Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/34352e3138332e3133342e302f32342d3234203d3e20323639323832.roa
File:                     34352e3138332e3133342e302f32342d3234203d3e20323639323832.roa (raw, json)
Hash identifier:          F7SihtJTn4E2itDVJEbsBLwndSIHxQuqsaliQKPF0BM=
Subject key identifier:   4E:8D:55:70:6C:0C:78:9C:40:F5:D4:68:63:4F:BB:71:F5:2E:60:A1
Certificate issuer:       /CN=39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C
Certificate serial:       66411CC2F7C0D765B86821DAB5C109F617EFE4FB
Authority key identifier: 39:DC:52:F9:D7:AC:EE:A9:7A:CE:C4:4E:D6:AD:56:2A:4F:23:07:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/34352e3138332e3133342e302f32342d3234203d3e20323639323832.roa
Signing time:             Thu 04 Apr 2024 07:04:57 +0000
ROA not before:           Thu 04 Apr 2024 06:59:57 +0000
ROA not after:            Thu 03 Apr 2025 07:04:57 +0000
asID:                     269282
IP address blocks:        45.183.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.crl
                          rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:41:1c:c2:f7:c0:d7:65:b8:68:21:da:b5:c1:09:f6:17:ef:e4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C
        Validity
            Not Before: Apr  4 06:59:57 2024 GMT
            Not After : Apr  3 07:04:57 2025 GMT
        Subject: CN=4E8D55706C0C789C40F5D468634FBB71F52E60A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ab:67:33:4d:60:a3:c9:9c:25:30:95:87:ad:
                    f0:e8:d0:23:81:54:4a:bc:c9:07:59:d3:97:de:6a:
                    ee:bc:92:a8:74:6c:b1:a7:2b:63:9b:02:d6:52:a3:
                    e9:e9:e5:26:7b:83:9b:b4:5d:6f:97:67:9c:86:c7:
                    68:4d:c0:5f:bb:4e:14:cc:0a:1f:17:2b:fb:33:ee:
                    eb:03:0a:03:ba:a6:1e:fc:58:96:99:df:68:02:11:
                    36:a0:4a:a3:aa:b4:a7:a7:91:b8:f5:5a:eb:b8:22:
                    f3:0f:16:04:32:e5:56:07:7c:31:0e:65:4a:5d:28:
                    10:aa:20:67:0c:a5:b8:ae:cf:49:95:a9:20:b5:0c:
                    82:40:47:6d:0f:74:db:f3:a5:a2:df:ef:0d:9d:07:
                    35:d1:72:b5:f2:6e:4f:e8:13:dc:3b:95:b4:f7:63:
                    17:12:18:7c:50:41:d0:2b:0f:4a:b8:6b:0e:d5:66:
                    27:d6:9a:e0:08:fe:ee:ac:9b:6d:15:f7:ae:5c:64:
                    df:37:7b:8a:e7:cd:df:ab:d7:2a:41:fc:c6:9f:24:
                    ce:5f:1f:6e:70:3e:08:e2:76:e3:ae:c6:a2:1d:51:
                    7e:6d:4d:c0:49:a3:74:19:49:4b:c3:0a:d4:00:a4:
                    6d:ad:ce:b8:d6:17:34:33:3b:da:2b:4e:b4:16:4a:
                    17:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8D:55:70:6C:0C:78:9C:40:F5:D4:68:63:4F:BB:71:F5:2E:60:A1
            X509v3 Authority Key Identifier:
                keyid:39:DC:52:F9:D7:AC:EE:A9:7A:CE:C4:4E:D6:AD:56:2A:4F:23:07:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/34352e3138332e3133342e302f32342d3234203d3e20323639323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:6f:76:d0:4d:29:7e:f3:79:e0:10:88:f7:5c:7f:f4:e8:7f:
         1c:b8:06:4c:98:03:f1:48:ee:02:4f:ba:7e:bd:d1:27:bc:d1:
         44:d4:62:8c:2d:0c:23:10:2a:32:6b:a5:d3:3b:9e:f9:dc:5b:
         40:9c:17:f8:1d:21:3b:9d:dc:28:20:64:46:0c:a9:2d:27:d4:
         3f:b6:a1:f4:78:fa:f7:9e:36:45:13:a0:d7:55:bd:5b:1d:09:
         16:1b:1d:e9:21:08:e4:73:56:7c:1f:e4:ac:fc:1e:90:c2:7d:
         97:17:b8:80:03:11:bd:d3:11:f4:1f:9e:5f:21:f3:8b:93:8f:
         0b:f2:8f:db:30:58:5c:3b:f3:0f:04:5a:bf:49:1f:2c:19:7f:
         5f:50:0b:76:4e:a7:93:da:74:a9:53:fb:21:1d:59:9b:ff:dd:
         29:0a:b6:3c:08:ea:75:ba:42:62:4c:57:ff:18:bb:3c:43:2f:
         02:02:6a:35:f9:b4:a5:cb:bf:40:0e:c8:9e:7a:fa:32:d7:8b:
         e3:32:43:be:b5:80:e1:c0:3d:f9:e9:83:07:1e:9e:fc:46:77:
         e0:f6:7a:20:82:a2:3f:47:c8:88:23:56:55:27:7c:da:56:55:
         15:78:45:a8:bf:ef:a4:ea:b0:fe:60:09:ce:56:0d:c4:28:7f:
         88:92:28:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:54 2024 by rpki-client on console-fra.rpki-client.org