Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/34352e3138362e3233362e302f32322d3232203d3e20323639353134.roa
File:                     34352e3138362e3233362e302f32322d3232203d3e20323639353134.roa (raw, json)
Hash identifier:          FJDJwWlGPyyl+YKzillZWeRxTB6S6puJ0iHKJkD+G4k=
Subject key identifier:   D4:94:09:0B:22:89:40:C4:71:95:C7:EE:E3:F9:9E:37:2A:E3:E7:7A
Certificate issuer:       /CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
Certificate serial:       5E31328B6CB943A09820260E0B260723D3199C19
Authority key identifier: 05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/34352e3138362e3233362e302f32322d3232203d3e20323639353134.roa
Signing time:             Fri 08 Nov 2024 01:22:36 +0000
ROA not before:           Fri 08 Nov 2024 01:17:36 +0000
ROA not after:            Fri 07 Nov 2025 01:22:36 +0000
asID:                     269514
IP address blocks:        45.186.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.crl
                          rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:31:32:8b:6c:b9:43:a0:98:20:26:0e:0b:26:07:23:d3:19:9c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
        Validity
            Not Before: Nov  8 01:17:36 2024 GMT
            Not After : Nov  7 01:22:36 2025 GMT
        Subject: CN=D494090B228940C47195C7EEE3F99E372AE3E77A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4f:d3:a5:8d:3e:a4:93:b7:7a:76:92:f4:47:
                    8b:2d:51:dd:ae:c0:06:c2:8a:23:02:12:d5:5e:3e:
                    0b:26:a2:1b:65:df:ae:8c:51:f1:63:f4:1c:fe:f4:
                    60:a4:f1:cd:b0:57:ec:c6:a5:70:31:c1:45:e7:33:
                    1a:bb:5d:34:7c:65:e1:55:b8:20:00:9d:1a:ed:56:
                    9b:eb:09:a8:fe:7d:6c:16:96:28:c5:ad:ed:89:82:
                    d5:87:52:46:87:eb:74:3d:5a:0f:78:8c:e0:ee:03:
                    f7:ed:1a:9c:22:c7:92:aa:42:1a:cb:8d:02:8e:0c:
                    13:4e:de:63:96:e1:58:d6:58:cb:57:c3:01:fe:96:
                    01:e0:bc:70:98:89:4c:5b:70:f9:7a:a5:a5:b3:6f:
                    ba:41:f0:84:0d:68:03:b4:94:d4:84:85:7a:9f:78:
                    29:fb:41:29:af:7d:1e:a8:81:b5:24:83:a8:dd:cf:
                    15:df:96:f8:dd:9f:0c:16:ec:e0:4f:34:f4:d3:cd:
                    01:d3:1d:c2:09:df:11:44:ab:b3:75:b2:6f:5f:3a:
                    ca:de:79:01:50:b6:43:23:c2:20:a4:8e:2e:db:42:
                    4d:0d:d9:36:57:f9:e9:ea:3f:95:04:b8:73:33:fa:
                    f9:09:b2:c6:a9:0b:0f:b7:90:63:03:1d:36:7e:00:
                    5f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:94:09:0B:22:89:40:C4:71:95:C7:EE:E3:F9:9E:37:2A:E3:E7:7A
            X509v3 Authority Key Identifier:
                keyid:05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/34352e3138362e3233362e302f32322d3232203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:6b:23:37:b0:83:23:ca:81:b5:93:85:23:77:88:30:83:2a:
         18:c3:7c:0b:14:63:c7:45:0f:f1:01:f1:7b:07:c6:6a:2a:d8:
         49:d5:fe:f0:3a:23:17:cd:d2:79:28:0b:56:7e:81:1b:78:b6:
         7d:be:3c:00:65:a4:9d:77:77:d5:ef:a1:24:68:18:22:b8:a2:
         ee:c1:4e:81:20:0a:d6:8c:d7:e2:1a:77:22:40:90:a3:ab:48:
         ee:b4:a6:54:dc:67:7a:93:8a:d4:24:5d:13:60:dc:dc:66:d0:
         0e:f1:18:49:52:4f:b2:53:91:7a:cc:ae:40:30:93:00:7d:ee:
         53:8c:c4:28:44:53:1d:4a:52:6e:de:9b:a4:8f:c1:22:f5:aa:
         97:4d:10:0d:89:15:01:74:f4:3c:5b:c7:c2:79:e4:04:72:85:
         3a:ff:17:be:7c:ca:5c:68:14:67:48:2a:da:e2:c0:9c:e2:cc:
         9f:1e:5a:02:38:9a:05:3c:0e:55:7d:48:2c:ef:d7:47:bd:99:
         51:e4:c4:7c:ed:55:5f:a2:e6:10:9e:83:8c:6b:51:b9:ce:71:
         58:c1:4b:11:cf:f5:87:d4:4a:b0:96:5c:53:8f:d1:ad:a5:db:
         47:2c:31:70:31:e1:96:4c:c3:87:5a:e6:8d:ad:15:54:2c:de:
         b6:f9:a0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:10 2024 by rpki-client on console-fra.rpki-client.org