Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/1/34352e3232392e3136302e302f32322d3332203d3e20323637313239.roa
File:                     34352e3232392e3136302e302f32322d3332203d3e20323637313239.roa (raw, json)
Hash identifier:          l9fptrSV9Eqbc3WiDD7e4EtOY20oGs9AdL37KXXpFZM=
Subject key identifier:   46:D5:1B:3F:6B:7A:2C:03:54:64:40:CA:CD:8C:EE:B2:A3:FE:E7:F7
Certificate issuer:       /CN=F477DE3DDC1DF0690387387B559E914714282892
Certificate serial:       124307A9141761608CC785799A0938342D33077B
Authority key identifier: F4:77:DE:3D:DC:1D:F0:69:03:87:38:7B:55:9E:91:47:14:28:28:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F477DE3DDC1DF0690387387B559E914714282892.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/1/34352e3232392e3136302e302f32322d3332203d3e20323637313239.roa
Signing time:             Wed 03 Apr 2024 18:56:23 +0000
ROA not before:           Wed 03 Apr 2024 18:51:23 +0000
ROA not after:            Wed 02 Apr 2025 18:56:23 +0000
asID:                     267129
IP address blocks:        45.229.160.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/1/F477DE3DDC1DF0690387387B559E914714282892.crl
                          rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/1/F477DE3DDC1DF0690387387B559E914714282892.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F477DE3DDC1DF0690387387B559E914714282892.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:43:07:a9:14:17:61:60:8c:c7:85:79:9a:09:38:34:2d:33:07:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F477DE3DDC1DF0690387387B559E914714282892
        Validity
            Not Before: Apr  3 18:51:23 2024 GMT
            Not After : Apr  2 18:56:23 2025 GMT
        Subject: CN=46D51B3F6B7A2C03546440CACD8CEEB2A3FEE7F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:a4:f6:73:94:bf:02:40:39:b1:66:9c:59:
                    7e:7e:c2:2b:b6:41:aa:ff:c0:14:3b:05:1b:82:e1:
                    fe:42:ba:bb:e4:4c:df:ad:9e:19:3b:99:66:6c:0d:
                    be:78:8a:30:8e:5c:0e:85:04:c8:4f:25:83:ac:62:
                    ae:72:a2:2c:7a:ce:b9:6e:33:a5:70:8d:40:b0:09:
                    8f:87:c1:a9:79:54:7d:ac:1b:0c:5e:8d:6c:a7:de:
                    fc:0d:04:6c:52:80:2e:70:5c:ae:a9:b2:f3:b9:1d:
                    13:63:1d:4f:7d:1f:e4:18:32:44:e8:08:97:ba:be:
                    e7:63:74:f9:32:3d:3b:4d:44:6e:5e:9b:d8:4f:a2:
                    82:6f:f5:b5:6a:2a:dd:a7:1b:25:77:9d:d0:01:f5:
                    00:41:fe:f2:a0:02:d0:4b:66:0b:ba:4b:75:69:ee:
                    79:fc:a2:7d:cd:7a:62:17:bc:8a:16:68:53:90:08:
                    50:ff:4d:ec:8d:9b:6f:3a:e9:54:4d:42:ff:b1:58:
                    98:12:c2:21:08:e1:83:f7:28:6d:50:96:72:28:61:
                    0f:22:6f:be:f9:c9:36:70:d1:e5:0b:fa:83:6a:0c:
                    9a:38:30:c0:1c:0b:47:dc:2d:d9:cc:8c:5d:08:a2:
                    7e:29:82:66:ca:81:1b:b4:aa:44:1b:e6:13:0d:a9:
                    cf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D5:1B:3F:6B:7A:2C:03:54:64:40:CA:CD:8C:EE:B2:A3:FE:E7:F7
            X509v3 Authority Key Identifier:
                keyid:F4:77:DE:3D:DC:1D:F0:69:03:87:38:7B:55:9E:91:47:14:28:28:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/1/F477DE3DDC1DF0690387387B559E914714282892.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F477DE3DDC1DF0690387387B559E914714282892.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/1/34352e3232392e3136302e302f32322d3332203d3e20323637313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:6d:07:c1:94:23:98:a9:c8:dd:91:c2:5c:48:c9:32:7c:4e:
         a6:49:05:dc:3d:20:3b:d3:61:93:a8:1e:01:4c:2a:95:6f:8c:
         86:7b:54:e4:90:0d:fe:f5:0b:c0:97:78:ae:f8:e8:52:70:79:
         a4:c3:8c:57:0d:4a:d8:25:2f:dd:4f:d3:77:8b:5b:37:2c:5a:
         fe:d1:43:01:be:45:39:d9:98:48:4d:c3:ad:9e:69:1b:55:60:
         38:42:25:66:6d:f3:e9:35:8c:63:f5:e8:09:b7:77:9a:d2:10:
         0c:19:eb:86:a2:85:a3:43:b6:fd:bb:3c:a4:a0:4e:7a:2a:a5:
         18:15:ef:75:71:00:a8:4a:9f:5e:0c:c2:5b:fc:d4:9f:09:31:
         0d:d9:3b:4f:8d:57:42:7a:96:9b:85:65:77:67:39:06:e3:09:
         67:88:1a:59:b4:c1:96:85:cb:39:24:1e:fe:97:a7:df:6b:1d:
         04:27:d5:45:7d:2a:ce:e8:06:23:71:1b:dc:2c:9f:3d:4d:64:
         0e:b8:f1:00:7f:86:70:34:49:88:82:0f:d9:97:00:6e:c5:36:
         c9:93:46:ad:1e:f1:bc:35:b2:48:50:52:19:66:bd:c9:d8:5e:
         d2:ed:55:ef:9b:c8:22:b7:6d:f4:0f:07:55:09:bc:6f:3f:a1:
         fe:b7:fa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:36 2024 by rpki-client on console-ams.rpki-client.org