Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa
File:                     34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa (raw, json)
Hash identifier:          YHmkzZilqCHWmV0g83jQocPTuzwYwwMp4eGYJS+Jtd8=
Subject key identifier:   19:9E:8F:B1:9D:99:73:67:E5:B0:F9:E4:A6:FC:FE:02:DB:EC:A0:51
Certificate issuer:       /CN=8D7DCCD29109454497F31238029B042DB589C3D6
Certificate serial:       3E91D266225DD13ADD22A9D2E3BCA9F96324C63D
Authority key identifier: 8D:7D:CC:D2:91:09:45:44:97:F3:12:38:02:9B:04:2D:B5:89:C3:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D7DCCD29109454497F31238029B042DB589C3D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa
Signing time:             Thu 07 Nov 2024 13:08:50 +0000
ROA not before:           Thu 07 Nov 2024 13:03:50 +0000
ROA not after:            Thu 06 Nov 2025 13:08:50 +0000
asID:                     269671
IP address blocks:        45.191.124.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/8D7DCCD29109454497F31238029B042DB589C3D6.crl
                          rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/8D7DCCD29109454497F31238029B042DB589C3D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D7DCCD29109454497F31238029B042DB589C3D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:91:d2:66:22:5d:d1:3a:dd:22:a9:d2:e3:bc:a9:f9:63:24:c6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D7DCCD29109454497F31238029B042DB589C3D6
        Validity
            Not Before: Nov  7 13:03:50 2024 GMT
            Not After : Nov  6 13:08:50 2025 GMT
        Subject: CN=199E8FB19D997367E5B0F9E4A6FCFE02DBECA051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:d8:82:36:2e:0e:fe:af:aa:bd:12:46:08:
                    b2:f7:ca:a9:d1:fb:15:06:9d:5b:b6:c6:01:e8:55:
                    a3:7e:36:9e:d0:58:c5:95:bc:96:6a:c8:a1:7c:c8:
                    f4:38:76:d5:82:8f:dd:7e:39:02:45:95:b7:f7:70:
                    b0:d4:5f:99:aa:33:7f:df:63:1a:4c:c9:60:8b:34:
                    c5:60:09:ab:bc:d0:ed:4f:39:b4:75:70:c3:25:ef:
                    b2:50:e5:26:8b:4f:b0:06:a1:01:c5:a1:40:0f:c1:
                    1f:25:bb:29:9e:38:dd:f1:43:09:fb:e5:9d:bb:c6:
                    40:7e:51:f3:69:96:bd:d8:53:28:61:64:63:fb:92:
                    04:75:6a:a0:13:d7:dd:c4:b2:02:ea:82:61:3a:89:
                    be:3f:26:8d:6e:30:5c:cc:ad:eb:83:9e:81:6d:1b:
                    6c:83:37:63:c3:69:bc:7b:4e:0c:bb:c6:e6:62:8a:
                    d8:4b:da:af:95:43:bf:1e:c4:91:a2:3b:fd:9f:08:
                    6a:1d:57:e3:4e:df:77:32:f5:e8:17:3e:9c:48:54:
                    0e:ad:c6:cd:ec:14:8f:37:50:d3:25:b1:64:ac:13:
                    a1:39:2f:74:95:0d:dc:68:37:5e:db:b4:1d:98:b3:
                    7e:1b:22:48:24:00:80:4f:0d:18:73:f7:2b:ce:98:
                    9d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9E:8F:B1:9D:99:73:67:E5:B0:F9:E4:A6:FC:FE:02:DB:EC:A0:51
            X509v3 Authority Key Identifier:
                keyid:8D:7D:CC:D2:91:09:45:44:97:F3:12:38:02:9B:04:2D:B5:89:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/8D7DCCD29109454497F31238029B042DB589C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D7DCCD29109454497F31238029B042DB589C3D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:6d:2d:69:50:d9:92:7c:e1:ba:9c:85:9d:b1:d9:81:5f:c7:
         64:29:90:5a:1b:f7:61:35:e2:55:b9:cf:3a:61:36:c9:2d:8d:
         c8:ea:12:08:58:17:3d:04:85:7e:6c:12:08:bd:5a:2f:42:1e:
         ad:17:0f:02:2c:ac:e8:98:88:b9:c0:c5:50:fb:d8:d4:76:ea:
         85:3c:8a:ef:80:af:d6:ec:ab:bc:44:ef:03:cd:63:a3:50:47:
         83:24:72:61:04:62:59:6f:45:2e:d5:d2:53:5f:06:af:93:25:
         41:0c:99:8e:29:aa:b4:af:7d:24:a9:fb:44:d5:d6:f7:4c:4c:
         c3:8e:88:83:77:a2:c4:5e:37:92:11:89:15:4b:f5:b1:61:75:
         d9:fe:5a:c8:71:00:de:d3:3f:fc:d2:7a:20:e7:c9:5e:08:d8:
         8b:ed:4c:72:d9:41:10:f1:fa:d2:67:e9:4b:14:da:72:53:7a:
         82:c8:e6:f3:bd:33:22:ba:ea:ca:ff:e3:3e:ab:27:7a:49:a2:
         c5:d9:a8:81:f9:a8:95:3a:b7:7a:02:7f:28:fa:e1:ce:54:f3:
         34:27:5e:13:e6:65:87:72:4f:81:c0:98:98:73:c1:44:e2:5f:
         d5:2a:28:3c:5a:10:b0:f6:7a:eb:33:03:aa:90:7b:52:70:a8:
         c7:8f:80:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:23 2024 by rpki-client on console-fra.rpki-client.org