Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/34352e3138332e3138302e302f32322d3234203d3e20323639333337.roa
File:                     34352e3138332e3138302e302f32322d3234203d3e20323639333337.roa (raw, json)
Hash identifier:          r0aIbm7o7Cs4HZ33SKc4ioXr8qJbPh4B1oL0qXI+2Yk=
Subject key identifier:   46:9A:9B:F4:04:1F:C9:17:EE:CF:07:23:EF:32:24:25:CF:FF:9C:0D
Certificate issuer:       /CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4
Certificate serial:       3050BAE45316887EB20CC6255E21606B3201F1D7
Authority key identifier: E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/34352e3138332e3138302e302f32322d3234203d3e20323639333337.roa
Signing time:             Thu 04 Apr 2024 10:07:10 +0000
ROA not before:           Thu 04 Apr 2024 10:02:10 +0000
ROA not after:            Thu 03 Apr 2025 10:07:10 +0000
asID:                     269337
IP address blocks:        45.183.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl
                          rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:50:ba:e4:53:16:88:7e:b2:0c:c6:25:5e:21:60:6b:32:01:f1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4
        Validity
            Not Before: Apr  4 10:02:10 2024 GMT
            Not After : Apr  3 10:07:10 2025 GMT
        Subject: CN=469A9BF4041FC917EECF0723EF322425CFFF9C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:0a:b6:6d:92:ce:ff:17:b7:4f:d9:2d:5a:
                    da:6b:47:2d:05:f2:80:12:8e:30:a0:35:2a:4d:bf:
                    82:95:8b:dc:07:41:7d:73:ee:9a:0c:75:95:84:48:
                    9a:3f:98:0e:f0:d9:c9:6c:10:53:ff:42:0c:8d:63:
                    76:f4:3d:08:4e:48:48:6d:93:a3:70:d3:84:62:85:
                    bf:9d:b3:a4:e3:69:ad:9f:2e:a5:85:8c:24:09:18:
                    c0:ea:6a:ea:08:4d:97:76:97:a8:5d:18:e6:b1:c2:
                    20:a6:60:65:2f:48:3a:3d:cb:0b:49:34:9c:db:9a:
                    bd:d1:80:f2:c8:43:ef:0d:d3:34:ef:d2:68:de:26:
                    73:cf:7f:ec:bd:12:9b:02:b4:4a:fb:17:57:35:01:
                    27:55:94:bd:ce:39:22:ab:fe:9e:3d:96:46:40:b6:
                    90:64:29:ec:bd:93:02:3a:c4:17:e3:79:e8:d5:c3:
                    8a:6f:47:36:7f:ff:d2:27:15:3c:91:d0:1c:cc:d4:
                    a3:94:b2:ee:ee:73:71:ec:57:13:d2:c9:1d:e0:35:
                    08:9c:2a:84:1b:9b:ea:59:dd:16:eb:30:74:68:7e:
                    00:e9:47:f7:86:db:76:3e:8f:38:0a:22:7e:3c:a8:
                    38:05:6b:fe:06:37:1a:13:d8:cc:6e:1d:97:33:98:
                    99:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9A:9B:F4:04:1F:C9:17:EE:CF:07:23:EF:32:24:25:CF:FF:9C:0D
            X509v3 Authority Key Identifier:
                keyid:E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/34352e3138332e3138302e302f32322d3234203d3e20323639333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:90:08:ff:7c:93:3b:79:6b:37:05:91:ae:e9:a6:c7:b8:98:
         a6:10:e4:39:a0:da:20:3a:4c:12:c6:6d:5a:2a:21:cc:68:fc:
         8c:e4:d1:88:eb:c7:1d:a1:65:0c:8f:64:b2:01:7b:a3:ea:db:
         98:e4:35:26:8e:61:f7:7a:b9:c1:c9:00:ce:e0:45:00:05:43:
         68:59:14:48:39:49:19:ea:80:a7:14:c3:1e:7f:6c:55:7d:fb:
         16:2a:34:59:c9:a8:d5:bc:ca:fe:d2:4a:30:1d:41:61:a8:3b:
         57:98:60:79:e9:80:7f:5b:7e:16:1b:25:90:65:de:45:30:9c:
         f9:c5:77:92:81:ff:87:40:69:1c:36:d9:67:25:31:62:48:6f:
         18:87:ab:09:af:e1:e7:fa:6b:57:bc:e9:c1:3c:fa:23:50:d2:
         b4:22:75:69:7c:9a:92:db:e0:1c:c5:29:fc:fd:af:04:75:04:
         15:25:2b:50:f4:fe:fa:2d:b5:46:b2:9a:9c:6d:e6:10:8b:46:
         0b:6f:82:5d:14:b9:46:79:cf:e2:13:4c:83:8f:f1:4e:3f:90:
         0e:00:d9:89:28:96:28:9f:71:49:6c:fb:7f:68:48:95:c2:e2:
         eb:4e:a5:94:fe:cf:9b:17:bd:ef:af:35:14:ff:e3:8b:5b:c5:
         56:46:8e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org