Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/34352e3138362e3233372e302f32342d3234203d3e20323639353134.roa
File:                     34352e3138362e3233372e302f32342d3234203d3e20323639353134.roa (raw, json)
Hash identifier:          kGgzxfLVVNfQNMN2TYATcQXcFKoJiywfgF9KUb6TKHU=
Subject key identifier:   A6:25:BB:05:6C:FC:CA:41:4B:E7:DE:DD:04:C1:F8:2A:D3:23:95:0B
Certificate issuer:       /CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
Certificate serial:       411E774BC87FC0659D6EEDCF6DEBD32B84874584
Authority key identifier: 05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/34352e3138362e3233372e302f32342d3234203d3e20323639353134.roa
Signing time:             Fri 08 Nov 2024 01:22:33 +0000
ROA not before:           Fri 08 Nov 2024 01:17:33 +0000
ROA not after:            Fri 07 Nov 2025 01:22:33 +0000
asID:                     269514
IP address blocks:        45.186.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.crl
                          rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1e:77:4b:c8:7f:c0:65:9d:6e:ed:cf:6d:eb:d3:2b:84:87:45:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96
        Validity
            Not Before: Nov  8 01:17:33 2024 GMT
            Not After : Nov  7 01:22:33 2025 GMT
        Subject: CN=A625BB056CFCCA414BE7DEDD04C1F82AD323950B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:cf:3e:06:d2:91:e2:a6:7f:da:9e:56:b3:
                    50:e3:f8:63:af:b3:e7:90:18:c6:9c:15:22:aa:d4:
                    13:73:1e:9b:8a:96:24:e3:91:10:93:6b:1c:19:c4:
                    35:17:de:11:7b:67:bc:dc:dc:0c:c1:0f:8f:30:6d:
                    67:46:2c:7a:57:8f:6e:ad:97:ba:d7:e7:78:3f:ab:
                    d6:59:39:2e:d4:4c:16:f6:ca:b7:1e:04:74:18:8c:
                    51:e4:c3:4f:0e:da:e4:99:42:34:8c:ca:4a:4a:3d:
                    40:36:8c:a8:69:cd:1a:ff:87:a1:5c:98:9d:9f:b4:
                    8e:12:c2:a2:12:9a:f8:b9:65:11:cf:f9:5a:46:fe:
                    b9:91:cc:ec:5b:ca:de:b6:c3:00:29:b5:99:17:47:
                    af:bd:b5:b5:d5:c8:e7:4b:6f:9f:5f:15:ed:50:0a:
                    c4:ec:0c:f9:fd:d9:38:2f:9a:25:26:58:8e:03:fa:
                    6f:9a:b0:e4:ca:bd:02:25:a1:39:f4:eb:29:d3:00:
                    79:8b:0b:3c:4e:b9:0d:ce:1c:5c:c0:e9:81:1b:d5:
                    f3:33:9a:9d:57:2a:1e:ef:f7:77:ea:a0:74:2d:f2:
                    e9:26:5f:4c:0e:1c:1b:56:63:89:d7:4a:cc:4f:5a:
                    19:91:51:c4:49:12:0b:b6:45:ec:ad:62:5b:56:a0:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:25:BB:05:6C:FC:CA:41:4B:E7:DE:DD:04:C1:F8:2A:D3:23:95:0B
            X509v3 Authority Key Identifier:
                keyid:05:A8:5F:FC:2E:60:C3:11:7B:A8:B9:EC:C5:DC:DE:E8:91:37:DF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05A85FFC2E60C3117BA8B9ECC5DCDEE89137DF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/34352e3138362e3233372e302f32342d3234203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:78:f2:08:92:fd:be:bb:0c:2c:80:3b:ae:6a:57:f5:c4:f2:
         91:78:65:a8:29:5b:88:bf:30:8a:7e:0d:0a:a1:a8:e2:94:3f:
         35:0a:3a:62:c4:a5:2e:73:27:4f:01:06:dd:67:63:87:2f:50:
         1f:72:ca:01:58:1a:5d:1a:85:bf:bb:f0:f5:2c:c1:87:92:6f:
         ce:f3:40:66:16:f6:91:17:f7:a3:63:20:04:74:a3:ab:dc:bd:
         72:2b:fd:1f:94:05:56:29:b9:df:85:3f:a5:fe:06:e9:b5:4a:
         9c:3e:44:65:1c:07:74:dc:f3:f4:ad:68:a1:35:b5:c1:a1:df:
         68:dc:66:82:3c:06:6c:71:ec:8e:55:82:2b:65:85:d4:73:e2:
         7f:93:cf:db:31:eb:b6:0f:1a:0b:d4:07:94:45:86:bc:61:7e:
         88:02:7b:62:1d:8b:f5:2a:20:32:d1:dc:33:32:8e:10:74:98:
         de:f8:06:11:2b:6f:96:54:94:82:d8:87:8d:f5:7a:ff:aa:27:
         39:4a:a2:1b:80:42:cb:20:5d:0c:c5:a3:72:4c:8d:0a:d3:ea:
         20:23:ea:1e:17:de:0f:d4:f6:ee:d1:b0:66:c3:d7:97:b1:0d:
         be:3a:d7:83:28:1c:41:63:f8:13:ca:b0:05:94:7c:5e:24:85:
         02:32:4a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:15 2024 by rpki-client on console-ams.rpki-client.org