Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/34352e362e3137362e302f32322d3234203d3e20323636313730.roa
File:                     34352e362e3137362e302f32322d3234203d3e20323636313730.roa (raw, json)
Hash identifier:          Zt/Bx4dGpou8v7hQQfeDio9uq2zVM/f1g1tCKtIZLdo=
Subject key identifier:   BD:E1:08:78:BB:3F:BC:56:2C:B5:09:DD:2D:FD:DD:A3:29:FD:80:7B
Certificate issuer:       /CN=5A85B3827E19AAE0B52BB06C21609C54CE16BF8C
Certificate serial:       4EBC2D3FEDF286CB9E77A136A3E2EA3DEAF42A80
Authority key identifier: 5A:85:B3:82:7E:19:AA:E0:B5:2B:B0:6C:21:60:9C:54:CE:16:BF:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/34352e362e3137362e302f32322d3234203d3e20323636313730.roa
Signing time:             Mon 06 May 2024 17:39:10 +0000
ROA not before:           Mon 06 May 2024 17:34:10 +0000
ROA not after:            Mon 05 May 2025 17:39:10 +0000
asID:                     266170
IP address blocks:        45.6.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl
                          rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 22:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:bc:2d:3f:ed:f2:86:cb:9e:77:a1:36:a3:e2:ea:3d:ea:f4:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A85B3827E19AAE0B52BB06C21609C54CE16BF8C
        Validity
            Not Before: May  6 17:34:10 2024 GMT
            Not After : May  5 17:39:10 2025 GMT
        Subject: CN=BDE10878BB3FBC562CB509DD2DFDDDA329FD807B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:2d:a0:b6:1a:58:f7:77:66:8d:90:40:64:
                    c1:05:4d:3d:0a:ed:fb:c4:e1:be:88:3e:b3:f1:de:
                    1e:eb:a4:0f:32:e3:e7:b3:2e:1f:b6:1c:dc:07:dc:
                    d2:41:45:5e:e9:4e:23:48:cd:93:bc:dc:6a:97:ed:
                    ca:cb:c9:a8:32:af:18:26:1d:a7:8c:23:80:6a:00:
                    28:f5:0d:7d:48:15:37:2b:09:59:e1:1b:3d:68:84:
                    09:fb:52:ca:1d:7e:ef:55:f3:a0:2f:22:07:eb:8e:
                    ab:41:93:af:c1:0e:d3:ab:09:11:27:b9:05:5a:6f:
                    c4:d5:54:f1:f2:92:70:1e:d7:6c:3e:4d:9a:58:1d:
                    02:78:2d:6f:35:12:72:43:bc:e5:47:19:e2:10:8a:
                    c2:3d:c1:9d:3a:82:ee:9b:2f:c7:3b:2b:97:44:92:
                    45:ef:6e:4e:96:48:8c:d2:f8:25:c2:d4:ab:e2:e9:
                    06:d3:28:85:28:f8:e5:2d:f6:0c:d5:d5:5c:04:44:
                    33:9b:54:50:87:c6:d5:36:f0:46:46:83:6a:f8:93:
                    0f:e1:24:98:a3:a9:a7:63:44:1e:2b:6c:68:65:75:
                    0f:70:7e:16:07:c4:6a:7c:f9:db:35:6d:fd:23:14:
                    83:a5:f4:a8:03:8a:59:fb:2a:ce:bd:33:ad:d2:25:
                    e3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E1:08:78:BB:3F:BC:56:2C:B5:09:DD:2D:FD:DD:A3:29:FD:80:7B
            X509v3 Authority Key Identifier:
                keyid:5A:85:B3:82:7E:19:AA:E0:B5:2B:B0:6C:21:60:9C:54:CE:16:BF:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/34352e362e3137362e302f32322d3234203d3e20323636313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:31:23:25:a2:b5:3d:46:13:f6:70:56:c2:c5:ee:bd:87:31:
         1c:36:b7:06:cc:e2:8c:04:99:f5:f3:ee:1f:4b:80:5b:45:73:
         e2:5d:f7:ec:6a:94:3e:d2:e5:86:c8:33:48:cb:2d:9f:b7:84:
         91:4a:44:09:c1:6c:c5:1e:71:9e:0a:d2:06:b1:8f:77:0b:1e:
         bd:f3:b6:08:b9:fd:ae:17:6f:16:a0:83:69:76:ff:ce:9c:0c:
         fe:3a:08:81:4a:45:0d:9f:3d:5d:bd:87:90:3e:97:3e:7c:2a:
         83:71:52:4d:6d:e6:c6:b3:8b:99:a7:4c:0e:65:0b:fd:5d:dc:
         80:c7:16:a0:40:47:10:ef:e4:4c:0a:16:8e:b4:a0:9a:c2:73:
         e7:2f:ed:e0:bc:52:51:dc:e0:ba:01:9e:88:9f:d9:a7:4b:4e:
         e1:f5:cf:80:a6:a3:64:72:1b:69:72:4a:ea:96:26:60:8b:da:
         81:da:f6:76:ed:a3:ad:e1:a3:81:9e:68:00:7d:56:6e:a3:83:
         7b:75:c8:2f:f6:d7:97:72:d6:bb:05:5e:ba:5e:20:79:3b:50:
         2f:72:6c:55:3d:95:fc:c7:40:b6:3f:6c:a0:f5:fa:89:7d:81:
         78:68:c1:54:90:b5:46:23:e2:da:73:9b:cc:29:c8:b9:4c:2e:
         31:17:7f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:45 2024 by rpki-client on console-ams.rpki-client.org