Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e322e302f32342d3234203d3e20323639353032.roa
File:                     34352e3138362e322e302f32342d3234203d3e20323639353032.roa (raw, json)
Hash identifier:          tZ0w3BXsTSwkhWrV9hyBTWTGluVmrIakqrMipHDFO2g=
Subject key identifier:   29:4C:C9:61:A3:5E:12:DA:72:74:9F:0B:11:FE:0E:78:58:D1:25:DA
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       6DD6D26CD0977BAC759C1FA403CD0E67F3E38305
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e322e302f32342d3234203d3e20323639353032.roa
Signing time:             Sat 25 May 2024 13:12:26 +0000
ROA not before:           Sat 25 May 2024 13:07:26 +0000
ROA not after:            Sat 24 May 2025 13:12:26 +0000
asID:                     269502
IP address blocks:        45.186.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d6:d2:6c:d0:97:7b:ac:75:9c:1f:a4:03:cd:0e:67:f3:e3:83:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: May 25 13:07:26 2024 GMT
            Not After : May 24 13:12:26 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:db:96:13:a8:7a:18:82:95:c1:89:03:cd:9a:
                    26:f8:11:ff:db:15:0e:2c:34:49:46:9d:f3:90:9a:
                    0a:bc:f1:31:90:2d:06:92:b2:54:d3:9d:7f:31:a4:
                    cd:a2:50:ff:de:e8:3e:d9:55:34:89:d9:69:f2:50:
                    43:07:05:6c:cd:16:ac:62:65:13:61:87:30:1a:53:
                    7e:21:a8:af:c0:ed:1c:2b:2a:5b:4d:05:0b:3e:f1:
                    1f:e9:8b:1f:23:9b:a4:32:80:dc:70:87:40:7c:9e:
                    3c:18:50:5f:3d:12:b6:a4:ac:51:76:72:2f:a3:c5:
                    1b:34:33:01:fc:bc:a4:21:0d:61:46:89:a2:46:1e:
                    d3:e6:df:80:a7:be:44:fe:30:87:5f:14:24:d5:75:
                    05:e1:46:b1:2d:4c:bf:c4:61:db:f2:50:04:55:20:
                    d0:9a:51:6d:f6:53:fc:9c:18:2a:77:bc:35:eb:01:
                    45:98:d6:dd:28:f6:a0:56:4f:98:3f:2e:fd:2e:1a:
                    15:16:95:2d:9a:dd:fc:76:7b:30:06:4e:47:9d:33:
                    af:34:1c:48:21:63:03:b3:97:c3:7c:9a:a9:1f:da:
                    87:07:a5:18:47:d9:e6:be:85:88:14:74:8c:2f:5a:
                    6e:3e:86:ee:c2:28:e0:ef:f9:0f:48:38:3f:4a:cd:
                    aa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4C:C9:61:A3:5E:12:DA:72:74:9F:0B:11:FE:0E:78:58:D1:25:DA
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e322e302f32342d3234203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:d2:83:08:27:03:61:6a:62:d7:cc:05:44:09:c2:45:fb:a7:
         71:01:7e:d5:50:52:e1:65:53:08:73:94:24:8d:c8:5b:d0:9f:
         77:31:44:fb:3b:aa:69:3f:08:0c:0d:91:8a:3b:ef:78:9e:b4:
         51:56:18:dd:cb:2b:e2:59:50:17:f3:48:9f:e5:a0:f6:b8:28:
         81:51:bc:de:b7:68:21:bf:52:9e:a1:a8:da:29:60:1e:fe:7c:
         04:69:48:ef:65:fb:bb:1a:4c:51:8a:75:72:51:12:f1:f0:66:
         c4:ce:e4:50:54:30:3c:2d:cd:6d:b0:73:02:de:d7:1a:72:84:
         54:d7:76:f1:87:d9:0e:81:d2:82:07:6c:ac:0d:9a:c3:7d:7a:
         61:16:c6:f0:09:3a:15:f7:5b:ae:5d:87:94:79:43:d1:bf:ff:
         af:29:35:f7:1c:92:31:0a:2e:54:fb:22:94:3c:ba:da:7c:cc:
         5f:3e:64:e3:45:b4:92:d2:68:06:92:1b:a3:bf:c2:f8:5e:9c:
         35:f3:dc:67:ec:34:bf:f2:aa:cd:ed:bc:4d:0b:e7:0a:70:bc:
         a9:47:b8:03:bc:0e:a4:fe:f9:12:07:ea:5d:b5:63:62:35:8d:
         99:f9:8f:aa:4c:90:46:76:b5:6c:95:74:b5:5c:73:20:3c:2a:
         0f:72:b8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:54 2024 by rpki-client on console-ams.rpki-client.org