Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/34352e3137392e34382e302f32322d3234203d3e20323639303630.roa
File:                     34352e3137392e34382e302f32322d3234203d3e20323639303630.roa (raw, json)
Hash identifier:          5oEPsqSnfMjU5CfRUBV+36Rno8ySrgalWaQZRIdRNdI=
Subject key identifier:   DC:89:D2:CF:E8:36:F7:90:D6:E2:DA:29:33:8A:29:2C:63:2B:30:27
Certificate issuer:       /CN=10835D51462A1C641B9A5EDFA93F8475CCEEE4C5
Certificate serial:       03547B97F494A685EF9853AE278970AB11A86B90
Authority key identifier: 10:83:5D:51:46:2A:1C:64:1B:9A:5E:DF:A9:3F:84:75:CC:EE:E4:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/34352e3137392e34382e302f32322d3234203d3e20323639303630.roa
Signing time:             Thu 04 Apr 2024 03:01:14 +0000
ROA not before:           Thu 04 Apr 2024 02:56:14 +0000
ROA not after:            Thu 03 Apr 2025 03:01:14 +0000
asID:                     269060
IP address blocks:        45.179.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl
                          rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:54:7b:97:f4:94:a6:85:ef:98:53:ae:27:89:70:ab:11:a8:6b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10835D51462A1C641B9A5EDFA93F8475CCEEE4C5
        Validity
            Not Before: Apr  4 02:56:14 2024 GMT
            Not After : Apr  3 03:01:14 2025 GMT
        Subject: CN=DC89D2CFE836F790D6E2DA29338A292C632B3027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:39:5d:e6:ce:e2:a8:a7:91:eb:92:bd:b8:
                    ce:67:8a:31:7f:7d:9c:48:8f:b7:12:c6:ce:67:80:
                    34:69:68:a2:d1:71:07:60:7b:58:57:2c:8f:3e:64:
                    08:93:95:13:70:7d:a4:f7:5f:c1:76:54:ba:57:2c:
                    75:0d:f8:96:29:4c:cd:d7:84:b9:31:e7:6b:c1:35:
                    a0:6a:2c:00:77:41:ed:c3:ad:ce:0e:17:75:0c:58:
                    e0:dc:3b:52:5d:1f:ff:83:93:08:93:48:d3:b6:0a:
                    d3:28:78:88:b4:ce:65:ff:05:33:7e:cd:9c:38:25:
                    b9:fd:0e:41:c8:db:8f:96:9a:e1:79:53:56:5e:87:
                    c8:d0:c9:a7:5c:8d:ff:f3:1a:d6:6a:56:80:2c:a8:
                    0a:47:98:62:70:e4:83:cd:0f:37:4d:66:67:31:97:
                    9f:6e:5a:9b:47:47:3f:26:b5:a7:b7:e9:af:0b:45:
                    84:66:28:af:ed:f0:57:c4:df:05:45:9c:3a:55:2d:
                    ec:4f:68:90:b4:8d:25:33:a0:9f:87:1e:98:96:4e:
                    fd:cf:3b:29:8e:06:92:89:06:8a:c6:e3:aa:01:4d:
                    35:23:d7:00:ec:16:e1:29:20:33:ba:f6:aa:f1:2e:
                    ea:87:25:fd:9c:ef:9d:84:95:77:e3:da:6f:97:b4:
                    c4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:89:D2:CF:E8:36:F7:90:D6:E2:DA:29:33:8A:29:2C:63:2B:30:27
            X509v3 Authority Key Identifier:
                keyid:10:83:5D:51:46:2A:1C:64:1B:9A:5E:DF:A9:3F:84:75:CC:EE:E4:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/34352e3137392e34382e302f32322d3234203d3e20323639303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:b0:42:b3:06:7a:c6:d3:89:f9:22:d3:b4:a8:d0:1c:f5:69:
         33:48:63:9d:05:a9:97:cc:77:36:66:59:0d:3d:ce:dc:85:b3:
         6a:42:b7:db:e2:26:1d:03:c9:be:8b:9e:3c:0d:15:66:eb:43:
         d7:6d:50:81:c2:94:d6:f4:40:91:fe:e2:4a:ef:67:49:75:40:
         40:43:b9:91:4b:6c:4f:1f:60:93:89:e9:71:c3:ae:a9:73:ef:
         38:de:7b:d6:14:d1:0d:c2:76:8d:ca:08:93:b7:bf:d7:7d:3d:
         20:0a:3d:ad:81:5c:d8:c4:a3:08:2d:d9:cb:8a:d9:59:20:89:
         1c:b8:1d:68:3f:96:5b:03:79:7c:cf:7c:6c:41:66:73:ae:c2:
         ab:83:58:df:36:16:21:fe:3d:89:7d:8c:af:05:18:d3:d8:62:
         a3:24:e4:c4:ee:1d:19:fa:6f:2b:73:09:6a:ea:bc:4e:ee:ca:
         82:af:c4:3b:36:66:b0:c6:79:3d:b2:a3:ea:4d:c4:82:40:9b:
         c9:e6:e2:cb:d2:cd:47:75:93:a9:ba:60:15:2e:30:7a:0a:25:
         47:b0:c8:1c:3f:fe:e1:b5:c6:00:13:a9:26:fd:94:2f:93:4e:
         9c:76:e2:2f:88:c1:f0:67:b2:e3:33:20:3c:26:45:19:46:dc:
         5d:3e:7c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:03 2024 by rpki-client on console-fra.rpki-client.org