Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/34352e3136322e3137362e302f32322d3332203d3e20323638353337.roa
File:                     34352e3136322e3137362e302f32322d3332203d3e20323638353337.roa (raw, json)
Hash identifier:          INx2mspjh4hvoYH1jYGPLVpykD8nFtRkXH7iZIaFHNQ=
Subject key identifier:   BC:06:84:D1:E4:DB:AE:F0:C2:C9:F7:CB:84:46:27:25:95:2A:E0:F7
Certificate issuer:       /CN=4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1
Certificate serial:       585220B0117736F19EBC88220B586F50DD22E737
Authority key identifier: 4B:1A:A4:83:6C:83:C2:F4:21:BF:4B:5F:3A:1C:09:1E:B1:42:80:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/34352e3136322e3137362e302f32322d3332203d3e20323638353337.roa
Signing time:             Fri 20 Sep 2024 14:14:03 +0000
ROA not before:           Fri 20 Sep 2024 14:09:03 +0000
ROA not after:            Fri 19 Sep 2025 14:14:03 +0000
asID:                     268537
IP address blocks:        45.162.176.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.crl
                          rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:52:20:b0:11:77:36:f1:9e:bc:88:22:0b:58:6f:50:dd:22:e7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1
        Validity
            Not Before: Sep 20 14:09:03 2024 GMT
            Not After : Sep 19 14:14:03 2025 GMT
        Subject: CN=BC0684D1E4DBAEF0C2C9F7CB84462725952AE0F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c6:28:7d:88:07:08:95:95:73:9c:b7:0e:10:
                    22:3e:6e:cf:b1:a6:97:cd:07:44:92:14:a7:de:68:
                    34:3f:2d:e1:83:b1:71:3f:b6:1d:a5:86:13:88:3c:
                    46:b1:24:ea:26:07:c9:73:c3:d6:20:30:ac:80:11:
                    ae:cb:e8:93:d0:8d:f1:4a:74:74:1e:96:f2:12:87:
                    de:a4:03:a5:ae:1a:db:1e:6b:6d:88:65:80:c8:a3:
                    2c:71:1e:24:08:c2:92:2b:71:b2:fd:b6:24:cd:a0:
                    ba:25:4c:d6:02:21:a8:18:cf:ec:55:c6:59:63:33:
                    9d:4f:6c:59:d7:0f:70:75:83:65:b9:18:38:22:a9:
                    cd:21:ed:2c:c4:e4:1a:cb:6f:16:a2:59:51:33:af:
                    8a:b6:ef:eb:1a:7f:54:30:05:7a:96:72:f3:f0:b6:
                    29:5c:38:e0:3c:0d:03:cf:20:d7:57:c7:42:13:1c:
                    58:06:dc:60:64:70:0a:31:92:97:0c:fe:88:00:2a:
                    4a:b6:68:fd:40:09:40:57:92:e0:f7:a7:c2:a0:7d:
                    3e:d1:f2:82:95:a3:d4:8f:1b:ab:91:fd:04:57:7d:
                    c0:d7:9c:fc:e6:25:d3:b7:da:e9:3e:55:b2:fe:3e:
                    8b:4c:45:0d:ab:23:f1:d5:29:36:00:77:4e:a3:f9:
                    79:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:06:84:D1:E4:DB:AE:F0:C2:C9:F7:CB:84:46:27:25:95:2A:E0:F7
            X509v3 Authority Key Identifier:
                keyid:4B:1A:A4:83:6C:83:C2:F4:21:BF:4B:5F:3A:1C:09:1E:B1:42:80:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/34352e3136322e3137362e302f32322d3332203d3e20323638353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:09:d5:5d:b2:73:ec:06:e3:27:df:3c:b2:7a:34:13:39:97:
         f3:96:9c:a1:87:91:d3:b8:dd:31:a8:bf:67:17:7a:34:70:10:
         2f:52:00:ef:16:4f:a9:2e:5f:de:cd:c2:c8:3d:8f:f5:07:30:
         d8:77:90:72:6e:e1:91:36:66:55:44:49:32:06:d2:b8:42:c1:
         31:bd:0f:eb:ba:1a:df:1f:a9:ac:8d:e2:68:62:ed:ba:70:b4:
         23:36:93:2c:54:29:c1:fa:cf:42:be:de:74:8b:c6:d1:38:8b:
         3f:09:f9:6d:d4:38:50:f1:ba:00:e8:64:aa:82:87:5e:0c:83:
         de:c7:d5:d4:44:3b:5b:95:20:8b:7e:f3:ec:5e:2f:8d:6c:51:
         0a:6b:c9:b3:e0:83:db:ee:2f:9b:a3:ca:ec:db:3d:a4:06:05:
         48:8d:f9:11:ff:a6:99:b9:33:66:be:08:d7:7e:c2:e9:70:c2:
         51:03:ac:da:14:fa:92:2f:6e:16:1a:ec:a6:20:58:e8:0e:36:
         7f:ec:1c:b0:6b:63:31:38:a3:d0:95:1c:f3:90:85:94:7f:c9:
         a1:35:e0:3e:97:18:70:2b:3d:a7:ea:c6:c1:32:40:01:be:72:
         15:38:06:66:c3:ec:7a:95:a7:13:a2:e6:98:55:97:f2:06:5f:
         6b:91:64:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:56 2024 by rpki-client on console-ams.rpki-client.org