Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/34352e3138342e3138372e302f32342d3234203d3e20323639333338.roa
File:                     34352e3138342e3138372e302f32342d3234203d3e20323639333338.roa (raw, json)
Hash identifier:          DzOlnYXxzYMWEChyavWKNz8ti9s9+vDy2sI2IrtjcnI=
Subject key identifier:   A2:ED:D6:A5:2E:BD:B2:73:8C:E1:80:F4:35:2E:E2:F5:7F:E0:73:CD
Certificate issuer:       /CN=74641B8EAD691A490CFACE3932BAD9C4006F2E67
Certificate serial:       5581338DA4185EB4D115F8472DE9A65241CA0958
Authority key identifier: 74:64:1B:8E:AD:69:1A:49:0C:FA:CE:39:32:BA:D9:C4:00:6F:2E:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74641B8EAD691A490CFACE3932BAD9C4006F2E67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/34352e3138342e3138372e302f32342d3234203d3e20323639333338.roa
Signing time:             Sat 13 Apr 2024 16:16:04 +0000
ROA not before:           Sat 13 Apr 2024 16:11:04 +0000
ROA not after:            Sat 12 Apr 2025 16:16:04 +0000
asID:                     269338
IP address blocks:        45.184.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/74641B8EAD691A490CFACE3932BAD9C4006F2E67.crl
                          rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/74641B8EAD691A490CFACE3932BAD9C4006F2E67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74641B8EAD691A490CFACE3932BAD9C4006F2E67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:81:33:8d:a4:18:5e:b4:d1:15:f8:47:2d:e9:a6:52:41:ca:09:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74641B8EAD691A490CFACE3932BAD9C4006F2E67
        Validity
            Not Before: Apr 13 16:11:04 2024 GMT
            Not After : Apr 12 16:16:04 2025 GMT
        Subject: CN=A2EDD6A52EBDB2738CE180F4352EE2F57FE073CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:e5:1d:b8:f5:f7:0a:9c:cd:9e:70:ff:a9:
                    37:f8:ab:9c:4a:ac:36:55:d6:69:5d:0e:b2:80:c7:
                    fa:c0:fa:c9:63:11:d9:92:46:a0:29:81:a5:ff:b9:
                    1d:1f:58:4a:52:7c:c8:7b:15:80:8e:06:37:dd:9d:
                    1f:4a:2a:9a:d7:4f:d8:b1:4c:c7:58:6d:49:1d:22:
                    cf:94:fe:80:22:d9:42:41:18:cd:c0:d2:bb:31:99:
                    0b:95:ae:bd:cc:b5:d0:8a:e4:24:8e:14:08:9c:d5:
                    c3:6f:90:a3:38:8e:a4:10:7f:ec:13:a3:29:05:06:
                    24:f5:8b:7d:0c:30:fc:31:c5:cb:f5:3d:ed:32:ef:
                    2d:95:49:e3:cb:c5:9a:5f:64:2f:20:c3:13:46:09:
                    7f:36:ef:72:52:6d:17:67:14:c0:29:89:79:11:ba:
                    0a:5c:b6:95:11:ff:15:7f:11:d3:6e:f1:73:b4:ea:
                    29:52:9a:aa:9e:90:f4:b6:49:33:39:9d:39:4e:d1:
                    f9:15:44:b2:01:f0:44:42:bf:2c:cb:9c:3c:96:24:
                    5c:e7:51:7a:7f:fa:54:a5:38:f0:f1:b7:ae:54:f9:
                    c9:ae:23:23:02:6f:11:d4:c9:e6:56:82:8e:f7:6f:
                    d8:97:3c:7c:42:b4:a0:41:49:b7:bc:6d:64:55:60:
                    ae:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:ED:D6:A5:2E:BD:B2:73:8C:E1:80:F4:35:2E:E2:F5:7F:E0:73:CD
            X509v3 Authority Key Identifier:
                keyid:74:64:1B:8E:AD:69:1A:49:0C:FA:CE:39:32:BA:D9:C4:00:6F:2E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/74641B8EAD691A490CFACE3932BAD9C4006F2E67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74641B8EAD691A490CFACE3932BAD9C4006F2E67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/0/34352e3138342e3138372e302f32342d3234203d3e20323639333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:c8:ba:99:64:54:5b:a0:f6:0d:da:2a:6a:f4:59:0e:c9:26:
         85:ec:28:d0:c4:82:c9:17:f0:2b:73:a7:63:59:2c:9d:56:8d:
         59:51:ef:4e:f4:cd:1d:2b:d9:2f:1b:db:59:9d:2a:f7:ee:9a:
         fd:6b:78:2f:41:ce:6d:5b:79:c2:08:84:d8:a6:5c:fd:3a:7b:
         8c:d7:ff:d1:72:c9:bd:e7:52:1d:e5:bd:fb:c4:82:e2:ff:99:
         be:4b:d7:6f:ac:81:b4:86:17:af:96:73:88:c1:17:75:59:96:
         8d:4b:b5:00:5c:c3:8a:5f:68:07:02:bf:db:f3:be:96:6f:7d:
         a0:44:88:1b:86:be:72:e6:fa:f8:d6:7c:ff:74:8c:0f:bb:ea:
         b7:51:f9:7f:ed:34:88:5d:54:b5:7d:9c:4f:d8:05:0c:c1:22:
         b5:d6:95:c8:8d:d9:9a:f3:f1:db:75:7c:97:24:d7:15:f7:55:
         03:fc:b8:ec:1d:d6:30:88:68:cd:83:d1:cb:7a:3b:54:99:be:
         3b:23:2f:08:0f:a9:53:da:bd:08:59:cb:bc:5e:c0:fa:fe:a2:
         0d:41:a3:90:20:fa:ad:a1:c8:21:22:1a:55:e8:2b:49:ba:a0:
         fe:2b:6c:b7:75:46:76:38:26:81:21:8a:6d:d2:57:26:87:11:
         54:6f:64:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:17 2024 by rpki-client on console-ams.rpki-client.org