Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3138392e3134342e302f32322d3234203d3e20323639353936.roa
File:                     34352e3138392e3134342e302f32322d3234203d3e20323639353936.roa (raw, json)
Hash identifier:          tt7wbeLyWmWi+wfy7VDtbw7LvhBxHGF+ugTi23aNmT4=
Subject key identifier:   64:66:FE:AA:DD:07:29:15:86:E2:BD:70:F5:E5:EB:FC:A8:5D:39:26
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       044E1DC02D40104E51B7FE64AFCBCFA644066AF3
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3138392e3134342e302f32322d3234203d3e20323639353936.roa
Signing time:             Thu 19 Sep 2024 14:38:54 +0000
ROA not before:           Thu 19 Sep 2024 14:33:54 +0000
ROA not after:            Thu 18 Sep 2025 14:38:54 +0000
asID:                     269596
IP address blocks:        45.189.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4e:1d:c0:2d:40:10:4e:51:b7:fe:64:af:cb:cf:a6:44:06:6a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Sep 19 14:33:54 2024 GMT
            Not After : Sep 18 14:38:54 2025 GMT
        Subject: CN=6466FEAADD07291586E2BD70F5E5EBFCA85D3926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:94:b0:52:d7:66:a4:fa:ba:cf:b9:87:a8:00:
                    63:23:ca:73:85:a4:6f:86:73:b2:c7:ab:78:01:67:
                    01:18:9a:e7:90:fc:fd:77:53:f1:e1:36:de:93:a0:
                    40:4a:5a:61:92:ae:70:b2:5c:76:36:ea:ab:49:0c:
                    fa:bb:3e:7d:e5:9a:97:bb:87:d6:27:2f:06:f9:64:
                    05:ec:14:b9:d3:b6:d6:0c:53:b5:4e:28:4c:4a:16:
                    9f:cd:92:d6:62:6d:91:c2:71:04:b1:53:70:2c:0d:
                    c4:30:35:fb:91:dd:05:55:4c:33:23:12:9b:1e:2f:
                    c9:8b:77:b6:69:d8:54:ba:96:66:68:12:83:e9:f3:
                    1f:f0:e4:06:11:7c:ec:f0:b3:99:c8:b0:4c:11:70:
                    99:f4:5e:5c:33:18:7e:28:12:d1:a0:9a:99:d7:49:
                    80:3c:c7:a6:17:84:01:76:cd:1f:fe:c0:b9:fc:d5:
                    8d:6a:72:69:c2:b2:14:a6:43:ff:58:a3:30:35:1e:
                    79:89:86:80:f4:cc:42:19:ee:05:0a:bb:05:cb:bc:
                    57:ed:ea:5b:59:7a:c1:26:dc:7a:79:bb:4d:be:4d:
                    75:03:00:ab:a1:4e:d2:6f:dd:cd:fd:52:90:af:7c:
                    e4:4f:fb:88:58:87:38:1d:34:b9:b6:9a:3d:89:fc:
                    a2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:66:FE:AA:DD:07:29:15:86:E2:BD:70:F5:E5:EB:FC:A8:5D:39:26
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3138392e3134342e302f32322d3234203d3e20323639353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:2c:4a:a7:a6:85:14:51:4e:e6:fa:2b:1b:fd:da:7e:69:
         89:9f:14:4f:88:0a:ef:13:46:16:5c:17:7a:a1:e9:29:05:d0:
         e1:a4:64:e6:ec:b4:ae:b1:dc:ed:32:a7:d2:b0:a4:c1:9c:54:
         d7:cd:3f:b9:0d:1a:a6:90:8a:f1:09:4d:12:db:c2:47:35:ea:
         ca:be:52:e4:61:96:0a:06:c6:25:c9:d0:47:41:5e:a3:89:9f:
         c3:a4:1e:46:4c:03:1b:0d:dd:69:ff:b7:1f:e1:70:c6:f8:e4:
         aa:23:77:6c:6d:93:bc:a8:45:aa:f5:b4:c3:42:f1:5c:e9:0b:
         6b:79:a9:8a:50:e7:7f:02:a2:12:d5:75:87:99:e6:da:8c:5f:
         a7:f0:b3:03:76:ed:ce:15:e6:25:c8:50:58:ec:75:f5:a0:89:
         cc:8c:37:7a:c8:f0:8e:25:55:80:66:de:86:a6:3a:a3:7b:40:
         e0:5e:c8:43:33:7c:61:3a:46:93:b5:70:1f:96:05:eb:36:b4:
         69:23:e7:cb:7e:46:21:db:ab:7d:fb:b7:8a:8e:f2:2f:d5:6b:
         56:18:54:f5:5f:93:f8:b8:a5:7e:ef:99:f4:d7:1d:bf:b3:c6:
         93:97:a5:56:8c:a4:f1:f6:b7:13:0a:a5:ba:cd:03:b5:55:03:
         d3:06:b3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:10 2024 by rpki-client on console-ams.rpki-client.org