Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/34352e3137392e32302e302f32322d3234203d3e203631383434.roa
File:                     34352e3137392e32302e302f32322d3234203d3e203631383434.roa (raw, json)
Hash identifier:          Zkff9rAd7JoU9JBuaSd10YoNJ+aBGT5qiciNUj6UxXI=
Subject key identifier:   9E:13:F0:10:78:BE:77:69:4C:A4:99:C2:5E:E2:7E:30:B9:A7:45:97
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       7808F18515E084AD21EE648218337E06A4772858
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/34352e3137392e32302e302f32322d3234203d3e203631383434.roa
Signing time:             Mon 25 Nov 2024 17:03:46 +0000
ROA not before:           Mon 25 Nov 2024 16:58:46 +0000
ROA not after:            Mon 24 Nov 2025 17:03:46 +0000
asID:                     61844
IP address blocks:        45.179.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:08:f1:85:15:e0:84:ad:21:ee:64:82:18:33:7e:06:a4:77:28:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:58:46 2024 GMT
            Not After : Nov 24 17:03:46 2025 GMT
        Subject: CN=9E13F01078BE77694CA499C25EE27E30B9A74597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:91:47:50:ad:dd:a2:41:fc:b5:85:16:1c:
                    56:2c:26:3f:88:40:a3:09:29:dd:e5:7b:44:56:71:
                    7c:76:40:97:24:d6:b5:b0:d8:10:fb:c9:e9:9e:6c:
                    5d:9f:88:e0:c6:e0:60:c6:ba:5a:7a:a6:90:96:02:
                    b8:4a:00:fe:c5:12:27:4c:9f:35:da:60:aa:8a:9e:
                    ee:a6:d4:ab:a7:84:6e:ec:c1:b2:e7:af:85:4a:40:
                    d1:1b:f5:5c:c6:49:23:24:01:86:ff:3a:2d:46:c1:
                    f3:4b:06:37:05:96:ea:b7:e4:59:4a:03:cc:d9:d2:
                    04:f8:78:e7:0d:03:7e:28:25:cd:9a:da:61:78:06:
                    7d:5b:ea:00:35:5c:b9:01:1f:e7:2b:01:25:ea:7d:
                    71:8b:4f:b8:5d:28:7d:22:58:ec:ca:21:0a:74:b3:
                    c4:7e:69:ed:8b:a4:55:f3:e6:de:98:fc:01:d8:55:
                    33:6f:8f:6c:72:9c:ad:22:0e:c7:a8:74:a7:56:ff:
                    cb:96:c2:a9:10:87:09:83:4f:95:94:35:28:d8:48:
                    39:53:30:11:77:d3:ca:52:86:3a:cd:ab:5e:19:65:
                    c5:ab:41:85:c3:fc:26:6f:bd:46:3c:2f:c7:e1:2b:
                    89:d3:8a:02:45:47:b1:b6:12:f4:f4:9d:ee:1e:18:
                    06:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:13:F0:10:78:BE:77:69:4C:A4:99:C2:5E:E2:7E:30:B9:A7:45:97
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/34352e3137392e32302e302f32322d3234203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:b3:44:15:cd:d5:39:a7:e6:a7:42:65:58:00:45:b8:5a:c0:
         e9:04:aa:e2:82:c5:b4:54:43:a3:a6:7d:c8:f8:75:49:e6:da:
         b9:40:8e:2c:ea:2a:d3:a3:9b:1c:e3:2a:71:33:1d:15:60:b3:
         56:54:96:33:c1:b2:75:73:a2:58:f0:8d:15:e2:a4:cf:d3:18:
         f2:83:8c:8a:9e:af:e2:69:71:cb:ed:81:28:6d:f6:a4:f1:a0:
         7a:f2:56:ee:72:ed:d7:a4:cc:c1:2d:75:38:86:45:4f:66:54:
         0a:7a:b1:85:55:c2:be:0e:c8:5d:23:ca:ed:25:ba:f6:61:2d:
         de:ee:bd:cd:15:12:74:f3:b6:28:f8:29:27:09:4d:45:2e:61:
         17:a3:6b:78:bb:d8:5a:e0:dc:d8:15:64:7e:a1:5d:9e:d6:b4:
         b8:67:d0:d6:33:b7:5a:8f:c3:7c:0a:6c:d5:d0:ec:12:ca:f0:
         45:b3:b7:44:d2:6a:33:4c:01:b8:d2:c1:fa:97:d1:92:c4:17:
         5f:17:d1:56:10:1b:ce:47:8a:79:be:ac:18:06:a8:4c:bd:f2:
         db:ce:81:fb:f5:ee:c6:09:48:8a:52:7b:59:98:f9:7e:b3:68:
         c3:fd:54:85:df:c3:0e:57:d5:3c:52:87:1c:99:35:50:a2:5d:
         15:cd:9b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org