Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/34352e3138342e3138362e302f32342d3234203d3e20323639333338.roa
File:                     34352e3138342e3138362e302f32342d3234203d3e20323639333338.roa (raw, json)
Hash identifier:          Go4LULSX/6ySKqLv6bfFuJBuwAztBNSDUtF8Rr48IGw=
Subject key identifier:   BC:AE:23:C5:23:1C:28:91:34:B1:5C:86:F8:24:21:47:DB:93:F7:B3
Certificate issuer:       /CN=74641B8EAD691A490CFACE3932BAD9C4006F2E67
Certificate serial:       74ACC6931EF94CB2DA209D3A9DA8F236838BAE88
Authority key identifier: 74:64:1B:8E:AD:69:1A:49:0C:FA:CE:39:32:BA:D9:C4:00:6F:2E:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74641B8EAD691A490CFACE3932BAD9C4006F2E67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/34352e3138342e3138362e302f32342d3234203d3e20323639333338.roa
Signing time:             Sat 13 Apr 2024 16:16:00 +0000
ROA not before:           Sat 13 Apr 2024 16:11:00 +0000
ROA not after:            Sat 12 Apr 2025 16:16:00 +0000
asID:                     269338
IP address blocks:        45.184.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/74641B8EAD691A490CFACE3932BAD9C4006F2E67.crl
                          rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/74641B8EAD691A490CFACE3932BAD9C4006F2E67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74641B8EAD691A490CFACE3932BAD9C4006F2E67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ac:c6:93:1e:f9:4c:b2:da:20:9d:3a:9d:a8:f2:36:83:8b:ae:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74641B8EAD691A490CFACE3932BAD9C4006F2E67
        Validity
            Not Before: Apr 13 16:11:00 2024 GMT
            Not After : Apr 12 16:16:00 2025 GMT
        Subject: CN=BCAE23C5231C289134B15C86F8242147DB93F7B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:33:44:bf:2d:90:19:f0:36:79:08:ad:c9:
                    b9:75:59:61:91:84:1a:64:4e:b6:e9:80:b6:a8:81:
                    48:a8:4e:f1:61:23:91:f2:93:20:fb:2a:b5:eb:3c:
                    b9:88:48:00:1a:99:25:e5:86:fd:77:14:2d:b8:9e:
                    41:96:5e:16:cc:b1:09:c6:78:d7:a3:95:eb:94:4e:
                    25:54:99:ab:85:2c:6d:6d:45:49:1c:c3:8b:f5:94:
                    ba:46:fa:5b:ea:0f:b9:1b:fc:11:f2:a4:32:5b:b6:
                    f0:b9:42:80:5d:d0:54:a2:94:13:3b:b6:c4:83:e0:
                    6f:c3:35:80:32:ad:05:67:44:65:3c:c9:5f:17:aa:
                    a7:d7:ba:69:38:54:05:d3:11:1c:75:20:24:9e:49:
                    26:80:e6:a9:73:11:de:91:40:81:1b:0d:09:88:b5:
                    bb:20:30:0a:9e:f5:10:e5:4f:13:f6:a7:cf:db:84:
                    d9:53:a4:a8:a4:9a:f4:a1:e9:f6:78:49:fa:c2:0b:
                    21:d8:1a:bb:58:03:12:aa:0c:65:e3:5f:3e:03:2f:
                    0d:6a:85:86:2c:a2:42:d0:b9:be:a4:57:8e:91:6e:
                    2c:00:de:fc:33:8e:10:8b:1f:77:93:16:63:18:27:
                    1f:58:71:f5:4e:e6:80:a9:13:c7:32:29:3a:47:bb:
                    eb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AE:23:C5:23:1C:28:91:34:B1:5C:86:F8:24:21:47:DB:93:F7:B3
            X509v3 Authority Key Identifier:
                keyid:74:64:1B:8E:AD:69:1A:49:0C:FA:CE:39:32:BA:D9:C4:00:6F:2E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/74641B8EAD691A490CFACE3932BAD9C4006F2E67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74641B8EAD691A490CFACE3932BAD9C4006F2E67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/34352e3138342e3138362e302f32342d3234203d3e20323639333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:df:03:23:2a:78:24:c0:ee:9f:88:e1:b3:4c:22:be:62:ff:
         1b:ec:32:69:4d:34:fd:58:46:fe:a9:4f:76:65:e1:d5:26:12:
         0d:a6:b2:be:b0:9f:75:bf:36:12:79:63:a2:cd:ba:3f:fa:82:
         85:53:de:21:3c:fb:d5:b5:f8:8e:e1:29:d9:ec:07:65:3a:08:
         c5:3d:54:5d:84:43:48:18:b4:0d:d7:84:ff:8e:9a:10:fb:dd:
         62:6e:0c:d9:b0:23:60:1e:94:02:31:6f:a0:bd:bb:8c:9a:d1:
         04:64:c2:6d:84:61:68:8a:47:90:fa:9b:84:be:67:82:17:03:
         db:55:30:e3:0c:6f:4d:67:dd:42:1b:7e:08:2e:9f:ab:6e:dd:
         be:dc:89:1d:83:c2:67:89:12:55:ca:8c:a8:af:68:97:6c:f8:
         d1:23:6f:3f:54:81:fc:91:3c:89:8a:2c:17:24:46:ea:9f:58:
         47:9a:1b:16:27:1f:fb:a4:6b:44:bc:32:5c:03:6b:53:3b:9c:
         ae:a1:2b:55:e4:8b:91:86:0f:bb:31:1a:7a:5a:88:08:c8:35:
         5a:d6:35:8d:a2:0f:94:92:b8:26:4b:93:0a:c0:91:46:bc:02:
         eb:1c:b3:d8:5d:be:be:03:d1:09:11:bc:53:dc:54:bb:c4:86:
         84:c2:e4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:17 2024 by rpki-client on console-ams.rpki-client.org