Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/34352e3139302e3133382e302f32342d3234203d3e20323639363437.roa
File:                     34352e3139302e3133382e302f32342d3234203d3e20323639363437.roa (raw, json)
Hash identifier:          8TKAW1YOoy5Ilp7D+8FFpzIH/D5fUH12kAqYCrTHGhI=
Subject key identifier:   CB:76:CF:CA:F1:2F:0E:64:5A:14:47:7D:52:F9:CB:CF:CF:0C:97:36
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       14DB5FC11173A28182E21506F1D70C986599C144
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/34352e3139302e3133382e302f32342d3234203d3e20323639363437.roa
Signing time:             Thu 04 Apr 2024 08:17:33 +0000
ROA not before:           Thu 04 Apr 2024 08:12:33 +0000
ROA not after:            Thu 03 Apr 2025 08:17:33 +0000
asID:                     269647
IP address blocks:        45.190.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:db:5f:c1:11:73:a2:81:82:e2:15:06:f1:d7:0c:98:65:99:c1:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Apr  4 08:12:33 2024 GMT
            Not After : Apr  3 08:17:33 2025 GMT
        Subject: CN=CB76CFCAF12F0E645A14477D52F9CBCFCF0C9736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:c8:3e:50:e2:79:54:0b:96:5c:f4:86:ca:
                    fd:6f:d6:c3:2c:4a:c1:9e:bc:e8:7c:6b:f0:35:d5:
                    41:8a:98:af:ea:f6:28:65:b6:cb:62:e1:b6:10:73:
                    e3:32:e1:62:6d:2f:a4:6b:cd:3e:5a:52:d1:25:d3:
                    0c:97:13:f7:c9:90:ec:0f:18:b5:63:1f:2f:98:03:
                    35:3e:6f:ac:ea:4d:d5:17:85:c5:2d:36:cd:1b:ea:
                    e2:7b:f0:eb:83:51:35:c6:6a:bc:bf:80:92:d7:e7:
                    d7:11:09:22:e2:26:ba:37:fd:c8:fd:08:8f:a1:36:
                    f2:d0:b6:ae:9b:4f:d9:20:34:bc:5f:2d:63:32:dc:
                    07:3c:f4:8b:79:8c:0f:c0:33:71:5b:74:6f:78:26:
                    1e:84:8e:f2:a2:07:c8:f5:f8:35:e3:e0:dd:84:46:
                    aa:e7:f7:ce:42:70:07:5d:b2:d3:5b:60:21:fe:fe:
                    de:88:39:13:18:35:fb:e6:9c:16:62:a3:57:80:fd:
                    16:b0:b1:ba:d7:dd:e8:f3:48:8a:74:de:e3:02:c9:
                    4e:da:f9:fb:42:69:b7:0a:29:d7:ea:7c:cb:08:fc:
                    4d:09:35:ac:03:71:85:eb:b8:88:f2:1f:f6:89:63:
                    15:1a:b2:a4:9a:15:bf:b0:87:88:05:f7:b7:d2:7e:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:76:CF:CA:F1:2F:0E:64:5A:14:47:7D:52:F9:CB:CF:CF:0C:97:36
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/34352e3139302e3133382e302f32342d3234203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:55:96:7a:c2:1a:84:18:96:dd:44:ef:c0:ca:5e:c5:d4:6d:
         82:3a:1b:fd:bc:4f:00:9f:66:6e:5a:5c:02:1c:3d:92:61:25:
         98:ca:59:eb:ab:82:0b:80:d9:d5:df:a3:fb:81:f2:71:b9:a5:
         04:d1:15:33:7c:ef:db:90:05:44:e0:26:34:0f:53:62:7e:dd:
         b7:55:9d:aa:d8:c5:ea:c6:55:5d:df:9d:e0:70:91:1c:4c:be:
         34:c0:cc:7c:66:f1:02:8b:0d:ae:c4:59:ca:b8:98:2a:ce:23:
         b3:6e:e9:f7:ac:b8:62:7e:d8:e4:6d:f8:ec:1c:f9:18:26:3e:
         55:b4:f2:35:fd:05:42:9c:9c:c6:7c:06:55:a1:d5:b3:6b:6d:
         d3:03:68:50:9e:29:18:13:40:f1:ce:ae:26:df:97:09:0e:40:
         b0:2e:44:8f:65:06:1a:f0:ac:59:5b:eb:ae:16:9a:08:de:54:
         ca:45:92:ae:a5:a4:75:a3:2b:2c:c1:d6:3a:b5:54:20:46:d4:
         ca:1f:85:7c:b4:50:1e:6e:da:8d:3d:15:0e:9e:88:ab:2e:00:
         c7:41:39:94:e7:8d:77:13:2f:4d:1e:e2:8a:0b:02:b3:0f:29:
         7b:d9:cd:52:c4:f2:67:7f:4c:53:9e:4b:00:b3:db:58:91:c5:
         27:4a:c8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:17 2024 by rpki-client on console-fra.rpki-client.org