Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/1/34352e3138372e3136342e302f32322d3234203d3e20323636343335.roa
File:                     34352e3138372e3136342e302f32322d3234203d3e20323636343335.roa (raw, json)
Hash identifier:          5nTu9NWqd+J+RWEVAcz+l2fUvgPvaaykxoiBwkOHSdI=
Subject key identifier:   A4:61:F3:B5:C8:9E:20:D4:2A:B1:7D:3D:1E:D1:41:FF:44:2C:DB:DC
Certificate issuer:       /CN=409869FE48EE7DF53C68EF5B513E0ADA7977FF53
Certificate serial:       7AB26E82E31217429984F3ED8CB0E4BF7301D069
Authority key identifier: 40:98:69:FE:48:EE:7D:F5:3C:68:EF:5B:51:3E:0A:DA:79:77:FF:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/409869FE48EE7DF53C68EF5B513E0ADA7977FF53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/1/34352e3138372e3136342e302f32322d3234203d3e20323636343335.roa
Signing time:             Mon 15 Apr 2024 17:24:22 +0000
ROA not before:           Mon 15 Apr 2024 17:19:22 +0000
ROA not after:            Mon 14 Apr 2025 17:24:22 +0000
asID:                     266435
IP address blocks:        45.187.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/1/409869FE48EE7DF53C68EF5B513E0ADA7977FF53.crl
                          rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/1/409869FE48EE7DF53C68EF5B513E0ADA7977FF53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/409869FE48EE7DF53C68EF5B513E0ADA7977FF53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b2:6e:82:e3:12:17:42:99:84:f3:ed:8c:b0:e4:bf:73:01:d0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409869FE48EE7DF53C68EF5B513E0ADA7977FF53
        Validity
            Not Before: Apr 15 17:19:22 2024 GMT
            Not After : Apr 14 17:24:22 2025 GMT
        Subject: CN=A461F3B5C89E20D42AB17D3D1ED141FF442CDBDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:18:a0:30:c7:d8:ae:74:5e:9e:89:35:3a:98:
                    d5:a9:ea:bd:1f:8a:49:37:4a:43:e7:4c:b5:a3:ac:
                    96:77:b9:be:de:91:a4:08:e7:37:8a:9f:dc:05:a0:
                    2a:f2:98:94:3d:e8:50:7e:15:ff:1a:40:d0:3a:94:
                    ed:25:a2:01:c9:03:b3:2f:3b:e3:99:9d:77:57:e9:
                    2b:c6:31:ae:54:17:ef:df:9b:cd:97:9e:52:22:5c:
                    eb:3d:c0:84:4f:c5:b8:d6:ba:bd:66:0a:0d:d5:c6:
                    9c:5f:97:14:46:cf:91:fd:30:4e:61:45:b3:59:ad:
                    5d:4d:56:ef:3a:93:d7:f2:7d:65:b8:6d:3b:e8:e9:
                    ec:d0:5e:51:48:cf:3c:e4:da:e7:64:7d:43:82:79:
                    6e:10:be:a9:06:3c:23:67:6c:73:1c:b6:29:4a:99:
                    16:64:76:28:f2:9a:f0:43:31:85:98:ef:b3:ce:ba:
                    0b:d0:38:02:d1:82:de:dc:36:98:e2:c1:8b:39:d2:
                    b6:13:cd:42:b4:f9:82:3a:9b:04:fe:2e:52:da:8f:
                    a8:96:96:fd:fc:4b:66:7c:50:bb:12:37:84:24:d2:
                    04:c5:fb:0f:19:5c:9b:b5:29:3a:38:96:e4:d0:01:
                    89:46:d0:a1:30:ee:55:24:f6:d0:03:58:06:8a:b3:
                    e6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:61:F3:B5:C8:9E:20:D4:2A:B1:7D:3D:1E:D1:41:FF:44:2C:DB:DC
            X509v3 Authority Key Identifier:
                keyid:40:98:69:FE:48:EE:7D:F5:3C:68:EF:5B:51:3E:0A:DA:79:77:FF:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/1/409869FE48EE7DF53C68EF5B513E0ADA7977FF53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/409869FE48EE7DF53C68EF5B513E0ADA7977FF53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/1/34352e3138372e3136342e302f32322d3234203d3e20323636343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:7e:58:68:62:da:2c:c6:e3:5d:ca:76:26:b4:3e:f1:ff:
         63:59:60:10:a6:b7:08:8f:e5:18:29:44:31:0b:af:3d:cd:c0:
         ee:a8:5a:4a:25:da:39:4d:bf:32:44:c7:c0:49:d7:14:96:95:
         6b:80:f4:f0:0a:f3:be:ea:69:bc:d7:4c:9c:5c:a6:29:7c:c0:
         70:8f:ca:ab:ba:86:16:a2:84:1a:31:9d:ed:3e:ff:2a:15:9b:
         a8:3f:6e:22:3d:f7:d6:d4:75:b0:31:88:ee:62:0d:3a:b4:2b:
         ab:70:69:91:c2:42:b9:71:ac:ce:04:1d:5b:07:a1:59:23:f4:
         5a:54:61:62:35:dc:0c:a0:e0:c0:03:57:eb:e3:e8:ae:32:32:
         4e:d4:b1:53:b0:b6:17:8a:eb:5b:13:b2:34:6c:1f:21:78:a3:
         b5:a2:53:46:62:3d:13:b1:00:ae:e0:8c:73:36:5d:b4:33:bf:
         8e:8d:81:4f:82:d2:eb:68:ea:5e:38:0e:06:9d:40:98:aa:eb:
         b6:fe:cf:08:d4:61:30:12:11:95:61:df:8d:2e:e9:b8:25:97:
         37:8b:78:42:8a:80:4c:73:f1:47:e7:53:ea:0b:c7:46:a4:d7:
         e8:98:2a:b4:69:ca:ba:ad:3f:55:ff:77:d9:5d:e9:aa:a1:9a:
         60:e8:c6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:56 2024 by rpki-client on console-fra.rpki-client.org