Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/34352e3233322e3138302e302f32322d3234203d3e20323637323832.roa
File:                     34352e3233322e3138302e302f32322d3234203d3e20323637323832.roa (raw, json)
Hash identifier:          qB+kipTvf9D+wExBWSLtilaweN2Z51EvIrVMfVaWejQ=
Subject key identifier:   95:DE:65:6F:EB:77:A4:91:8D:59:E1:2B:06:48:3F:92:66:64:B2:28
Certificate issuer:       /CN=24C90100868CC7E5E4ADB4222503286F7BF449AA
Certificate serial:       76B4579ACD4B8A895CF2315A2C4AF5B547537F70
Authority key identifier: 24:C9:01:00:86:8C:C7:E5:E4:AD:B4:22:25:03:28:6F:7B:F4:49:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/34352e3233322e3138302e302f32322d3234203d3e20323637323832.roa
Signing time:             Mon 15 Apr 2024 12:54:13 +0000
ROA not before:           Mon 15 Apr 2024 12:49:13 +0000
ROA not after:            Mon 14 Apr 2025 12:54:13 +0000
asID:                     267282
IP address blocks:        45.232.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.crl
                          rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b4:57:9a:cd:4b:8a:89:5c:f2:31:5a:2c:4a:f5:b5:47:53:7f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C90100868CC7E5E4ADB4222503286F7BF449AA
        Validity
            Not Before: Apr 15 12:49:13 2024 GMT
            Not After : Apr 14 12:54:13 2025 GMT
        Subject: CN=95DE656FEB77A4918D59E12B06483F926664B228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9d:b5:35:8c:f2:1e:9c:3b:7d:1e:3e:aa:58:
                    66:a6:bb:e9:5b:85:2b:26:f8:bf:67:ca:d9:c5:d9:
                    04:14:36:64:92:d9:49:ed:d6:e5:22:5b:1b:92:18:
                    aa:af:0b:8d:ca:05:70:8a:ce:0f:f4:f9:47:74:f8:
                    3a:3e:72:49:8b:27:79:54:1e:dd:55:cf:1e:67:63:
                    b1:85:dc:18:1f:b6:7f:c6:77:a4:75:a2:8f:06:99:
                    09:f7:f3:8b:6e:03:fa:a4:16:2e:78:51:53:a3:5e:
                    b7:39:fa:a9:d1:73:9c:2a:1f:74:84:01:b4:09:98:
                    5a:17:ed:24:64:95:a5:75:7c:67:43:18:35:c6:89:
                    b9:04:b3:70:33:3c:8c:ed:8a:2e:65:1a:0c:b7:88:
                    4c:04:8a:af:75:4b:73:7e:21:af:3c:3f:0c:1f:ec:
                    a6:73:6f:e8:96:ca:82:52:a3:e2:7c:2d:3d:a7:b3:
                    9c:60:a2:27:7f:9a:f3:0e:6e:75:b7:f1:35:49:cb:
                    92:ff:57:22:33:38:21:ba:17:af:e8:c0:22:49:2a:
                    50:a2:37:fe:8e:56:8e:65:30:b2:39:e7:02:7a:57:
                    a3:ce:72:d6:f3:9c:95:17:e3:49:8a:81:18:e9:dd:
                    07:47:5f:7b:d4:83:e2:85:6f:f5:ef:ff:fa:f1:11:
                    f3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DE:65:6F:EB:77:A4:91:8D:59:E1:2B:06:48:3F:92:66:64:B2:28
            X509v3 Authority Key Identifier:
                keyid:24:C9:01:00:86:8C:C7:E5:E4:AD:B4:22:25:03:28:6F:7B:F4:49:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/34352e3233322e3138302e302f32322d3234203d3e20323637323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:e2:eb:4c:e3:0c:f3:a2:b7:42:3c:b0:b9:b2:72:78:6f:5d:
         33:95:c3:d7:fd:c3:f4:e9:df:10:cf:83:4a:9c:0e:d1:27:ec:
         49:2a:07:e5:6a:62:d3:25:ac:1f:83:08:3f:5d:39:9c:b6:0d:
         43:e4:4a:0a:94:f4:9f:27:be:ab:8f:5b:93:86:08:08:ec:d9:
         7a:26:31:18:19:60:38:2a:f0:93:eb:5c:28:d2:39:67:2a:1d:
         8a:c1:cf:d8:36:be:1f:c9:c0:7a:89:10:9b:f4:c4:5a:64:fc:
         98:a2:59:be:12:b3:51:f0:2a:f4:9d:2c:7a:94:17:cd:58:13:
         1a:c3:c2:59:6a:e4:03:53:fc:b6:bf:2a:c2:43:04:a1:ef:3f:
         14:a3:52:81:06:20:5a:cb:7c:7b:ba:7d:ff:25:06:c8:84:b6:
         4e:76:7c:eb:54:98:10:26:12:42:be:65:9d:9e:ff:28:f6:4a:
         23:a1:fe:8c:15:20:ee:1a:fa:c9:51:e0:84:42:da:d8:f6:0c:
         67:e8:7e:d6:ed:c8:0d:4f:4e:19:97:28:35:5c:99:8c:1f:be:
         04:82:45:16:e3:b0:78:c4:ad:d7:f7:a0:72:e0:94:59:d9:d3:
         1b:b8:b8:0b:e8:0a:23:64:5a:6c:5d:39:aa:74:b8:70:8a:85:
         c4:f3:f7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:09 2024 by rpki-client on console-fra.rpki-client.org