Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/34352e3233342e34302e302f32322d3234203d3e203238363639.roa
File:                     34352e3233342e34302e302f32322d3234203d3e203238363639.roa (raw, json)
Hash identifier:          68SUjvOUlXeAL6okEpitycZPJ/LemeskLXsdVZlMVQc=
Subject key identifier:   EC:AF:C4:7E:70:7B:25:2F:43:C2:F2:EB:DB:8E:0B:7E:21:CF:84:0C
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       2E7E222641FA82E34CA30F8B87BA994BDB41B745
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/34352e3233342e34302e302f32322d3234203d3e203238363639.roa
Signing time:             Mon 25 Nov 2024 17:03:44 +0000
ROA not before:           Mon 25 Nov 2024 16:58:44 +0000
ROA not after:            Mon 24 Nov 2025 17:03:44 +0000
asID:                     28669
IP address blocks:        45.234.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7e:22:26:41:fa:82:e3:4c:a3:0f:8b:87:ba:99:4b:db:41:b7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:58:44 2024 GMT
            Not After : Nov 24 17:03:44 2025 GMT
        Subject: CN=ECAFC47E707B252F43C2F2EBDB8E0B7E21CF840C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7f:a2:24:22:a2:36:14:a8:3a:2e:1c:91:95:
                    ae:7f:30:1f:da:6f:63:ab:b0:6d:d8:05:fe:5d:dc:
                    7d:51:87:d5:4a:6b:c8:1e:30:c0:58:2e:c7:cd:ca:
                    48:e9:3f:8b:7c:82:dd:97:46:d9:64:29:55:7a:13:
                    23:b0:97:47:4e:0f:7c:9e:89:20:54:cd:b4:b9:18:
                    45:d3:62:0c:7f:f9:1f:72:78:4c:91:d2:fb:c5:0a:
                    9a:cf:f1:16:cc:59:d5:de:c8:95:27:fa:bb:2c:4f:
                    41:00:38:68:b5:51:e6:fc:a8:55:a5:ae:10:fc:77:
                    79:89:40:ac:e2:cb:ed:c6:63:29:f9:32:87:9a:9e:
                    e9:c5:93:96:27:e5:d8:40:ac:06:d4:f9:e6:0d:d8:
                    eb:ac:aa:0b:b7:db:ef:22:75:11:45:60:9f:51:73:
                    bf:c8:55:7a:b8:85:cd:00:e2:37:cb:59:b8:11:b9:
                    e5:b0:7e:45:7a:50:d0:45:01:10:bd:72:4b:b0:dd:
                    27:8c:8d:e8:26:f2:f7:c6:e6:98:27:27:fb:8a:98:
                    9b:ad:77:8b:d3:ee:b7:d9:00:7c:e0:b0:66:78:bc:
                    3c:ba:52:7f:d8:f1:f3:44:a3:72:ca:77:bf:9e:36:
                    cd:10:71:7d:68:20:1c:c5:cf:29:9d:73:9b:e5:ee:
                    1f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AF:C4:7E:70:7B:25:2F:43:C2:F2:EB:DB:8E:0B:7E:21:CF:84:0C
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/34352e3233342e34302e302f32322d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:32:5c:03:63:07:f2:6a:3d:15:85:d5:4a:b0:0c:c1:0e:5d:
         77:ac:72:b9:eb:04:36:5d:35:bd:83:17:98:e2:8e:0d:3c:65:
         57:82:77:29:4b:b9:4e:a2:89:87:48:76:b2:6c:b3:d9:87:21:
         13:72:08:21:92:50:d5:6f:3d:a3:e2:37:6a:54:7c:b8:9f:f8:
         6c:0a:97:67:e7:9e:b6:08:3a:66:a4:2b:1e:55:94:de:08:95:
         e4:6c:94:47:8e:ba:4e:ad:46:74:ae:2c:31:25:7e:e1:46:e5:
         03:ea:f1:93:bd:3b:11:13:49:d0:fa:3e:2e:c3:c1:b4:70:d5:
         a0:9a:b5:4a:7e:92:aa:36:35:ea:cf:ae:0d:da:40:00:e6:e0:
         95:93:82:23:f4:0e:9d:c7:e2:69:77:40:20:6d:8b:2a:ff:fd:
         9c:46:88:0a:3f:ee:5e:c2:a6:36:5b:e7:84:6b:87:60:c0:94:
         4f:1b:11:20:04:ff:ee:56:7e:b4:73:77:68:b6:4a:bf:31:e9:
         55:58:19:07:2c:40:78:5a:b9:b7:ad:0e:97:d0:71:b1:e1:41:
         88:9a:da:0e:73:8d:44:2c:8f:90:65:65:6c:05:4b:11:28:3d:
         5f:8c:08:51:8f:9c:9c:5e:7c:c5:5c:f2:89:0b:b6:32:a9:51:
         10:91:51:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org