Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/34352e342e3134382e302f32322d3332203d3e20323636303733.roa
File:                     34352e342e3134382e302f32322d3332203d3e20323636303733.roa (raw, json)
Hash identifier:          tw4gTQrOp2XOzWcjBHflcQiTDuxKNrYb8Snrw5Yf38s=
Subject key identifier:   6A:18:7D:FD:D0:94:2C:FC:8A:DA:A4:5C:A0:2E:76:45:5A:32:7D:61
Certificate issuer:       /CN=DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85
Certificate serial:       51AB788A4EEB8B632472DE9CFEDE4297DCE8C790
Authority key identifier: DA:41:07:AF:1D:9F:F7:0E:9E:D7:B9:A2:E8:E3:58:08:BA:92:1C:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/34352e342e3134382e302f32322d3332203d3e20323636303733.roa
Signing time:             Thu 04 Apr 2024 22:17:28 +0000
ROA not before:           Thu 04 Apr 2024 22:12:28 +0000
ROA not after:            Thu 03 Apr 2025 22:17:28 +0000
asID:                     266073
IP address blocks:        45.4.148.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.crl
                          rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ab:78:8a:4e:eb:8b:63:24:72:de:9c:fe:de:42:97:dc:e8:c7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85
        Validity
            Not Before: Apr  4 22:12:28 2024 GMT
            Not After : Apr  3 22:17:28 2025 GMT
        Subject: CN=6A187DFDD0942CFC8ADAA45CA02E76455A327D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:73:b3:cf:c9:86:62:88:bf:c9:fc:8d:41:
                    74:f5:50:d7:23:ec:3a:f5:ef:ee:26:0b:75:ea:80:
                    51:bb:d4:29:fd:fd:1e:36:2b:a6:c5:b5:b7:77:2a:
                    86:12:7b:76:e9:a2:86:56:fe:b1:b6:da:ee:a7:19:
                    54:41:ad:13:cb:bb:64:f2:be:02:73:7f:46:bb:91:
                    db:7e:9e:ac:93:be:c4:99:28:ec:68:32:7d:14:3a:
                    4a:22:52:51:48:f7:59:0d:61:c8:b0:10:bd:b9:05:
                    9d:4a:ef:99:69:86:c4:da:e8:e6:d6:86:fe:46:f7:
                    dd:60:72:9f:18:7a:83:b1:bf:d6:91:f1:c8:ad:0c:
                    09:9b:11:dd:93:7c:35:2c:d7:17:bd:74:e3:fb:bf:
                    73:e9:c6:2f:a0:26:09:ff:a2:bc:fd:bc:3f:ed:f5:
                    6c:78:59:92:27:53:26:42:49:78:37:4a:c7:d0:50:
                    6c:c6:e2:ab:82:59:56:c3:bd:5b:c5:1c:f1:7e:fb:
                    f5:f3:db:3e:31:40:fe:a4:ec:76:5d:eb:11:9b:47:
                    04:0c:da:d4:7d:6d:43:90:24:82:df:c8:f6:aa:24:
                    d5:89:b2:4a:0c:c5:da:c9:90:4e:0c:2b:a8:18:6d:
                    b5:72:3a:42:57:c1:63:8c:be:54:3d:cc:b8:ec:37:
                    c6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:18:7D:FD:D0:94:2C:FC:8A:DA:A4:5C:A0:2E:76:45:5A:32:7D:61
            X509v3 Authority Key Identifier:
                keyid:DA:41:07:AF:1D:9F:F7:0E:9E:D7:B9:A2:E8:E3:58:08:BA:92:1C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/34352e342e3134382e302f32322d3332203d3e20323636303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:62:e6:10:a9:68:52:7f:04:de:bb:0c:c7:28:d0:f6:fb:d8:
         42:10:e1:1c:d3:90:18:f5:35:9f:2f:c3:09:28:27:ab:b9:b0:
         02:5d:23:89:46:1f:73:88:c4:89:c7:c5:91:61:b7:cb:b4:5b:
         f2:5d:1f:29:d1:9b:df:a6:0e:16:aa:a2:71:95:ca:c2:53:05:
         35:49:9e:0d:e0:3e:7c:ef:99:fc:7b:6d:6d:a5:00:5b:3a:df:
         cf:0d:22:a1:65:b7:c5:6f:4a:a7:e6:4e:12:a9:5c:39:1d:83:
         ba:ce:a7:99:cf:d7:d8:9c:75:72:03:d0:48:47:b1:8c:3d:53:
         36:47:a7:46:b9:d3:97:bf:95:4e:1e:a4:5e:b6:85:61:eb:3e:
         4a:e8:dd:7a:a7:56:7a:ea:27:7e:4b:20:da:97:e2:72:ad:ce:
         88:56:75:c6:1f:ea:30:84:d0:63:03:fb:e2:cd:8d:af:bd:0f:
         57:29:12:27:80:9b:59:0b:f2:13:2b:a2:ac:c6:98:11:7b:1e:
         e6:85:92:d4:8f:25:d2:09:07:2e:b1:c8:51:20:66:0e:85:8b:
         c9:22:d9:66:85:e5:c8:b8:55:09:c3:b2:0c:91:ac:ac:2b:f1:
         8d:ae:62:8b:38:d0:7d:9d:97:36:bc:d5:d6:82:f4:ec:f7:e9:
         df:19:06:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:29 2024 by rpki-client on console-fra.rpki-client.org