Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa
File:                     34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa (raw, json)
Hash identifier:          nOFNKNGS1TS29lVZY3grvcW1UqYfNynhiKdFpVLi1x4=
Subject key identifier:   59:78:8A:A4:3B:E2:08:50:37:45:54:82:5E:2D:7E:8B:92:6C:C1:4C
Certificate issuer:       /CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
Certificate serial:       06633C68D1939422FA6D30BD13E5C47B0542E09C
Authority key identifier: 41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa
Signing time:             Wed 03 Apr 2024 18:32:32 +0000
ROA not before:           Wed 03 Apr 2024 18:27:32 +0000
ROA not after:            Wed 02 Apr 2025 18:32:32 +0000
asID:                     269449
IP address blocks:        45.186.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl
                          rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:63:3c:68:d1:93:94:22:fa:6d:30:bd:13:e5:c4:7b:05:42:e0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
        Validity
            Not Before: Apr  3 18:27:32 2024 GMT
            Not After : Apr  2 18:32:32 2025 GMT
        Subject: CN=3082010A0282010100E19287F95B87541A3A0FCB59B43A20D89412D8F042185F9149D40955DBDA541ACF140BB85E24CA03A7D6F7E9C2B4673C4E98966F8575E95210F75B8F2D7D1B649BC6123497F3281624DF426DF08347F6FE31757C7EB45AFA4D9E7A52D47F173CE438442F850719D26E684FC449F42BDE1CBA2192679CD46926565DDF6A1165D7B39E28F9F2185AEAF00F59F5378F8CEEA3955C95B9AE591762A540CD2C2F31FA28BEE055C1235AD9D24A00EB588B5FEA6124B09FFF9361884AA9FE32284578119DABB817AA9B16CFE768D454910008556565E0314508EB5CD26189A75E579C802B7EC145A557484C358EBF06ED41F2438AA2DF07675D7A9D82F01770E8FC45A70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:92:87:f9:5b:87:54:1a:3a:0f:cb:59:b4:3a:
                    20:d8:94:12:d8:f0:42:18:5f:91:49:d4:09:55:db:
                    da:54:1a:cf:14:0b:b8:5e:24:ca:03:a7:d6:f7:e9:
                    c2:b4:67:3c:4e:98:96:6f:85:75:e9:52:10:f7:5b:
                    8f:2d:7d:1b:64:9b:c6:12:34:97:f3:28:16:24:df:
                    42:6d:f0:83:47:f6:fe:31:75:7c:7e:b4:5a:fa:4d:
                    9e:7a:52:d4:7f:17:3c:e4:38:44:2f:85:07:19:d2:
                    6e:68:4f:c4:49:f4:2b:de:1c:ba:21:92:67:9c:d4:
                    69:26:56:5d:df:6a:11:65:d7:b3:9e:28:f9:f2:18:
                    5a:ea:f0:0f:59:f5:37:8f:8c:ee:a3:95:5c:95:b9:
                    ae:59:17:62:a5:40:cd:2c:2f:31:fa:28:be:e0:55:
                    c1:23:5a:d9:d2:4a:00:eb:58:8b:5f:ea:61:24:b0:
                    9f:ff:93:61:88:4a:a9:fe:32:28:45:78:11:9d:ab:
                    b8:17:aa:9b:16:cf:e7:68:d4:54:91:00:08:55:65:
                    65:e0:31:45:08:eb:5c:d2:61:89:a7:5e:57:9c:80:
                    2b:7e:c1:45:a5:57:48:4c:35:8e:bf:06:ed:41:f2:
                    43:8a:a2:df:07:67:5d:7a:9d:82:f0:17:70:e8:fc:
                    45:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:78:8A:A4:3B:E2:08:50:37:45:54:82:5E:2D:7E:8B:92:6C:C1:4C
            X509v3 Authority Key Identifier:
                keyid:41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:db:06:35:db:3e:d1:1b:95:f1:1b:b7:db:01:6e:0d:dd:74:
         d7:31:34:41:02:0a:02:b6:a9:52:fb:51:9a:47:ae:3a:95:57:
         91:f0:c2:8e:f4:de:92:26:d7:7a:7c:f0:90:0d:99:56:1e:c5:
         af:b2:c9:12:e9:a6:b8:bb:56:2e:42:9b:ee:cb:92:95:18:37:
         42:fc:0a:23:71:38:bf:49:50:6c:2a:fb:4a:3c:2a:7d:38:e5:
         09:54:b6:86:c7:8d:1d:29:11:fb:fe:26:8d:a9:df:7c:ff:44:
         8e:4f:71:f9:18:fd:99:db:bf:b5:f5:87:f3:28:1c:c8:f1:34:
         e9:46:03:c9:cc:05:ab:03:52:2c:cd:66:16:69:f7:79:eb:ba:
         48:1a:b0:30:58:26:4c:bc:b3:96:a7:26:60:78:0a:3b:bd:ec:
         65:c0:c9:18:3e:d3:77:b5:5b:26:e2:5d:a8:f4:39:dc:06:19:
         96:80:20:b8:a5:75:40:1c:0f:75:56:69:c7:95:01:24:3e:32:
         1b:2c:52:21:dd:c1:a0:64:eb:99:c7:84:cb:76:3c:ee:d2:21:
         6c:38:8d:b5:e8:63:49:99:a0:62:8f:08:79:96:2a:c9:a5:a3:
         7c:93:0b:9f:b0:f7:4c:32:62:5b:c0:31:bf:b5:44:e8:ac:bb:
         df:45:b3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:50 2024 by rpki-client on console-fra.rpki-client.org