Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/34352e3138302e3230302e302f32322d3234203d3e20323639313438.roa
File:                     34352e3138302e3230302e302f32322d3234203d3e20323639313438.roa (raw, json)
Hash identifier:          QgLBxn+pfQJ5c9mi10Fo4GqeK3J6OyyDwk2HRiAS+v0=
Subject key identifier:   A2:FC:4A:08:16:7A:03:32:62:38:F9:66:DC:20:5E:E5:28:39:76:5D
Certificate issuer:       /CN=1D3829E5A9073F7F5614BCF961CF641519A58E94
Certificate serial:       293EE946F6C2FD85B4408A20A6E1EFA813F84F62
Authority key identifier: 1D:38:29:E5:A9:07:3F:7F:56:14:BC:F9:61:CF:64:15:19:A5:8E:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3829E5A9073F7F5614BCF961CF641519A58E94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/34352e3138302e3230302e302f32322d3234203d3e20323639313438.roa
Signing time:             Thu 04 Apr 2024 16:17:50 +0000
ROA not before:           Thu 04 Apr 2024 16:12:50 +0000
ROA not after:            Thu 03 Apr 2025 16:17:50 +0000
asID:                     269148
IP address blocks:        45.180.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/1D3829E5A9073F7F5614BCF961CF641519A58E94.crl
                          rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/1D3829E5A9073F7F5614BCF961CF641519A58E94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3829E5A9073F7F5614BCF961CF641519A58E94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3e:e9:46:f6:c2:fd:85:b4:40:8a:20:a6:e1:ef:a8:13:f8:4f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D3829E5A9073F7F5614BCF961CF641519A58E94
        Validity
            Not Before: Apr  4 16:12:50 2024 GMT
            Not After : Apr  3 16:17:50 2025 GMT
        Subject: CN=A2FC4A08167A03326238F966DC205EE52839765D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:ca:84:8d:ab:69:c8:86:64:49:ce:aa:fb:
                    50:28:77:28:c3:69:f7:87:74:98:7c:94:85:cc:bd:
                    b5:e3:56:fa:cb:10:79:d4:9c:0d:65:fd:07:87:40:
                    5a:95:29:fe:5a:24:86:c1:8d:48:63:cd:87:5f:2e:
                    ae:05:1f:0c:93:e2:f0:68:fe:46:1e:36:67:0b:76:
                    dd:8d:ec:bd:f9:b4:b4:23:cf:39:ad:2a:d3:9b:45:
                    27:90:d7:62:a0:54:2a:bd:5c:69:54:bf:f9:85:fa:
                    16:43:24:b5:52:1e:be:be:37:3c:ad:40:4f:72:13:
                    8f:e1:ed:5d:4e:33:c8:03:39:5a:4e:04:37:a2:31:
                    5b:37:14:c0:e2:2d:73:5e:5a:09:bf:d8:9f:61:8a:
                    97:10:d6:bf:60:55:8f:86:03:e9:98:d1:e7:42:33:
                    de:9b:6d:77:76:bc:78:56:7a:15:4d:39:f0:a7:e7:
                    76:6b:7a:93:67:e1:e0:0d:a2:0e:0b:2f:f4:6a:9b:
                    de:33:12:52:db:75:1e:cd:0f:7d:bb:c2:bd:b9:54:
                    c7:bf:c7:6f:20:79:d7:58:a7:36:9b:9e:dc:2b:16:
                    6d:c8:43:20:a3:e5:eb:2d:6e:6c:a1:70:07:b3:fa:
                    26:e7:70:41:76:bc:b2:7f:08:51:41:5d:eb:e1:42:
                    bd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FC:4A:08:16:7A:03:32:62:38:F9:66:DC:20:5E:E5:28:39:76:5D
            X509v3 Authority Key Identifier:
                keyid:1D:38:29:E5:A9:07:3F:7F:56:14:BC:F9:61:CF:64:15:19:A5:8E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/1D3829E5A9073F7F5614BCF961CF641519A58E94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3829E5A9073F7F5614BCF961CF641519A58E94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/34352e3138302e3230302e302f32322d3234203d3e20323639313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:ed:52:0f:d9:23:04:b1:a1:c7:e6:42:a6:90:0f:38:9c:36:
         56:e9:e9:e7:c0:e3:5e:0e:fa:0d:37:5a:5c:0a:6f:ef:cd:e1:
         84:f7:2e:27:db:cd:1f:e3:e2:e3:c4:ee:27:63:00:8f:07:dc:
         dd:54:2f:81:f9:60:d1:54:8f:43:bc:75:3f:b6:4c:e4:6a:bf:
         c7:d5:15:8c:5d:61:73:83:d9:f1:0f:72:d1:76:68:fc:0e:52:
         2f:10:a5:69:48:0e:3c:ac:53:c0:fa:ca:f1:37:7d:1b:00:76:
         0b:2e:01:5c:9a:96:e8:af:dc:73:bb:50:c3:27:a4:85:9a:7f:
         42:5d:3f:47:af:8e:2c:86:ac:a2:d2:0b:2e:1f:fb:b2:e3:a1:
         be:d4:fc:8e:23:0c:a6:ce:28:6b:a8:d7:b6:c7:6c:65:ee:61:
         76:47:26:bf:59:2b:ea:17:3f:4f:d9:07:d4:cc:91:19:a9:32:
         cc:3d:64:92:e9:2d:c4:8e:c3:f8:e9:27:da:c5:f9:aa:ea:7a:
         f3:82:68:51:5d:34:28:77:17:9f:60:d7:14:a6:53:95:ad:b2:
         af:f5:76:9f:9b:4d:c0:01:f7:09:b4:32:ee:57:a3:b4:9f:78:
         27:20:db:bf:e1:4b:fa:1f:7f:9c:c0:df:fe:e8:6d:46:35:4e:
         5a:75:61:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:15 2024 by rpki-client on console-ams.rpki-client.org