Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e302e302f32322d3232203d3e20323639353032.roa
File:                     34352e3138362e302e302f32322d3232203d3e20323639353032.roa (raw, json)
Hash identifier:          4rFlVYUDpvaD0jSf88pIDp8LaCBiM8CenLz8p7orYuk=
Subject key identifier:   02:19:83:D7:78:87:0C:B6:F2:15:2F:1A:55:9C:E5:AB:5B:8E:B3:02
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       25FE5E3191D46B66936AD612F6FAB00AB1C4E3A7
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e302e302f32322d3232203d3e20323639353032.roa
Signing time:             Sat 25 May 2024 13:12:03 +0000
ROA not before:           Sat 25 May 2024 13:07:03 +0000
ROA not after:            Sat 24 May 2025 13:12:03 +0000
asID:                     269502
IP address blocks:        45.186.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fe:5e:31:91:d4:6b:66:93:6a:d6:12:f6:fa:b0:0a:b1:c4:e3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: May 25 13:07:03 2024 GMT
            Not After : May 24 13:12:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f0:1d:c8:bf:7a:e9:67:1d:5e:a4:d4:16:70:
                    4e:8b:3e:95:eb:99:39:2d:65:d0:10:87:8a:2d:c7:
                    da:eb:ad:69:ff:29:ec:ee:2d:12:f3:c4:dd:99:c2:
                    13:5e:a6:9a:9a:c4:34:99:aa:be:72:2d:29:29:26:
                    ac:be:2b:90:e4:13:87:16:a8:55:df:05:2c:12:60:
                    1e:af:d6:29:66:eb:b9:ee:4b:da:f8:4b:3c:65:08:
                    6c:7e:d2:31:bc:75:a5:a4:e6:9f:fa:d2:54:91:7f:
                    aa:bc:f8:a5:b3:b4:87:53:14:8c:6d:52:2a:6a:1f:
                    5c:36:96:4d:d3:8f:2f:2c:78:aa:78:92:24:5a:22:
                    59:b0:46:70:cc:b9:59:e7:8d:ac:a6:5e:60:f7:d2:
                    86:24:94:b8:11:a7:59:15:2b:d4:63:ab:e1:25:5f:
                    9e:1d:12:65:ab:ee:db:9c:ad:80:82:dc:80:f1:95:
                    3e:ce:62:c8:ae:e3:ac:6f:9c:95:c1:f6:b3:2e:ed:
                    76:b6:96:e4:c8:46:91:29:fa:c4:d1:6c:bc:f7:22:
                    45:dd:14:cf:76:22:2b:6f:c7:00:10:93:ac:38:a6:
                    79:c6:a0:e0:f6:3a:1c:7f:f0:87:03:e8:f5:54:ec:
                    b4:da:df:77:a7:35:60:8f:58:18:60:b6:33:1e:8c:
                    19:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:19:83:D7:78:87:0C:B6:F2:15:2F:1A:55:9C:E5:AB:5B:8E:B3:02
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e302e302f32322d3232203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:19:39:da:7c:ba:4e:24:66:51:3c:26:e3:9b:02:85:56:02:
         f8:16:43:c3:0d:cf:c0:18:dc:51:89:1c:be:93:18:f8:b2:0b:
         fc:5c:69:d0:44:9c:f5:eb:e1:b1:8f:a2:a6:83:d2:d9:92:f6:
         da:1d:a7:66:55:c2:eb:e4:63:b0:0a:a5:cf:36:2e:b9:d2:cd:
         7c:82:3e:b5:6c:97:49:fb:56:1e:d9:06:58:bd:3d:30:ca:59:
         f2:72:d4:c6:7f:7b:36:f8:99:af:eb:be:ea:26:1c:13:8b:e9:
         95:9b:fd:b0:26:37:bf:fe:42:ae:ed:2d:85:79:d5:e6:01:d2:
         89:fa:e7:c3:f4:d0:6d:e0:54:3e:e5:73:a0:8a:a9:4a:c9:fb:
         b6:6a:0f:5d:cc:c0:9a:a4:54:45:61:1f:e1:32:6e:a9:7d:ee:
         5f:54:9a:3b:cc:be:42:09:91:3b:89:27:e0:3c:fc:d6:b7:ee:
         34:d6:92:03:73:b0:ad:d7:a2:d9:15:4a:f2:1f:0a:0c:ec:1e:
         ea:15:99:63:dd:8d:60:5a:db:a5:dd:8d:d3:66:d3:c1:5a:b6:
         9e:aa:64:3c:e0:55:22:08:4f:b7:5a:52:eb:9b:d8:8f:ba:6b:
         96:17:fc:4b:15:c7:5a:3e:ec:74:be:d0:c3:ee:43:cc:b0:a1:
         df:30:cc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:22 2024 by rpki-client on console-fra.rpki-client.org