Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e302e302f32332d3233203d3e20323639353032.roa
File:                     34352e3138362e302e302f32332d3233203d3e20323639353032.roa (raw, json)
Hash identifier:          3IlvFISpCuItGnS09iR2kMPTOPbUrAehCuhlKbIhttg=
Subject key identifier:   0E:F9:DE:80:C7:A1:16:A5:1E:38:85:C5:8B:78:A4:71:11:FC:3E:06
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       6038AF0601FE0E0E6E12BF1F00B325AAA20DBCF1
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e302e302f32332d3233203d3e20323639353032.roa
Signing time:             Sat 25 May 2024 13:12:04 +0000
ROA not before:           Sat 25 May 2024 13:07:04 +0000
ROA not after:            Sat 24 May 2025 13:12:04 +0000
asID:                     269502
IP address blocks:        45.186.0.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:38:af:06:01:fe:0e:0e:6e:12:bf:1f:00:b3:25:aa:a2:0d:bc:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: May 25 13:07:04 2024 GMT
            Not After : May 24 13:12:04 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:82:e7:61:eb:61:dc:d6:f8:93:96:0d:8d:84:
                    0f:bd:c6:6a:b1:73:5f:98:81:6c:37:5f:ed:12:4c:
                    95:8f:92:d3:1c:c9:1d:fa:e6:9c:e4:ff:a2:f0:4e:
                    5b:cc:3c:ba:f4:b1:b2:7a:00:d7:c4:52:85:49:1a:
                    7e:28:11:91:60:62:26:99:d8:05:fb:42:7a:3d:48:
                    17:c5:b9:7b:9c:02:7d:09:37:78:70:fc:ea:82:3f:
                    57:70:b8:54:de:68:96:04:b9:43:b9:1b:90:97:ff:
                    21:7b:88:f6:d8:70:a4:0a:a6:5d:68:37:b0:f9:39:
                    65:28:8a:e0:be:2d:e1:63:b0:18:59:19:d7:28:1e:
                    cf:c9:00:6c:3b:92:0b:7d:ee:80:36:12:d9:4c:ec:
                    2b:de:8e:0c:8f:6d:76:08:0c:0d:6e:04:d6:b2:08:
                    2f:92:91:07:67:f8:19:4e:de:b9:b5:f3:75:88:62:
                    64:c6:3d:de:23:f2:fe:df:de:2d:ff:24:7e:07:39:
                    a1:d7:73:e8:e5:1d:4a:97:f3:24:60:4f:de:df:2e:
                    68:f3:d8:13:b6:bb:66:1c:07:b3:f4:eb:02:c2:05:
                    16:f9:17:a5:80:68:7a:27:cf:5a:ca:a5:51:0d:03:
                    01:fa:18:d2:e6:d7:3b:c1:46:de:b1:fe:b7:96:92:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F9:DE:80:C7:A1:16:A5:1E:38:85:C5:8B:78:A4:71:11:FC:3E:06
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e302e302f32332d3233203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:bd:f1:d1:22:9e:db:36:c2:34:15:1b:b6:08:8d:08:38:5e:
         bf:a6:69:4f:7d:37:aa:c7:e7:f7:49:37:6f:07:29:b6:36:b3:
         05:aa:e0:7e:aa:bf:ea:62:59:18:d8:01:15:c8:39:ca:04:5b:
         6d:62:4f:4f:81:64:ce:a8:69:fc:ca:dc:d2:72:28:13:50:cf:
         cd:af:21:bf:15:99:40:28:29:d8:4e:e3:27:65:bb:25:9a:a5:
         21:d2:72:b2:5b:4b:41:62:b0:9e:30:98:83:79:67:e8:c0:17:
         57:fd:68:61:02:7b:4f:84:5f:16:4b:2c:c8:5e:7b:9a:7f:96:
         a7:d1:0b:a7:9d:c8:80:d7:ad:44:b4:88:63:06:01:a0:96:b9:
         e7:fc:15:78:91:7f:a3:67:00:5d:db:bc:00:4b:4f:87:74:04:
         ce:23:8d:57:14:95:6c:38:25:64:a6:15:5b:d1:6c:9f:f3:6e:
         95:1a:e9:41:9b:80:5f:6e:c5:32:bf:be:44:3a:d5:2a:33:87:
         96:81:66:0a:f5:69:c3:83:86:33:01:e7:e5:43:db:ed:58:6b:
         71:b0:9c:e4:4c:21:2f:91:08:87:b4:7d:4a:fc:7f:1b:e9:e9:
         0a:74:0f:bb:15:03:db:85:0c:b2:2a:89:d4:c4:00:2b:0d:5d:
         fc:bb:ae:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:20 2024 by rpki-client on console-ams.rpki-client.org