 2025 GMT
        Subject: CN=3107B7FC7B7865B6554F2D99601F018580325CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bb:56:da:36:54:44:d5:02:9b:53:04:27:0e:
                    48:ea:42:a0:cd:c3:9b:24:78:c2:73:33:3c:3b:f8:
                    fb:56:fe:22:e8:ba:f6:a4:c3:3e:6a:f7:1a:4c:ed:
                    3f:99:c7:d0:c1:4c:56:ca:f7:48:d0:50:f0:c7:2c:
                    67:ca:b0:cb:dc:85:ac:98:d7:14:7d:22:5a:af:d3:
                    f7:80:c9:4b:77:86:a0:5c:0d:dc:02:a4:24:0d:a2:
                    68:a0:1d:6b:3b:de:f5:92:db:09:31:eb:08:07:08:
                    a1:77:95:38:20:96:03:0b:2c:bb:02:9c:9d:30:ef:
                    0c:70:b6:cf:13:ce:9f:a0:e7:03:ed:fa:f2:ea:da:
                    dc:b2:5f:4f:f7:23:bd:5a:04:95:21:6c:87:5c:90:
                    a7:a9:b0:d5:63:a2:2a:08:0f:88:41:78:c5:49:d6:
                    cd:7d:51:8b:92:c7:1a:5e:72:0a:87:d0:47:66:cd:
                    35:68:41:b1:ba:7c:31:6d:48:08:15:f9:6c:cf:ce:
                    0c:d9:56:09:2a:c3:f8:0c:21:cd:fe:2b:65:21:54:
                    99:d8:78:50:16:5c:ae:0b:34:75:93:23:d1:34:f3:
                    14:a7:40:b3:fe:bf:4f:3c:51:77:c6:56:c4:76:e2:
                    65:a7:69:2d:60:18:71:ca:64:07:45:0c:b1:50:50:
                    93:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:07:B7:FC:7B:78:65:B6:55:4F:2D:99:60:1F:01:85:80:32:5C:E9
            X509v3 Authority Key Identifier:
                keyid:B3:2F:1F:CB:EE:4B:48:9E:65:86:36:E1:B2:45:45:CA:0E:4E:A8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/34352e342e3131322e302f32322d3234203d3e20323636303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:b3:24:bf:b0:f0:6b:30:7e:39:a9:a7:07:0f:aa:df:ee:42:
         4e:44:15:32:d0:cf:a0:d2:91:9f:bb:d6:9b:e0:ea:87:8a:bd:
         46:88:d0:b1:5c:d0:4e:6f:f7:40:53:28:c4:86:1e:12:8a:61:
         7d:8f:43:e1:ca:5c:51:bf:02:d1:c4:f0:a5:c4:3a:de:1c:ea:
         2a:20:bd:49:74:7e:1e:7d:fa:5f:d3:59:57:40:ce:65:4d:23:
         f9:4f:07:41:11:6e:5b:f4:4d:68:af:d2:5e:49:27:34:e1:3a:
         d6:6d:5d:21:6c:50:ff:f7:e5:2a:7e:45:20:68:fd:7a:eb:86:
         67:5e:3c:da:43:11:f2:ef:de:39:15:22:16:8a:e7:c7:d0:cb:
         75:9f:5f:dd:b2:9f:37:e2:63:51:68:30:4c:c0:09:d2:68:0e:
         22:aa:04:53:24:86:b7:4e:92:55:9c:58:55:83:22:30:16:41:
         b2:ca:5a:bc:8d:e7:6b:4e:87:65:88:19:2e:74:3d:d4:61:3f:
         cb:9f:3a:85:3d:05:82:c3:77:40:f0:98:96:6e:a0:0a:8c:f3:
         a4:2d:a5:69:23:e1:dd:98:8a:d2:f3:f1:ec:ce:ba:a9:c4:3c:
         21:c6:13:8f:fc:0c:cb:7c:82:78:56:88:c2:31:9a:d6:ed:ec:
         1d:e1:16:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:02 2024 by rpki-client on console-fra.rpki-client.org