Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3137392e33362e302f32322d3232203d3e20323639303733.roa
File:                     34352e3137392e33362e302f32322d3232203d3e20323639303733.roa (raw, json)
Hash identifier:          qRU1uKnXsm4TVxduIXu7Eny8E1DFJfoFYFsfE3USUMw=
Subject key identifier:   59:4D:31:8A:8A:41:D6:E4:B2:0F:FF:7B:A1:62:2D:48:6F:2A:DE:51
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       26B3ABB9A63786EABB86458E14AF351639D5218E
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3137392e33362e302f32322d3232203d3e20323639303733.roa
Signing time:             Tue 22 Oct 2024 14:21:25 +0000
ROA not before:           Tue 22 Oct 2024 14:16:25 +0000
ROA not after:            Tue 21 Oct 2025 14:21:25 +0000
asID:                     269073
IP address blocks:        45.179.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 16:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b3:ab:b9:a6:37:86:ea:bb:86:45:8e:14:af:35:16:39:d5:21:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Oct 22 14:16:25 2024 GMT
            Not After : Oct 21 14:21:25 2025 GMT
        Subject: CN=594D318A8A41D6E4B20FFF7BA1622D486F2ADE51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9f:11:cd:bf:4a:a2:90:54:3e:93:79:a5:f9:
                    39:ec:3f:95:4a:c7:d9:01:b4:83:35:62:6a:7a:27:
                    b2:63:f2:58:d6:89:53:ad:e7:a7:a1:45:5a:a2:86:
                    bf:e1:3a:28:f8:02:eb:a0:ef:d6:62:40:15:95:ec:
                    76:b3:a7:7b:80:b6:6f:69:45:4a:44:47:cf:1c:be:
                    36:03:09:db:d1:b7:a5:50:41:22:6f:cf:b9:74:12:
                    f3:90:07:bb:d3:73:ad:cd:f4:20:a6:c9:95:65:41:
                    50:b7:f9:e3:cd:0a:bf:76:bd:37:1c:4f:1f:42:16:
                    4c:72:2e:e3:e1:f7:a3:59:96:ef:52:65:2e:0b:32:
                    c3:fd:8b:62:a9:02:6e:c7:6c:30:93:03:c9:a5:9d:
                    c6:89:71:06:68:04:e6:50:16:98:1c:0a:c8:a7:b0:
                    3a:2f:55:ec:f4:b8:32:dd:1e:a2:10:82:3a:60:d4:
                    92:0c:3c:82:6b:2a:85:38:5c:86:d2:33:65:6b:de:
                    cd:10:9c:fb:48:17:6f:98:50:ac:75:cc:b0:90:c7:
                    52:75:04:b5:a9:67:98:e1:d0:bd:df:20:2c:d5:2a:
                    76:16:38:c1:1e:0b:a9:27:16:c3:b3:49:cd:41:12:
                    aa:c6:2e:63:50:e8:94:de:c7:c3:06:8f:a2:0c:99:
                    b0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4D:31:8A:8A:41:D6:E4:B2:0F:FF:7B:A1:62:2D:48:6F:2A:DE:51
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3137392e33362e302f32322d3232203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:22:93:4b:f9:e1:cc:08:11:d1:a4:30:b2:06:7d:8b:be:fb:
         fb:2d:90:16:1f:03:45:31:7d:b9:fc:05:5a:c6:25:10:4a:25:
         7e:97:e1:35:54:f8:a6:e3:1d:37:66:b9:58:2c:31:9f:df:36:
         2b:2d:ff:7d:12:ba:56:46:94:be:63:48:b8:1a:68:64:68:69:
         36:1d:8b:f6:c2:ce:0c:8f:f6:43:38:e3:89:e7:9f:b2:99:d0:
         d1:32:b6:cf:bf:ba:62:54:f4:48:2b:5b:62:c4:0f:8e:f0:00:
         a9:4f:68:80:73:6d:37:c6:9e:34:6e:c6:12:8b:47:00:ef:8f:
         f0:b3:71:ac:e3:88:67:ce:f8:fd:53:19:13:86:fc:87:18:87:
         34:e0:65:d1:6d:14:83:70:51:ca:35:9e:52:96:50:49:d2:a8:
         aa:94:93:f9:c3:8f:ea:08:45:83:c3:ca:f9:8d:80:4a:70:28:
         16:c8:ed:a7:95:4f:69:38:85:10:58:9c:c6:8c:09:33:1e:d1:
         ad:3a:10:69:ea:4e:f9:fa:02:8e:d8:e7:65:ce:94:1c:ac:49:
         b2:b7:e2:b7:e5:81:0d:93:dc:18:52:18:88:b5:9f:64:af:bb:
         db:ea:e2:52:c5:36:0d:1a:3a:d8:36:42:ed:34:b8:c9:11:8a:
         65:43:65:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:38 2025 by rpki-client