Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BXghzUuCAM5hi5MJUj7uJPkH1VynD99WEJKqd3EbXEyL/0/34352e3138352e3231322e302f32322d3234203d3e20323639343433.roa
File:                     34352e3138352e3231322e302f32322d3234203d3e20323639343433.roa (raw, json)
Hash identifier:          A+JpvJUhB4WUUkuPtrH3Lk+Y5t4h1NKJ0W9xp/RrcF0=
Subject key identifier:   05:03:5D:8C:6C:57:B6:D7:EB:67:17:BE:E5:19:AD:60:63:0E:F2:07
Certificate issuer:       /CN=73EFE22A210F1E6E61052D499A1807769818FE14
Certificate serial:       3B57EAFE338BD5EB93C26AF3DDAF867D638D8EC4
Authority key identifier: 73:EF:E2:2A:21:0F:1E:6E:61:05:2D:49:9A:18:07:76:98:18:FE:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73EFE22A210F1E6E61052D499A1807769818FE14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXghzUuCAM5hi5MJUj7uJPkH1VynD99WEJKqd3EbXEyL/0/34352e3138352e3231322e302f32322d3234203d3e20323639343433.roa
Signing time:             Fri 05 Jul 2024 19:26:02 +0000
ROA not before:           Fri 05 Jul 2024 19:21:02 +0000
ROA not after:            Fri 04 Jul 2025 19:26:02 +0000
asID:                     269443
IP address blocks:        45.185.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BXghzUuCAM5hi5MJUj7uJPkH1VynD99WEJKqd3EbXEyL/0/73EFE22A210F1E6E61052D499A1807769818FE14.crl
                          rsync://rpki-repo.registro.br/repo/BXghzUuCAM5hi5MJUj7uJPkH1VynD99WEJKqd3EbXEyL/0/73EFE22A210F1E6E61052D499A1807769818FE14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73EFE22A210F1E6E61052D499A1807769818FE14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:57:ea:fe:33:8b:d5:eb:93:c2:6a:f3:dd:af:86:7d:63:8d:8e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73EFE22A210F1E6E61052D499A1807769818FE14
        Validity
            Not Before: Jul  5 19:21:02 2024 GMT
            Not After : Jul  4 19:26:02 2025 GMT
        Subject: CN=05035D8C6C57B6D7EB6717BEE519AD60630EF207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b9:78:71:91:7a:37:36:f4:f6:72:f9:c2:76:
                    04:79:50:54:a3:00:fc:ab:d8:53:0f:08:c9:95:54:
                    8b:f6:c6:72:d5:d2:c4:d5:55:ca:d2:e6:4d:7d:40:
                    08:ca:97:9f:41:19:55:70:9f:18:35:df:f3:59:c3:
                    4a:3d:f6:81:73:cd:bc:0e:4f:6c:40:32:f3:03:2e:
                    eb:3b:2e:95:21:6b:c4:e5:4e:55:75:8d:5a:5b:f1:
                    ca:fe:4d:47:0e:43:21:93:12:a0:fe:1f:a6:2a:36:
                    86:ab:5d:73:34:22:fc:1c:b3:f7:b8:4c:0d:b8:f6:
                    5c:d7:e1:03:74:33:da:52:a4:12:62:df:09:3c:7b:
                    21:90:f3:fb:32:83:bb:e9:29:6e:8c:05:ff:5c:53:
                    b7:b5:d4:e0:f0:ff:0a:6b:a4:af:5f:5f:c2:4f:48:
                    21:f7:a0:de:70:a2:ad:27:53:89:06:60:d7:e8:c2:
                    00:c0:15:1c:a8:0e:3f:9b:b5:34:22:fd:d4:c6:5c:
                    b0:7d:e1:98:fd:88:ba:7d:b4:04:e7:3a:0a:e0:a9:
                    cc:1b:79:77:cc:68:f5:ff:91:2f:c6:1b:14:10:5c:
                    17:6b:17:27:89:2a:30:f6:c4:b5:64:b7:ba:cb:8d:
                    e8:39:f6:92:3e:de:75:86:69:ba:40:17:e4:02:cf:
                    cc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:03:5D:8C:6C:57:B6:D7:EB:67:17:BE:E5:19:AD:60:63:0E:F2:07
            X509v3 Authority Key Identifier:
                keyid:73:EF:E2:2A:21:0F:1E:6E:61:05:2D:49:9A:18:07:76:98:18:FE:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXghzUuCAM5hi5MJUj7uJPkH1VynD99WEJKqd3EbXEyL/0/73EFE22A210F1E6E61052D499A1807769818FE14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73EFE22A210F1E6E61052D499A1807769818FE14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXghzUuCAM5hi5MJUj7uJPkH1VynD99WEJKqd3EbXEyL/0/34352e3138352e3231322e302f32322d3234203d3e20323639343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:6b:8b:ce:b7:d3:2d:7e:18:b2:c3:7c:22:ef:c0:b0:5c:b6:
         aa:f6:b2:dd:4c:4a:1b:13:c4:de:62:80:6f:8e:86:55:22:ba:
         1c:c4:0e:a0:af:b2:f7:3e:1a:0e:d3:84:37:32:02:78:2b:68:
         78:cf:41:94:42:ec:59:ca:47:84:3d:80:27:a1:a4:11:65:c2:
         c7:44:09:66:0b:d9:c3:1c:e8:19:13:7c:2d:4b:6d:12:75:83:
         2c:50:b8:17:3c:0a:4b:36:65:0a:b5:48:21:71:51:bc:e8:88:
         0a:97:f2:c1:e7:3a:ba:a8:9c:24:43:c9:87:19:59:5c:7b:83:
         8e:4f:12:84:e4:27:c4:1e:73:09:71:5f:98:d6:2c:2f:9b:80:
         52:fc:8c:33:36:dc:a8:e1:5c:5c:af:f8:3e:34:13:c5:3e:f8:
         3f:aa:16:38:cf:4c:8f:15:ef:7d:22:e5:ef:c9:c3:c7:e9:6f:
         64:8e:36:30:98:3b:4c:63:e4:55:ad:ef:12:11:63:73:e1:9f:
         b2:84:67:c2:57:f2:b8:74:bd:02:89:f7:40:43:cf:36:07:eb:
         04:4c:a0:55:ab:df:8a:e6:03:06:d2:60:b9:2e:1b:e9:d0:9e:
         23:d4:8c:b7:c9:a4:a0:ea:56:12:d4:7a:0f:de:ea:90:0f:56:
         14:f4:89:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:09 2024 by rpki-client on console-fra.rpki-client.org