Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/34352e3138332e3133352e302f32342d3234203d3e20323639323832.roa
File:                     34352e3138332e3133352e302f32342d3234203d3e20323639323832.roa (raw, json)
Hash identifier:          98C1qIv6aM9E5kQIfxiMwhR+GMBUjamfEl89LaB8IOY=
Subject key identifier:   8A:5C:D2:40:44:95:69:BE:21:9A:98:54:17:35:F0:FE:26:AD:FB:A9
Certificate issuer:       /CN=39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C
Certificate serial:       413764A668FEAF91FA1F3E100BE3574E5892FECF
Authority key identifier: 39:DC:52:F9:D7:AC:EE:A9:7A:CE:C4:4E:D6:AD:56:2A:4F:23:07:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/34352e3138332e3133352e302f32342d3234203d3e20323639323832.roa
Signing time:             Thu 04 Apr 2024 07:04:57 +0000
ROA not before:           Thu 04 Apr 2024 06:59:57 +0000
ROA not after:            Thu 03 Apr 2025 07:04:57 +0000
asID:                     269282
IP address blocks:        45.183.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.crl
                          rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:37:64:a6:68:fe:af:91:fa:1f:3e:10:0b:e3:57:4e:58:92:fe:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C
        Validity
            Not Before: Apr  4 06:59:57 2024 GMT
            Not After : Apr  3 07:04:57 2025 GMT
        Subject: CN=8A5CD240449569BE219A98541735F0FE26ADFBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:a6:5c:d3:56:2d:a1:5e:ec:58:68:a2:5b:
                    6e:2a:4d:55:fe:31:30:b9:ed:f4:e6:ec:72:b1:20:
                    5b:93:f6:4a:1b:7c:df:64:94:21:35:04:3f:3e:23:
                    6c:3f:a2:7d:46:c1:24:2b:90:90:b0:fd:14:5d:d9:
                    77:48:a1:9f:59:ea:9e:9b:e9:7e:08:f1:d9:dc:3b:
                    e5:c1:6b:72:cf:79:24:0f:78:d6:a1:09:04:66:c2:
                    07:ca:23:ab:c1:34:5c:08:48:42:37:8c:24:a6:fb:
                    b0:6a:aa:36:13:84:a9:1f:62:71:67:56:90:30:4b:
                    f8:d7:3a:de:7d:ac:ea:94:f1:28:48:e2:40:b6:ff:
                    8d:40:4b:eb:1d:ff:ef:87:3f:d0:6a:2f:7e:06:c8:
                    6f:ad:31:b6:70:37:f6:d4:ff:eb:cf:69:4e:94:d6:
                    37:37:cd:45:4b:40:3f:9b:52:4f:fb:29:ac:b0:e8:
                    5f:19:6f:6d:4b:d4:01:7d:f2:2f:57:cd:cd:95:b2:
                    51:ce:8d:5b:55:ff:b7:af:3f:f6:be:8e:3f:90:ba:
                    5c:ff:b3:cc:c3:14:f1:6f:4e:d3:72:8e:fe:08:69:
                    61:1f:f5:84:c7:f3:99:f1:0e:2f:7d:99:98:d5:b3:
                    38:f5:55:70:80:0a:5a:63:53:82:15:70:4d:ff:29:
                    4a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5C:D2:40:44:95:69:BE:21:9A:98:54:17:35:F0:FE:26:AD:FB:A9
            X509v3 Authority Key Identifier:
                keyid:39:DC:52:F9:D7:AC:EE:A9:7A:CE:C4:4E:D6:AD:56:2A:4F:23:07:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/34352e3138332e3133352e302f32342d3234203d3e20323639323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:4c:b1:07:91:6f:85:26:45:a5:f0:ee:10:54:af:00:16:8e:
         38:80:f6:53:6d:d3:5c:c9:5a:61:ec:3d:57:67:d0:1a:f1:01:
         b7:2a:5d:11:03:48:4e:79:13:38:74:39:f8:fd:6f:e4:9c:b5:
         51:eb:0a:e0:77:d5:bf:a0:f1:78:92:bf:5c:0d:40:6f:5e:a9:
         ab:62:17:c2:40:ac:df:81:64:a5:4e:08:40:07:2e:8c:b0:db:
         2a:5d:ff:70:64:09:9b:d1:ba:f6:4a:16:c3:f0:45:64:c7:8a:
         7b:73:c0:9c:cb:44:d1:2b:af:fa:65:59:af:a5:ae:f3:36:ce:
         9d:8a:7a:55:de:4f:30:30:4a:3b:97:bd:38:23:cf:ff:2b:22:
         c3:a6:cf:8c:39:c5:26:39:14:a5:8e:bc:15:9b:84:d3:73:ce:
         59:71:2c:42:cc:90:70:2c:af:de:a4:94:6b:9d:ed:2c:93:ff:
         1f:4c:04:91:23:11:3a:09:61:02:fd:63:ab:b9:c7:5c:84:28:
         cd:d4:2b:a0:3a:a2:8d:fd:d9:e1:05:5f:6c:60:14:12:b5:32:
         d4:d3:e2:89:c4:64:c5:f1:c8:c0:78:b8:5e:fc:18:0d:35:ab:
         35:91:57:d1:8d:67:17:eb:3f:4d:f8:5c:8f:36:79:7f:3f:7b:
         14:71:61:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:54 2024 by rpki-client on console-fra.rpki-client.org