Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/34352e3139302e3234382e302f32322d3234203d3e20323639363536.roa
File:                     34352e3139302e3234382e302f32322d3234203d3e20323639363536.roa (raw, json)
Hash identifier:          6HG+lIKWIr1+hSykh1q9X7e5FG4dZPIdM8vrYiKwbhU=
Subject key identifier:   C0:4D:FD:B1:8D:D8:91:6B:5C:20:4D:84:CF:27:A5:D2:C7:AB:BD:74
Certificate issuer:       /CN=39ADE53D58805E5FE43277F03B00463702D1142A
Certificate serial:       548472E4F441FE50855F8B9169881C4F1E256C8E
Authority key identifier: 39:AD:E5:3D:58:80:5E:5F:E4:32:77:F0:3B:00:46:37:02:D1:14:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39ADE53D58805E5FE43277F03B00463702D1142A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/34352e3139302e3234382e302f32322d3234203d3e20323639363536.roa
Signing time:             Mon 15 Jul 2024 19:39:00 +0000
ROA not before:           Mon 15 Jul 2024 19:34:00 +0000
ROA not after:            Mon 14 Jul 2025 19:39:00 +0000
asID:                     269656
IP address blocks:        45.190.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/39ADE53D58805E5FE43277F03B00463702D1142A.crl
                          rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/39ADE53D58805E5FE43277F03B00463702D1142A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39ADE53D58805E5FE43277F03B00463702D1142A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 10:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:84:72:e4:f4:41:fe:50:85:5f:8b:91:69:88:1c:4f:1e:25:6c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39ADE53D58805E5FE43277F03B00463702D1142A
        Validity
            Not Before: Jul 15 19:34:00 2024 GMT
            Not After : Jul 14 19:39:00 2025 GMT
        Subject: CN=C04DFDB18DD8916B5C204D84CF27A5D2C7ABBD74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8f:6e:aa:eb:a8:76:7d:68:8e:de:64:d1:2e:
                    41:d3:54:00:52:54:80:b9:44:e7:1a:ac:6d:37:e5:
                    b2:62:7d:95:2f:33:c7:a7:9a:78:54:9a:30:3b:83:
                    3d:ab:7d:be:36:13:79:32:b8:ba:a9:21:2b:e3:04:
                    35:66:55:60:a1:58:2a:c6:f3:50:97:c0:84:71:5f:
                    90:1e:8b:3a:92:77:b2:45:99:4e:78:9a:dc:1a:6c:
                    c4:1d:61:1b:a6:13:df:da:1d:47:4f:22:09:ee:d7:
                    b2:9c:9b:66:94:e8:a0:19:fe:e0:ad:2d:6d:27:9c:
                    3d:8f:ba:f9:c0:20:8e:d8:35:38:b1:c9:f8:f4:1e:
                    dc:88:47:01:91:2b:c8:1d:6d:b7:fa:e8:90:d0:82:
                    f1:ba:57:d1:90:6a:44:13:e8:54:26:e6:96:92:b6:
                    a2:64:7e:bc:be:fc:58:15:ee:7f:7d:47:cf:8b:9c:
                    a7:90:8b:72:fb:52:97:a5:f3:fc:a0:ce:67:f2:a0:
                    0d:e0:10:50:f4:5b:f4:e5:d7:75:e2:91:0f:85:a6:
                    6a:bc:69:90:2c:c8:e5:04:08:ed:c2:7d:72:98:28:
                    4f:0f:9a:78:bd:1b:e5:d3:ff:2d:92:20:f0:b5:34:
                    34:52:ca:72:0a:da:bb:b2:c0:a3:78:c1:55:2a:3c:
                    11:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4D:FD:B1:8D:D8:91:6B:5C:20:4D:84:CF:27:A5:D2:C7:AB:BD:74
            X509v3 Authority Key Identifier:
                keyid:39:AD:E5:3D:58:80:5E:5F:E4:32:77:F0:3B:00:46:37:02:D1:14:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/39ADE53D58805E5FE43277F03B00463702D1142A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39ADE53D58805E5FE43277F03B00463702D1142A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/34352e3139302e3234382e302f32322d3234203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:10:79:f1:d0:9e:e2:3a:f8:ee:d0:77:46:ea:47:f2:25:bc:
         77:ae:05:c7:0d:d9:da:57:70:b4:f1:41:84:bf:eb:c7:f7:17:
         b3:73:9d:95:e1:b6:cd:9f:61:a0:7b:89:32:3f:f9:ca:6e:36:
         6c:3e:44:f7:0d:0b:d7:36:9b:e7:dd:04:8b:e7:1d:13:c8:c0:
         5b:55:6f:af:60:3b:89:25:d9:f4:2d:49:32:ec:5e:14:41:64:
         ba:eb:4c:2d:a2:3a:c7:fd:08:27:c3:0c:fa:a2:e9:4f:73:bd:
         f6:d8:98:63:57:4a:d0:c6:10:dc:30:bc:01:ed:fd:36:92:8b:
         ad:20:b0:b6:07:72:39:96:a2:3d:17:ae:66:08:dc:2c:0f:49:
         7d:bf:48:c7:35:f4:91:34:af:32:4e:8f:af:29:00:68:73:75:
         bc:0d:51:5e:ea:a4:b2:0c:ab:48:6f:83:9c:81:45:9f:a4:2d:
         ca:f0:9d:c7:2e:ca:0d:45:0f:38:e6:2e:11:dd:83:cf:7a:c2:
         6d:8b:c2:af:8a:b8:29:6b:cd:f6:ed:70:b6:c1:5e:c8:b3:35:
         2c:3f:31:64:6f:68:41:c4:23:54:e2:6f:39:77:99:4f:7f:8c:
         ca:c8:e7:f6:01:a5:1b:85:13:e4:aa:2d:b5:0a:72:65:1e:e7:
         1f:b1:d9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 10:38:40 2024 by rpki-client on console-fra.rpki-client.org