Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/34352e3136312e39322e302f32322d3332203d3e203532363137.roa
File:                     34352e3136312e39322e302f32322d3332203d3e203532363137.roa (raw, json)
Hash identifier:          TD3up6QIr6b4J5dDA608AEZuIXRVl1VtSK+/4i/7xbo=
Subject key identifier:   36:D0:01:65:6E:54:1C:3C:46:C6:39:DB:EF:FC:6E:36:41:F0:45:CC
Certificate issuer:       /CN=D52EA87CB6ED7499343693851F4F93C4D28AAD65
Certificate serial:       7B8DBA00875511793F1CA015EBEF4802E080F231
Authority key identifier: D5:2E:A8:7C:B6:ED:74:99:34:36:93:85:1F:4F:93:C4:D2:8A:AD:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/34352e3136312e39322e302f32322d3332203d3e203532363137.roa
Signing time:             Thu 04 Apr 2024 12:40:27 +0000
ROA not before:           Thu 04 Apr 2024 12:35:27 +0000
ROA not after:            Thu 03 Apr 2025 12:40:27 +0000
asID:                     52617
IP address blocks:        45.161.92.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.crl
                          rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8d:ba:00:87:55:11:79:3f:1c:a0:15:eb:ef:48:02:e0:80:f2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D52EA87CB6ED7499343693851F4F93C4D28AAD65
        Validity
            Not Before: Apr  4 12:35:27 2024 GMT
            Not After : Apr  3 12:40:27 2025 GMT
        Subject: CN=36D001656E541C3C46C639DBEFFC6E3641F045CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:46:6e:41:0b:7b:8a:9e:ba:5b:a8:54:87:
                    69:09:d4:bd:86:2c:b7:e1:d1:3a:31:a8:3f:be:1e:
                    98:77:d2:41:92:e3:0d:b4:e5:ca:05:2a:89:25:c6:
                    3e:9a:72:1c:a7:e6:8f:75:ad:6a:aa:81:7f:48:a7:
                    b8:d8:f9:ff:43:0f:55:d8:1c:4a:94:5a:b0:5e:f5:
                    24:8b:44:19:a2:7b:d9:b6:95:be:06:85:d3:b5:e5:
                    9c:41:cc:d1:1b:51:d5:6f:89:e4:c4:8e:6c:4c:a5:
                    af:dd:4f:32:0c:9c:63:2d:e2:46:d8:b3:24:15:ef:
                    b7:dc:c1:3d:02:f5:82:6a:b7:a0:e4:5c:f3:70:9c:
                    2f:a6:0c:48:79:5f:ca:53:cf:05:31:e3:2d:98:43:
                    41:c9:be:19:f5:67:e1:c1:2c:c6:36:08:8d:ed:5b:
                    85:59:0d:35:22:2c:88:6d:11:81:67:bf:94:fe:3a:
                    e6:5f:d3:15:4f:09:2d:39:f7:90:3a:1d:7e:2d:97:
                    29:fd:05:04:18:5e:eb:57:2e:0d:b3:71:3d:c3:30:
                    29:41:76:d5:d3:7d:4d:80:34:64:fe:7b:2e:7a:63:
                    45:2e:b3:80:02:ba:a3:8a:15:75:9a:e8:9f:64:d9:
                    ca:d2:dd:c9:e0:e3:2f:3d:5a:21:0b:4b:c7:a2:2b:
                    fa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D0:01:65:6E:54:1C:3C:46:C6:39:DB:EF:FC:6E:36:41:F0:45:CC
            X509v3 Authority Key Identifier:
                keyid:D5:2E:A8:7C:B6:ED:74:99:34:36:93:85:1F:4F:93:C4:D2:8A:AD:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/34352e3136312e39322e302f32322d3332203d3e203532363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:bc:c7:b4:fe:f4:04:52:10:57:56:b2:70:7a:54:d4:21:e2:
         93:00:a1:8c:2d:72:18:98:5e:ec:05:43:9e:54:18:62:3e:64:
         e1:ca:0b:98:ad:92:61:a8:81:e9:57:e4:16:36:03:21:3f:a2:
         77:fa:6f:cf:59:71:db:06:d9:bc:7d:13:56:0c:48:82:2f:ea:
         7c:bd:81:56:b6:40:35:2e:30:c3:17:a6:fe:6f:00:71:d2:ba:
         42:00:f1:51:be:12:d4:3e:ad:41:e9:b4:9f:d2:e0:23:7b:69:
         cc:5c:c8:c7:52:6a:53:64:48:b6:61:c6:97:ea:72:2a:25:0a:
         2a:09:dd:79:8e:21:ad:1e:20:32:12:72:01:e3:3c:ec:42:32:
         63:68:09:1a:18:29:87:d0:a4:d1:74:8b:39:c5:36:ee:aa:de:
         a3:f6:7c:a4:bf:dd:bb:a7:c3:ae:4f:b9:83:48:c8:6e:b6:03:
         87:3b:9d:51:03:fb:e9:48:71:54:d1:29:04:cc:21:2c:12:f5:
         e0:c4:fd:73:a0:95:36:8f:63:0e:12:ae:82:e7:08:ab:3d:67:
         08:e2:60:f5:39:54:7a:e6:66:9e:91:35:68:4d:1b:f7:fa:3a:
         1d:e6:54:59:66:e6:6d:b4:77:63:71:bb:c9:87:df:80:1b:05:
         85:7e:a2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:07 2024 by rpki-client on console-ams.rpki-client.org