Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/34352e3138312e37322e302f32322d3234203d3e20323639313838.roa
File:                     34352e3138312e37322e302f32322d3234203d3e20323639313838.roa (raw, json)
Hash identifier:          YDEpdlYFpDQjRgvt4iOHCpzEQgR+ygpy21+mS6ZqK/0=
Subject key identifier:   EF:89:2C:ED:D0:5C:15:0C:91:94:78:77:43:9B:58:3F:3C:C1:31:B5
Certificate issuer:       /CN=A2481D14FAE137FC69C2002900E8E133F914C990
Certificate serial:       5B7F92EE74F7F947D36424C05125B70CA116D507
Authority key identifier: A2:48:1D:14:FA:E1:37:FC:69:C2:00:29:00:E8:E1:33:F9:14:C9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/34352e3138312e37322e302f32322d3234203d3e20323639313838.roa
Signing time:             Fri 12 Jul 2024 17:50:38 +0000
ROA not before:           Fri 12 Jul 2024 17:45:38 +0000
ROA not after:            Fri 11 Jul 2025 17:50:38 +0000
asID:                     269188
IP address blocks:        45.181.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl
                          rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 14:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7f:92:ee:74:f7:f9:47:d3:64:24:c0:51:25:b7:0c:a1:16:d5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2481D14FAE137FC69C2002900E8E133F914C990
        Validity
            Not Before: Jul 12 17:45:38 2024 GMT
            Not After : Jul 11 17:50:38 2025 GMT
        Subject: CN=EF892CEDD05C150C91947877439B583F3CC131B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:a0:be:16:74:8a:ff:1d:00:31:fc:8b:f0:
                    a1:90:c5:19:4b:52:a9:56:24:2a:02:7a:6a:70:df:
                    31:e1:f6:9c:b8:32:a2:ce:18:2b:de:b0:37:5f:c9:
                    13:70:4d:c5:02:d2:97:7b:f2:0f:12:35:cf:4f:2a:
                    ba:87:ba:19:e9:07:52:63:00:5e:ea:e4:84:2c:cd:
                    ae:10:8a:88:42:fc:b4:66:d9:7b:73:ed:8d:50:fe:
                    f7:24:c0:5c:4e:aa:ea:68:7a:b5:e5:8c:93:7d:a5:
                    cf:e6:ea:87:42:d0:4d:e4:13:bf:f1:2e:66:20:b5:
                    6d:a9:22:3d:6f:81:67:76:40:8d:96:ee:74:2a:27:
                    71:ad:cc:48:76:c9:fb:86:6d:fa:f3:96:11:bc:40:
                    2e:04:3a:f6:76:ea:2d:4b:e2:c1:38:45:bb:86:cc:
                    a3:58:5b:d5:a0:98:ab:28:dc:d5:94:77:bd:4e:5b:
                    92:9b:0f:a6:28:84:2e:86:b4:41:0a:8b:f6:37:cc:
                    00:9b:00:c1:47:40:d3:84:9a:bd:72:dc:b8:47:a4:
                    a4:2a:6e:c3:0f:87:42:8e:d9:ec:9e:f5:3a:9b:11:
                    7e:35:6b:ef:98:2b:6b:3b:82:7d:35:27:b9:4a:41:
                    de:65:73:b6:c3:eb:d0:81:0a:17:43:04:86:e1:54:
                    76:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:89:2C:ED:D0:5C:15:0C:91:94:78:77:43:9B:58:3F:3C:C1:31:B5
            X509v3 Authority Key Identifier:
                keyid:A2:48:1D:14:FA:E1:37:FC:69:C2:00:29:00:E8:E1:33:F9:14:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/34352e3138312e37322e302f32322d3234203d3e20323639313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:4b:7f:c9:9a:49:4f:e3:27:c9:f4:3f:11:04:0d:be:27:73:
         ec:6c:04:09:e1:ad:3f:26:f1:a4:56:9b:6a:61:61:3b:59:fb:
         fa:7c:5d:52:b7:7b:dd:96:80:14:24:68:d7:09:c0:69:f3:21:
         77:8e:0c:9f:b5:d1:89:80:25:73:79:86:aa:d6:99:ed:12:cb:
         90:b6:cc:2a:2f:79:d7:a8:cc:fa:7a:6e:18:5e:13:ac:c5:48:
         be:af:b0:0c:47:09:88:a5:f5:fa:82:56:f5:18:00:6b:c3:1c:
         b7:7b:b5:e9:87:d6:4a:39:2b:7a:87:ea:5a:bc:78:41:36:10:
         d4:a2:b2:98:f7:57:61:42:6e:1c:ea:7b:07:d8:ba:10:2a:c2:
         69:19:e2:ad:26:30:4b:f4:d1:43:b8:3f:1a:00:d2:48:7c:2e:
         c7:64:b3:ca:d3:91:36:3a:ad:97:be:99:6a:ec:79:78:ca:d2:
         ad:e9:87:1b:30:12:93:76:b8:83:2a:fb:c5:ca:03:3e:f0:17:
         43:99:72:97:c6:77:25:f7:31:16:94:42:19:8a:5c:9f:9f:4b:
         c4:2a:62:49:0f:2f:a6:03:0d:85:ed:22:92:70:26:b3:ad:cd:
         7d:31:76:1e:f6:3a:ff:13:d9:c2:32:0c:3f:ba:c8:59:45:03:
         9f:41:05:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:09 2024 by rpki-client on console-ams.rpki-client.org