Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e302e302f32342d3234203d3e20323639353032.roa
File:                     34352e3138362e302e302f32342d3234203d3e20323639353032.roa (raw, json)
Hash identifier:          1z/ZldoTqsdyOAgBoimim3oGIhw/STko2S8Qp7rpZ4A=
Subject key identifier:   77:A8:AD:D1:7B:D4:D0:59:8B:90:DA:01:14:43:95:EA:4A:F4:98:6E
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       3B0B37C6A4B6F55191B303015CA6CAC675D7788E
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e302e302f32342d3234203d3e20323639353032.roa
Signing time:             Sat 25 May 2024 13:12:03 +0000
ROA not before:           Sat 25 May 2024 13:07:03 +0000
ROA not after:            Sat 24 May 2025 13:12:03 +0000
asID:                     269502
IP address blocks:        45.186.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0b:37:c6:a4:b6:f5:51:91:b3:03:01:5c:a6:ca:c6:75:d7:78:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: May 25 13:07:03 2024 GMT
            Not After : May 24 13:12:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:96:09:8f:1d:0a:d1:52:0b:4c:c2:6a:cf:
                    fc:ff:8a:dd:1f:4f:6e:7b:be:e0:16:98:2c:59:94:
                    71:15:b9:3c:8b:18:fc:40:79:42:22:b3:73:c5:fe:
                    ee:23:4b:05:3a:67:96:37:c9:c0:d8:b0:f2:a1:bf:
                    02:b4:cc:fd:e4:db:3b:c4:c7:6a:b7:f5:1a:74:af:
                    3c:31:ca:88:da:84:1d:f4:f2:e5:87:26:9f:18:39:
                    23:57:c9:01:64:19:b8:d5:8c:3e:82:29:38:3b:3a:
                    3c:45:0b:36:c5:84:28:81:84:9e:ad:76:c1:8d:64:
                    ef:72:10:db:31:e3:fb:50:b5:48:88:76:38:1f:05:
                    e0:04:0e:b8:cb:3b:50:5b:6b:d9:98:21:84:cb:70:
                    94:05:f6:d5:5d:25:57:c2:3b:29:fb:d3:63:3a:a7:
                    21:64:40:c1:e4:06:0e:7b:00:d8:97:7a:7a:83:c0:
                    47:94:ad:53:17:8e:c1:8e:d6:ea:17:df:3f:ea:6c:
                    da:74:c8:14:d5:74:19:fc:5d:24:b3:d3:50:16:a3:
                    50:e8:3e:64:67:a7:a5:15:06:89:69:d5:e9:c6:3f:
                    41:31:85:4e:88:88:09:c9:ca:bd:95:f8:66:e3:69:
                    f7:68:a1:e7:33:d9:64:57:df:b8:e2:bd:8f:0a:7f:
                    f5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A8:AD:D1:7B:D4:D0:59:8B:90:DA:01:14:43:95:EA:4A:F4:98:6E
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e302e302f32342d3234203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:66:96:59:ee:d6:17:54:fc:72:18:d5:f4:75:6d:96:74:be:
         03:69:84:f1:6e:16:76:81:3f:e3:9b:50:b3:46:a0:e7:2f:1a:
         5c:3f:9b:45:47:6f:6d:31:69:02:36:1d:ce:a3:b4:05:80:9c:
         8a:ff:af:83:72:f0:2f:61:9c:3b:2c:36:a8:a5:e6:35:27:5e:
         46:46:b4:39:99:66:c0:90:39:af:94:23:64:3d:df:bb:84:ac:
         57:a4:c5:8c:de:15:06:eb:3a:c1:01:77:be:28:9f:70:3c:71:
         23:c2:8e:38:30:23:b3:35:29:05:e4:06:5a:69:7c:b1:c2:91:
         d2:f1:f9:44:2a:86:f0:d3:ea:54:b8:22:b6:79:47:e4:e0:15:
         cf:71:5f:94:fb:72:05:a3:2d:c4:34:46:6d:8f:2c:27:ba:ce:
         fd:ba:83:e7:1f:7b:e3:8b:59:b4:a8:b8:31:f4:16:91:46:99:
         1d:c9:8c:7c:83:c2:2c:db:94:f0:53:bd:6b:2a:ce:87:4f:e5:
         54:0d:62:10:e5:48:5f:54:c5:8d:57:8b:61:74:58:5d:c5:0b:
         7a:b3:ec:06:55:16:30:b6:8c:34:5d:0f:48:ef:3c:2f:77:34:
         56:7b:88:b2:fe:11:64:6b:6b:d5:89:c0:67:53:c2:d5:64:28:
         d2:ce:b0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:22 2024 by rpki-client on console-fra.rpki-client.org