Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e332e302f32342d3234203d3e20323639353032.roa
File:                     34352e3138362e332e302f32342d3234203d3e20323639353032.roa (raw, json)
Hash identifier:          jddSpUlPTu9MlwCCOidOZtbb+lfUt0MkMbi7VQv6prI=
Subject key identifier:   F0:17:F7:F2:0F:D3:EF:11:D4:0B:D9:E5:72:B3:D5:E3:16:C3:27:B5
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       36DEC2075E6BA960068B677E049DB7CE290D6A1B
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e332e302f32342d3234203d3e20323639353032.roa
Signing time:             Sat 25 May 2024 13:12:04 +0000
ROA not before:           Sat 25 May 2024 13:07:04 +0000
ROA not after:            Sat 24 May 2025 13:12:04 +0000
asID:                     269502
IP address blocks:        45.186.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:de:c2:07:5e:6b:a9:60:06:8b:67:7e:04:9d:b7:ce:29:0d:6a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: May 25 13:07:04 2024 GMT
            Not After : May 24 13:12:04 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:02:07:f9:7b:ce:33:95:92:7e:d6:cd:dd:
                    4e:62:fe:4d:99:f0:74:aa:9a:c0:25:2b:f1:06:ca:
                    f0:fa:05:a6:c4:05:eb:5b:a5:75:d4:9f:89:87:15:
                    31:ca:83:5b:3b:a4:60:99:b0:9b:fd:a1:22:53:9f:
                    c5:e4:77:e0:cb:30:c1:eb:5e:ae:2e:06:e5:46:0e:
                    17:4b:45:03:5a:46:89:f3:76:5c:86:4a:0c:f7:d8:
                    55:75:33:05:98:be:6e:58:f7:f6:f6:05:b4:eb:25:
                    76:f4:8c:c6:cc:c2:a0:9a:c7:e9:54:bc:4c:77:e1:
                    83:47:18:11:00:db:97:d0:74:bc:e0:1b:c6:d8:62:
                    ce:d1:4e:57:19:b9:39:56:84:63:82:e4:06:43:ab:
                    32:aa:36:b7:6c:68:0d:40:6a:5e:b3:9a:cc:46:a4:
                    a5:a6:ce:8f:60:2f:da:17:bc:bd:d9:01:5c:51:36:
                    46:cb:48:09:e6:58:eb:cf:92:2d:58:8a:17:62:80:
                    dd:ea:8c:4b:55:11:0d:7e:9a:b2:08:48:f5:54:c5:
                    3b:05:2d:ff:8a:c4:69:b8:99:b3:ae:37:63:b7:ad:
                    2f:50:1f:bb:84:fa:4a:2b:0e:61:5e:27:ee:4e:3d:
                    89:54:66:95:82:3b:da:83:60:7b:cc:9f:fe:da:b0:
                    33:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:17:F7:F2:0F:D3:EF:11:D4:0B:D9:E5:72:B3:D5:E3:16:C3:27:B5
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e332e302f32342d3234203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:2b:b0:6e:04:10:bc:f2:8a:6a:5b:70:67:c8:6d:97:1a:e4:
         a3:e3:3d:70:68:51:e5:32:17:64:4e:26:9c:5d:db:03:53:02:
         e6:5a:86:61:e2:a2:55:22:8f:46:a2:e9:60:9e:c8:a6:8b:e5:
         a0:ea:72:93:c1:36:a6:0a:c2:64:fa:2c:d7:7b:91:e7:04:89:
         64:3d:74:d6:f3:37:f9:07:f9:fa:90:6d:88:9a:27:93:aa:3f:
         f2:f3:06:31:54:a6:e3:86:aa:dd:8f:de:96:c9:b8:5d:1e:dc:
         2d:61:07:d1:0e:ea:38:09:7e:12:7a:e2:97:eb:1a:9d:87:e5:
         58:a6:26:d5:e3:b5:cb:55:d1:41:43:5a:9b:43:05:fb:37:3a:
         28:3b:3d:fe:b9:ab:f3:03:a9:71:cc:83:57:ad:e5:f0:d8:2b:
         fb:63:ad:a2:aa:2c:3b:36:6e:76:1e:4d:31:c1:00:cb:27:17:
         42:c8:56:22:ea:4d:46:52:d9:33:d0:6f:56:29:a2:ed:46:49:
         e8:ed:48:9a:0b:06:be:a7:35:b3:9a:08:8c:04:0b:c6:bd:c0:
         06:cf:57:9c:0e:0c:b2:d7:23:b6:1c:ee:48:fa:ec:55:99:70:
         6c:73:0b:ea:28:43:76:3a:d9:cc:46:1f:d1:71:f6:67:53:91:
         ea:e3:11:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:04:01 2024 by rpki-client on console-fra.rpki-client.org