Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/34352e3137392e302e302f32322d3234203d3e20323639313132.roa
File:                     34352e3137392e302e302f32322d3234203d3e20323639313132.roa (raw, json)
Hash identifier:          +CNEOzlPQzDvIPDLtlMtPR8k8E/rVEBgoiM5xwAHsYI=
Subject key identifier:   BA:CD:C5:2E:4B:7A:AE:F3:8F:1B:1E:FF:7B:E9:DF:6F:00:01:E6:A2
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       0B8B1EEB4CF5B56AD6F5E9FBBC85FFFFFDEBB07C
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/34352e3137392e302e302f32322d3234203d3e20323639313132.roa
Signing time:             Mon 08 Jul 2024 19:43:05 +0000
ROA not before:           Mon 08 Jul 2024 19:38:05 +0000
ROA not after:            Mon 07 Jul 2025 19:43:05 +0000
asID:                     269112
IP address blocks:        45.179.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8b:1e:eb:4c:f5:b5:6a:d6:f5:e9:fb:bc:85:ff:ff:fd:eb:b0:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:05 2024 GMT
            Not After : Jul  7 19:43:05 2025 GMT
        Subject: CN=BACDC52E4B7AAEF38F1B1EFF7BE9DF6F0001E6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:1f:e0:09:87:09:ed:d6:2c:a1:3b:ed:e4:
                    b2:25:59:a3:80:f7:83:af:7f:87:20:ab:28:80:75:
                    b9:69:f0:ab:9a:8b:c7:03:57:1c:4d:c0:42:ef:7c:
                    19:5e:5d:d6:29:1b:ff:a1:32:5c:84:45:05:f4:39:
                    8d:c0:b5:6b:2b:b7:54:1e:e6:99:e1:af:66:60:9c:
                    d5:91:ae:50:0e:48:fa:20:63:9e:0d:e1:6f:98:f0:
                    f0:20:63:67:1c:30:4c:e0:4e:9e:b6:ba:0f:6c:7b:
                    a0:db:72:dc:dd:9d:01:f7:c0:c3:f2:c3:1c:fc:49:
                    50:81:03:3f:26:de:7b:5d:b5:d2:11:05:e3:c1:8c:
                    cc:fa:46:29:63:fe:e7:51:3f:00:0b:a8:13:a3:bd:
                    f1:be:00:69:31:f2:4a:56:68:0e:d7:e1:6e:3e:62:
                    97:be:99:c1:fc:a8:bc:d8:65:94:97:92:95:4b:25:
                    53:5b:72:10:ab:e0:09:1c:61:47:92:f7:5d:43:88:
                    64:c6:d0:ff:90:d6:ad:6b:4c:c6:58:e5:9b:54:24:
                    e9:61:a4:df:a8:d5:bc:f2:d3:59:5e:85:2b:ca:cb:
                    3a:e1:60:a0:b1:d3:e1:7a:e3:8b:45:e9:91:15:d9:
                    fb:34:c5:d7:9b:7c:6f:56:a1:65:b3:05:01:79:76:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CD:C5:2E:4B:7A:AE:F3:8F:1B:1E:FF:7B:E9:DF:6F:00:01:E6:A2
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/34352e3137392e302e302f32322d3234203d3e20323639313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d6:a6:f5:c8:5d:83:7e:a5:0a:c7:b7:66:71:05:9d:3a:74:6a:
         9f:53:da:f7:22:04:f2:b6:5b:c1:42:65:75:7c:0f:c6:45:a4:
         19:98:84:be:06:19:e7:88:de:97:6d:a6:5f:2d:2e:64:e7:d5:
         9f:59:32:a0:ca:0b:60:35:87:de:58:ad:a4:52:47:82:fd:8a:
         71:03:9c:62:81:8b:2a:00:92:e7:e4:8c:92:83:9d:bb:d4:a1:
         b0:84:ef:8a:63:ae:99:dc:f7:d5:de:a6:4a:1b:dc:76:99:c8:
         ea:cd:8e:38:87:dc:23:5e:e5:89:98:51:f7:8c:1e:3e:2d:44:
         47:63:71:68:0e:06:43:1f:5a:80:af:e4:34:e1:f6:72:9c:fb:
         86:50:1c:cf:f7:ef:48:b2:09:0b:4a:46:a8:54:d5:c3:c8:b8:
         29:55:b4:7c:13:1c:e9:09:aa:1d:24:35:9d:62:7e:32:42:68:
         26:ac:65:a0:55:ca:2d:9b:04:d5:65:84:42:4a:de:d5:01:97:
         43:64:bc:0c:bc:9b:8a:b2:12:c4:0f:51:6a:02:2b:14:27:79:
         d7:49:e0:5c:2b:e7:75:02:8e:4d:cc:22:6d:94:a8:cc:bc:a7:
         c3:73:f4:d0:b4:f6:f6:ad:7e:55:af:11:66:20:29:77:4b:88:
         aa:65:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:55 2024 by rpki-client on console-fra.rpki-client.org