Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/34352e3138332e3131322e302f32322d3234203d3e20323639323836.roa
File:                     34352e3138332e3131322e302f32322d3234203d3e20323639323836.roa (raw, json)
Hash identifier:          VSmXtnZ/YxaCg3StzmXQ1j1Kak9fw951H7AECUjNZHE=
Subject key identifier:   FC:26:A4:5A:91:33:5A:4D:03:FD:99:F2:81:B2:E0:66:7A:EF:62:01
Certificate issuer:       /CN=98EA20A009301C2358E08E395002F34F079AC9D0
Certificate serial:       310E4B52EB85A6E5BB2017D2D044BE91678F9B37
Authority key identifier: 98:EA:20:A0:09:30:1C:23:58:E0:8E:39:50:02:F3:4F:07:9A:C9:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98EA20A009301C2358E08E395002F34F079AC9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/34352e3138332e3131322e302f32322d3234203d3e20323639323836.roa
Signing time:             Thu 04 Apr 2024 01:06:07 +0000
ROA not before:           Thu 04 Apr 2024 01:01:07 +0000
ROA not after:            Thu 03 Apr 2025 01:06:07 +0000
asID:                     269286
IP address blocks:        45.183.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.crl
                          rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98EA20A009301C2358E08E395002F34F079AC9D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:56:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0e:4b:52:eb:85:a6:e5:bb:20:17:d2:d0:44:be:91:67:8f:9b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98EA20A009301C2358E08E395002F34F079AC9D0
        Validity
            Not Before: Apr  4 01:01:07 2024 GMT
            Not After : Apr  3 01:06:07 2025 GMT
        Subject: CN=FC26A45A91335A4D03FD99F281B2E0667AEF6201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b1:67:74:5b:0c:bb:81:ae:00:88:bc:d7:15:
                    90:83:8e:39:90:4b:4a:7f:e6:50:e6:dd:92:81:95:
                    1c:26:06:80:a3:ed:d1:92:7b:b8:d3:35:b2:ad:50:
                    c9:e4:74:5f:2b:ed:f4:2a:5b:34:7e:e3:78:0e:39:
                    da:b7:cc:87:ad:14:93:78:43:61:bc:d8:74:4e:a4:
                    0b:6a:cd:59:2c:22:09:da:ba:b2:0b:74:bc:c1:68:
                    d8:4a:82:80:a4:25:af:74:79:c6:ae:ad:89:07:e5:
                    85:68:ff:0c:9a:00:59:4d:95:eb:7a:95:3e:1f:69:
                    1c:de:6a:ad:6b:19:d3:23:ee:9b:a3:c5:31:48:cd:
                    59:90:fb:82:1d:48:d5:59:f6:bb:1a:2b:58:58:ed:
                    98:fc:d0:9c:a2:1f:73:be:44:c5:4d:9d:e5:1d:52:
                    9c:84:46:99:03:44:67:af:57:e1:d5:66:4b:7b:f4:
                    35:75:7f:f2:f8:bc:5a:28:c3:80:7b:4e:ce:17:bd:
                    fb:c6:38:ff:f9:fd:52:23:1f:38:d5:86:41:7d:c2:
                    55:c3:0c:25:61:ee:62:00:40:bc:c7:3c:3b:31:01:
                    f8:70:92:1c:6a:19:9d:62:3a:c9:9b:c2:02:6f:16:
                    82:4d:f9:e1:e4:1c:0b:2b:b2:9e:0e:1b:3e:f1:d5:
                    f3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:26:A4:5A:91:33:5A:4D:03:FD:99:F2:81:B2:E0:66:7A:EF:62:01
            X509v3 Authority Key Identifier:
                keyid:98:EA:20:A0:09:30:1C:23:58:E0:8E:39:50:02:F3:4F:07:9A:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98EA20A009301C2358E08E395002F34F079AC9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/34352e3138332e3131322e302f32322d3234203d3e20323639323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:84:c8:50:08:d9:df:b9:7a:67:92:ec:3a:c8:2d:62:23:88:
         5e:45:1e:93:57:45:a6:3b:9f:c1:b0:aa:94:26:51:79:eb:b2:
         c0:87:dd:7a:6c:55:a5:22:1b:b3:63:c6:86:a7:ee:02:f0:c2:
         8d:10:d1:03:18:f5:92:87:15:a7:81:95:1c:f2:05:9e:a4:03:
         13:7c:3c:01:0e:4d:2d:ad:1b:23:fa:41:a5:dd:1b:c0:35:39:
         66:f3:cc:04:4b:98:16:c5:65:0e:8b:ca:65:f0:d3:ec:35:25:
         a6:07:1e:5f:80:6a:c5:90:7e:c4:8c:2f:c0:37:65:71:5a:ce:
         5c:42:0b:2d:c5:c5:cd:b3:f4:b7:8b:61:25:9f:2c:3c:5b:b8:
         8b:52:30:b5:57:73:cf:39:d2:16:1d:14:d0:0f:3a:4b:fb:41:
         b8:84:22:1d:e0:93:e9:89:a9:75:ec:2b:a0:1f:0f:d8:1f:10:
         fb:fd:ff:02:18:7c:85:6d:95:39:9e:e0:5e:c0:97:46:1c:6d:
         df:79:a6:55:54:53:52:27:08:e9:d0:3c:d1:be:7b:d9:23:e5:
         63:be:e8:c5:2b:f5:07:c7:c8:13:1e:52:ee:df:78:a3:20:d8:
         d7:7e:90:0d:0c:57:3e:35:74:c7:e9:c9:4e:bd:e2:e6:15:a6:
         ec:a1:32:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:16 2024 by rpki-client on console-ams.rpki-client.org