Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/1/34352e3232382e31332e302f32342d3234203d3e20323636353833.roa
File:                     34352e3232382e31332e302f32342d3234203d3e20323636353833.roa (raw, json)
Hash identifier:          T+4f1sp3onZFajfGvsMF6R7jPeSJBwj2/TME6ZoV1mU=
Subject key identifier:   54:E7:9D:1F:AD:39:B8:88:34:16:A9:9B:B5:0E:24:74:13:C7:4D:4D
Certificate issuer:       /CN=18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5
Certificate serial:       30404291A353EF1E0E31CD8A8241A137C8C3D732
Authority key identifier: 18:C7:AE:0E:5E:CF:5E:5F:44:B8:24:90:8A:FB:21:AC:F1:30:53:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/1/34352e3232382e31332e302f32342d3234203d3e20323636353833.roa
Signing time:             Wed 03 Apr 2024 22:55:31 +0000
ROA not before:           Wed 03 Apr 2024 22:50:31 +0000
ROA not after:            Wed 02 Apr 2025 22:55:31 +0000
asID:                     266583
IP address blocks:        45.228.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/1/18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5.crl
                          rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/1/18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:40:42:91:a3:53:ef:1e:0e:31:cd:8a:82:41:a1:37:c8:c3:d7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5
        Validity
            Not Before: Apr  3 22:50:31 2024 GMT
            Not After : Apr  2 22:55:31 2025 GMT
        Subject: CN=54E79D1FAD39B8883416A99BB50E247413C74D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:c1:08:09:c1:58:68:42:18:8d:8c:04:b7:
                    ba:e5:9a:d1:24:60:a1:1f:a4:97:f3:8b:5b:10:4d:
                    4f:b7:94:2f:44:e6:bd:f7:a0:44:40:7f:d3:58:78:
                    bd:af:16:5c:ce:9b:4a:06:0b:b0:02:32:e1:13:ea:
                    7a:8a:64:49:39:0b:09:c9:7c:81:4c:90:06:6b:ba:
                    ae:83:5b:69:16:84:73:77:08:92:11:2e:48:d9:f8:
                    28:13:69:60:e3:cb:1b:f1:92:20:4d:1d:98:18:d1:
                    ad:2c:fa:a0:ed:24:37:7f:47:9d:26:70:b2:9c:1d:
                    85:4d:b6:d1:c0:e7:2c:51:be:73:5f:40:41:d3:07:
                    a6:55:d2:44:0a:79:a6:e2:63:d3:e1:5e:f1:82:46:
                    cb:7e:85:fc:e9:fd:c7:b6:ac:4d:0f:65:7d:0e:e4:
                    59:8d:10:3e:2c:af:df:08:83:d2:61:0b:30:5d:b2:
                    43:de:36:b5:f5:aa:46:49:3f:88:53:4d:d1:95:de:
                    a7:3e:f0:5f:16:10:b9:58:f7:0d:91:1e:be:15:27:
                    39:8a:d7:e2:82:77:44:d1:5f:c9:d6:6e:e3:b5:ab:
                    16:46:2c:43:76:24:f5:23:4c:45:9e:f4:a0:18:11:
                    8b:d0:b4:0a:72:75:4b:f5:84:2a:15:e8:70:0b:0b:
                    76:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E7:9D:1F:AD:39:B8:88:34:16:A9:9B:B5:0E:24:74:13:C7:4D:4D
            X509v3 Authority Key Identifier:
                keyid:18:C7:AE:0E:5E:CF:5E:5F:44:B8:24:90:8A:FB:21:AC:F1:30:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/1/18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18C7AE0E5ECF5E5F44B824908AFB21ACF13053D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/1/34352e3232382e31332e302f32342d3234203d3e20323636353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:21:de:62:a9:de:ea:bb:4c:03:dc:aa:13:96:31:f7:a1:65:
         00:97:e4:f2:4d:74:f1:76:e2:8e:8c:c1:37:c8:09:01:23:bf:
         c1:84:d4:99:0e:31:7a:21:41:ea:5d:b9:c6:65:64:43:18:ef:
         62:70:99:4e:d9:87:5a:c3:00:6b:00:44:b8:ff:ca:0e:0d:89:
         eb:9f:66:e1:6e:92:fc:86:d9:21:4e:37:67:3f:7b:98:57:87:
         a5:91:d3:58:02:2d:a6:fe:d2:fe:9f:db:5c:73:af:1f:d7:73:
         a8:8a:39:79:13:9b:d0:57:af:2d:b4:8b:05:eb:ad:92:bb:ce:
         05:d2:5d:a8:9b:63:88:ef:f4:41:38:2f:f8:b3:4a:7d:e4:63:
         aa:9e:dc:13:79:aa:4b:e4:67:c3:e1:6e:a6:ab:a4:21:f7:90:
         88:d5:53:cb:70:dc:24:fa:6b:ac:0d:a2:0f:62:b8:51:35:b7:
         8d:ce:67:e7:89:2c:77:7a:98:c7:10:f1:31:d1:1f:44:fc:e4:
         61:9b:e4:7d:66:7e:aa:46:b4:8b:c6:4c:f2:8f:2a:dc:f1:8e:
         b5:9d:96:91:54:5c:84:e3:ce:f1:a4:db:fa:a6:bc:d1:9a:ac:
         ad:9e:cf:6f:9a:5e:85:31:33:66:56:0a:4a:46:71:6d:2d:3a:
         8e:35:3d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:15:22 2024 by rpki-client on console-fra.rpki-client.org