Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/1/34352e3138372e39362e302f32322d3234203d3e20323639343632.roa
File:                     34352e3138372e39362e302f32322d3234203d3e20323639343632.roa (raw, json)
Hash identifier:          2LcBglYNIIPoGLGUZlwBbVk4ukziWBNQ09Y9RIRn0RI=
Subject key identifier:   D1:65:15:41:7F:70:AC:F4:3C:8A:D6:92:C7:BA:C2:81:B1:73:C3:3A
Certificate issuer:       /CN=9E5498CF2BF865A6C6012312932A13ACCDC56CC1
Certificate serial:       745376132DD045D2436BE8BB83FBDBBFF129EEEC
Authority key identifier: 9E:54:98:CF:2B:F8:65:A6:C6:01:23:12:93:2A:13:AC:CD:C5:6C:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E5498CF2BF865A6C6012312932A13ACCDC56CC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/1/34352e3138372e39362e302f32322d3234203d3e20323639343632.roa
Signing time:             Thu 04 Apr 2024 21:05:17 +0000
ROA not before:           Thu 04 Apr 2024 21:00:17 +0000
ROA not after:            Thu 03 Apr 2025 21:05:17 +0000
asID:                     269462
IP address blocks:        45.187.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/1/9E5498CF2BF865A6C6012312932A13ACCDC56CC1.crl
                          rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/1/9E5498CF2BF865A6C6012312932A13ACCDC56CC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E5498CF2BF865A6C6012312932A13ACCDC56CC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:53:76:13:2d:d0:45:d2:43:6b:e8:bb:83:fb:db:bf:f1:29:ee:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E5498CF2BF865A6C6012312932A13ACCDC56CC1
        Validity
            Not Before: Apr  4 21:00:17 2024 GMT
            Not After : Apr  3 21:05:17 2025 GMT
        Subject: CN=D16515417F70ACF43C8AD692C7BAC281B173C33A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:51:3a:85:25:05:b7:a6:07:be:02:0b:a7:6a:
                    2b:15:9b:4c:62:cc:96:a2:ad:f4:0b:36:de:c8:fd:
                    d1:fd:e7:0f:82:1a:64:a2:be:1a:cd:6e:17:02:bf:
                    72:4d:c7:6a:69:44:8b:e9:72:de:bd:64:fa:b5:26:
                    54:ab:0f:b7:46:3f:a2:a5:1d:7f:a1:b4:81:24:cd:
                    90:79:92:04:1d:fe:5a:a1:f1:45:00:c2:84:d8:ef:
                    12:3e:6b:2b:a2:3c:b6:6d:50:11:fc:9c:c7:6d:0f:
                    16:3a:fc:f9:1c:33:fc:96:f0:0b:83:05:f6:5e:44:
                    6b:fd:83:bc:90:fc:c4:13:ae:6a:88:59:48:8b:27:
                    2d:f8:e0:d4:ab:bc:c6:9e:59:0a:a3:33:22:9b:b2:
                    0d:20:1e:63:eb:44:c0:8a:ee:77:77:f4:b4:7e:77:
                    0c:11:03:ac:ce:11:88:4a:11:30:60:ad:fe:c6:b3:
                    6a:a9:c8:95:ee:71:e9:bd:75:52:5c:a6:59:e5:11:
                    32:43:35:26:17:18:0d:7c:84:ea:46:94:2c:37:63:
                    6a:07:96:b4:c2:4a:39:0d:57:a5:e9:a9:99:4b:13:
                    58:f3:aa:86:59:ab:80:57:22:f2:ef:7e:b9:b9:c5:
                    57:e5:38:7c:30:76:fb:8a:7b:70:3a:7b:48:e6:7a:
                    79:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:65:15:41:7F:70:AC:F4:3C:8A:D6:92:C7:BA:C2:81:B1:73:C3:3A
            X509v3 Authority Key Identifier:
                keyid:9E:54:98:CF:2B:F8:65:A6:C6:01:23:12:93:2A:13:AC:CD:C5:6C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/1/9E5498CF2BF865A6C6012312932A13ACCDC56CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E5498CF2BF865A6C6012312932A13ACCDC56CC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/1/34352e3138372e39362e302f32322d3234203d3e20323639343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:14:97:00:ed:14:1a:e3:17:55:72:a0:5b:0e:6d:2f:b8:10:
         a2:4b:9f:cc:13:da:af:81:63:55:ea:26:3b:4b:6b:09:da:ad:
         e7:f5:ba:3a:fb:dc:33:ea:57:a7:23:51:75:3c:c2:a3:62:2c:
         12:0a:33:3a:fa:ca:bb:5f:42:ed:05:a0:97:b3:e4:b6:e5:b0:
         ab:ad:eb:13:86:7b:b6:e6:30:f4:df:2f:41:5d:e7:c2:7a:a2:
         86:b5:42:4b:98:6d:3a:01:b2:c7:49:f3:07:5f:5b:0c:0d:a4:
         a3:ff:e6:f9:56:4f:ea:02:18:f5:11:64:b6:39:99:fe:e0:d3:
         bb:a3:9f:06:f7:50:2a:96:dc:1b:b0:e6:6e:d8:8b:90:74:4d:
         48:0c:46:94:a9:34:f3:5c:c3:ed:0e:3b:a4:22:2d:a0:7a:9f:
         78:61:83:59:24:50:5d:32:7a:97:f1:ae:77:dd:52:0c:ca:2e:
         df:53:7a:7d:f9:df:0c:2b:c1:27:38:2e:0b:66:d4:b1:fe:e7:
         9f:f7:c5:86:c7:c5:f2:71:97:4f:16:8a:4e:53:52:05:eb:b6:
         9e:a6:d9:78:8e:fe:49:34:7c:a8:10:29:c3:72:90:a6:11:98:
         2a:72:e5:08:15:83:fe:5e:52:fe:f3:40:e6:25:9e:fe:4c:1b:
         93:9b:87:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org