Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/34352e3138392e34342e302f32322d3332203d3e20323639353737.roa
File:                     34352e3138392e34342e302f32322d3332203d3e20323639353737.roa (raw, json)
Hash identifier:          Rf3BTNhW6ds0CCs+sP1N9FAz9/qxm/HLqNUGyMkh2tU=
Subject key identifier:   29:D4:84:A5:23:92:68:91:A5:BF:B5:14:ED:08:95:51:93:D2:86:E4
Certificate issuer:       /CN=F27F97DDE32D8C91FD89D5F30108BB0E32194AD9
Certificate serial:       7357215D0D9AFF442C55BFEE3C113C82E3CC7657
Authority key identifier: F2:7F:97:DD:E3:2D:8C:91:FD:89:D5:F3:01:08:BB:0E:32:19:4A:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/34352e3138392e34342e302f32322d3332203d3e20323639353737.roa
Signing time:             Fri 11 Oct 2024 00:40:07 +0000
ROA not before:           Fri 11 Oct 2024 00:35:07 +0000
ROA not after:            Fri 10 Oct 2025 00:40:07 +0000
asID:                     269577
IP address blocks:        45.189.44.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.crl
                          rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:57:21:5d:0d:9a:ff:44:2c:55:bf:ee:3c:11:3c:82:e3:cc:76:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F27F97DDE32D8C91FD89D5F30108BB0E32194AD9
        Validity
            Not Before: Oct 11 00:35:07 2024 GMT
            Not After : Oct 10 00:40:07 2025 GMT
        Subject: CN=29D484A523926891A5BFB514ED08955193D286E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:82:4d:ef:cc:e7:03:84:f5:e4:1e:16:2d:
                    aa:55:9f:37:07:6d:a3:88:01:e8:77:2a:91:a3:d8:
                    f3:47:a9:6b:92:e8:22:8b:ad:f6:82:97:61:d8:cb:
                    34:0d:4a:df:59:22:65:8a:0b:e5:3d:29:18:c2:98:
                    7b:b3:4e:f4:fa:a4:76:c1:9b:ce:16:18:95:87:01:
                    24:7d:f0:3d:64:77:fa:ca:fe:5f:8e:84:92:dc:b6:
                    58:38:85:68:db:7d:cf:a4:2b:c8:8d:f8:e5:27:77:
                    3c:53:dd:68:cf:71:d4:22:62:c8:31:bf:ba:2b:2b:
                    0f:90:94:00:84:17:28:9e:0b:8b:ba:40:2d:f8:63:
                    3e:99:08:f7:94:12:f8:23:39:4e:91:4c:e4:3e:a3:
                    0d:53:99:94:b9:bd:ab:fc:2c:8b:46:26:9a:fd:b2:
                    03:9a:f8:c6:06:90:06:3f:7b:5a:5c:79:b5:69:a5:
                    42:5b:3e:60:d0:94:36:8a:b6:9f:18:15:5a:ff:1c:
                    ae:6f:31:8c:18:64:e9:55:c8:db:4c:61:f5:6c:74:
                    db:16:91:09:de:e8:ff:7e:21:57:cb:ec:a3:d8:a6:
                    f8:2c:02:7b:28:4e:37:84:f1:9b:5e:6f:1d:5d:b4:
                    60:9c:ee:60:1d:86:0f:f4:39:38:89:c8:a2:5b:20:
                    b5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D4:84:A5:23:92:68:91:A5:BF:B5:14:ED:08:95:51:93:D2:86:E4
            X509v3 Authority Key Identifier:
                keyid:F2:7F:97:DD:E3:2D:8C:91:FD:89:D5:F3:01:08:BB:0E:32:19:4A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/34352e3138392e34342e302f32322d3332203d3e20323639353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:e8:99:b4:45:26:df:3b:82:d2:d0:d2:9c:83:1b:4e:01:47:
         71:ab:d2:0e:2a:d8:5d:d8:84:49:ae:07:1e:e3:83:a4:bf:3f:
         2b:51:f0:ca:8f:ec:f7:0b:27:c7:41:1d:6b:a3:de:af:0e:36:
         f6:73:1d:c8:fe:65:92:19:51:51:63:d3:9a:6d:fc:0c:db:a4:
         8d:a6:35:da:5c:ae:23:3f:f5:a0:6d:8e:c1:d7:d7:6e:fd:fa:
         f7:cf:0f:f5:3f:6b:ed:9a:73:c3:52:1f:8d:e5:d1:9b:8f:7a:
         e4:de:d2:50:35:eb:f2:5a:b3:ed:b0:0d:29:16:6a:16:8f:92:
         a3:38:f9:82:ee:3b:13:5e:b9:81:fc:95:b1:70:fd:22:0e:db:
         e1:8d:03:d2:7b:aa:43:3f:81:58:0c:7d:52:b8:95:49:a4:17:
         61:b5:1b:7c:0c:fe:b1:ae:dc:6c:91:3f:e1:19:09:5c:ff:06:
         9a:74:cb:2e:26:ef:62:b3:15:65:77:59:2e:22:38:30:ef:64:
         0f:33:9f:3d:d8:a8:cf:33:30:a2:10:ea:e5:0a:d9:97:da:39:
         c5:75:96:55:59:70:df:70:92:f5:7e:6d:e2:97:5f:32:0b:ac:
         d7:26:60:0c:64:f0:be:bd:e9:2f:e7:9f:06:f5:08:a9:0d:40:
         60:51:2a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:52 2024 by rpki-client on console-fra.rpki-client.org