Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/34352e3138372e3232382e302f32322d3234203d3e20323639343838.roa
File:                     34352e3138372e3232382e302f32322d3234203d3e20323639343838.roa (raw, json)
Hash identifier:          1wk/HAfGQC3L/Zl2qcojxSTLxRmwq4HI2BTC5pcW5zQ=
Subject key identifier:   72:0B:2F:50:3D:1E:D8:4F:97:52:84:D8:D8:01:1C:F7:7B:7B:79:6A
Certificate issuer:       /CN=366FE58CFA3047E81B8368523C1AF346C43B13A0
Certificate serial:       03AC0B331A9C44C125AA1864AB8E905A9171066D
Authority key identifier: 36:6F:E5:8C:FA:30:47:E8:1B:83:68:52:3C:1A:F3:46:C4:3B:13:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/366FE58CFA3047E81B8368523C1AF346C43B13A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/34352e3138372e3232382e302f32322d3234203d3e20323639343838.roa
Signing time:             Fri 21 Jun 2024 13:34:39 +0000
ROA not before:           Fri 21 Jun 2024 13:29:39 +0000
ROA not after:            Fri 20 Jun 2025 13:34:39 +0000
asID:                     269488
IP address blocks:        45.187.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/366FE58CFA3047E81B8368523C1AF346C43B13A0.crl
                          rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/366FE58CFA3047E81B8368523C1AF346C43B13A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/366FE58CFA3047E81B8368523C1AF346C43B13A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 03:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ac:0b:33:1a:9c:44:c1:25:aa:18:64:ab:8e:90:5a:91:71:06:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366FE58CFA3047E81B8368523C1AF346C43B13A0
        Validity
            Not Before: Jun 21 13:29:39 2024 GMT
            Not After : Jun 20 13:34:39 2025 GMT
        Subject: CN=720B2F503D1ED84F975284D8D8011CF77B7B796A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6b:4f:59:f2:53:b1:b7:53:56:0a:9c:df:d4:
                    50:a0:6d:4a:e5:1e:8a:98:27:81:51:64:05:dc:40:
                    a3:35:dd:8c:f6:f6:73:ac:a9:2a:7b:c0:1b:57:2d:
                    37:4a:94:d8:5d:9e:32:85:a4:d2:19:bd:cb:57:1a:
                    32:83:94:3b:e9:26:44:99:4e:58:11:88:1a:d1:fe:
                    4b:12:ec:46:e2:1d:0c:e5:c3:f8:41:c8:b7:4f:8f:
                    b3:89:af:bf:eb:59:a6:78:a0:f4:fb:c0:6a:6b:b7:
                    d4:ed:ff:3b:29:77:bf:ef:98:a0:c2:99:1d:24:33:
                    eb:68:f6:00:37:aa:2c:8c:b9:ff:d6:c3:4e:9d:e7:
                    df:47:b2:c0:0b:7f:0e:82:97:a5:f2:d1:76:4f:db:
                    e6:0f:d5:ad:30:a7:6c:38:f8:a0:1a:b5:22:d3:49:
                    a9:4d:74:d1:f7:05:32:98:55:47:51:4d:88:ac:b1:
                    87:eb:21:2f:96:c3:eb:f3:9f:b9:d2:09:be:cf:e5:
                    31:f9:b4:8f:01:39:36:c3:d8:ce:00:58:2e:61:0a:
                    77:97:3f:dd:08:10:03:82:f9:f3:7c:1a:05:cb:08:
                    6f:8e:e6:aa:c5:86:86:dc:10:53:7e:6c:cf:e4:0a:
                    6e:c0:fb:5f:84:46:5f:85:18:06:ec:85:18:b7:da:
                    80:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0B:2F:50:3D:1E:D8:4F:97:52:84:D8:D8:01:1C:F7:7B:7B:79:6A
            X509v3 Authority Key Identifier:
                keyid:36:6F:E5:8C:FA:30:47:E8:1B:83:68:52:3C:1A:F3:46:C4:3B:13:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/366FE58CFA3047E81B8368523C1AF346C43B13A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/366FE58CFA3047E81B8368523C1AF346C43B13A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/34352e3138372e3232382e302f32322d3234203d3e20323639343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:16:1f:70:0b:bf:33:70:64:66:17:dd:75:82:6b:fe:bd:08:
         40:ca:da:16:a7:03:d0:84:a5:46:2d:bd:67:ea:3d:61:9e:49:
         13:79:14:05:ef:ca:1b:77:d8:fe:a6:21:09:b6:08:2c:0c:6e:
         9e:19:56:99:b1:6c:ed:38:5c:f4:bb:a4:a9:f6:61:10:e4:25:
         a2:7f:c5:83:19:3f:7d:e3:65:99:82:a7:70:b0:64:15:e4:b8:
         1f:d1:61:f9:11:16:b1:83:3b:aa:85:48:2f:f8:e5:a7:55:70:
         38:d1:2c:45:64:c3:1f:1e:4a:15:98:34:89:ee:bf:5c:44:17:
         54:86:31:8d:17:df:17:55:ec:54:35:0d:19:e2:2e:26:64:f8:
         6a:45:0d:d8:ec:b3:63:2e:30:e6:4d:c2:e3:46:82:d9:6d:1d:
         32:7d:fb:c8:ae:5e:48:1c:3e:20:f3:61:db:b7:31:f9:77:24:
         d8:eb:67:79:91:2e:cc:c9:66:84:69:4b:30:7b:17:19:aa:1b:
         12:d3:cc:d1:ae:b9:70:ef:95:c5:d2:d0:95:01:56:5e:94:ad:
         d9:a8:d6:bb:52:09:6e:c1:3f:5b:e1:7c:79:8d:f9:3e:7f:ef:
         eb:3b:92:79:ed:d7:60:8d:24:12:bc:d9:42:ae:70:5f:c3:26:
         75:99:de:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:20:49 2024 by rpki-client on console-fra.rpki-client.org