Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/34352e3136322e3232302e302f32322d3234203d3e20323638353335.roa
File:                     34352e3136322e3232302e302f32322d3234203d3e20323638353335.roa (raw, json)
Hash identifier:          EjDl6q3UB3wiYA8LiAo2ZUctZXWqzHGnLy30yuU61S4=
Subject key identifier:   E5:19:FA:71:AE:C6:A5:48:C3:7C:09:B4:67:E4:8A:90:B2:80:0B:D2
Certificate issuer:       /CN=5279BD28B8A9B31948C48EBF854A92DF4766E490
Certificate serial:       38E5C8493976802FC022B37D7D774B8ECEC5A014
Authority key identifier: 52:79:BD:28:B8:A9:B3:19:48:C4:8E:BF:85:4A:92:DF:47:66:E4:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/34352e3136322e3232302e302f32322d3234203d3e20323638353335.roa
Signing time:             Thu 04 Apr 2024 04:59:55 +0000
ROA not before:           Thu 04 Apr 2024 04:54:55 +0000
ROA not after:            Thu 03 Apr 2025 04:59:55 +0000
asID:                     268535
IP address blocks:        45.162.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.crl
                          rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e5:c8:49:39:76:80:2f:c0:22:b3:7d:7d:77:4b:8e:ce:c5:a0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5279BD28B8A9B31948C48EBF854A92DF4766E490
        Validity
            Not Before: Apr  4 04:54:55 2024 GMT
            Not After : Apr  3 04:59:55 2025 GMT
        Subject: CN=E519FA71AEC6A548C37C09B467E48A90B2800BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:3d:8b:6c:64:2c:fc:06:8a:46:32:f5:6d:
                    76:a5:59:a6:77:9a:50:38:03:90:15:3d:8d:3f:46:
                    80:00:ad:16:51:fa:e0:fb:87:d3:c5:3c:31:1d:73:
                    4d:00:7b:52:4f:f2:5c:8d:b5:3d:9c:ed:eb:f9:76:
                    4e:ec:70:4e:bf:06:b9:67:25:81:95:12:a4:ef:bb:
                    f4:4e:18:8f:51:66:90:56:4c:22:5d:a4:97:15:94:
                    c4:69:57:00:cc:22:3b:7f:87:03:36:0f:10:90:e8:
                    24:ad:3f:f5:fd:c5:79:be:f3:80:22:0f:b5:de:9e:
                    01:6b:68:06:b5:7f:27:02:1b:f5:a8:c0:19:11:3d:
                    8b:63:8a:8f:86:0a:d4:53:52:d7:26:6c:14:4e:b7:
                    6e:eb:57:10:dc:b4:f3:6e:09:97:f4:2d:32:c2:f4:
                    f9:fc:c9:04:36:3c:82:d7:5c:29:30:07:e3:6d:15:
                    ca:75:b8:75:71:74:e9:32:e6:92:8f:55:fb:19:6d:
                    57:b7:34:a3:30:97:4c:89:3e:b7:70:72:a2:41:2d:
                    0c:f3:89:f7:f7:b6:c6:fa:a8:37:b8:3b:29:90:0a:
                    94:39:8e:9e:d4:86:6e:bd:80:4e:98:32:c3:65:ff:
                    5c:9d:ac:c6:c4:51:d0:c2:a5:40:fd:70:86:2b:85:
                    28:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:19:FA:71:AE:C6:A5:48:C3:7C:09:B4:67:E4:8A:90:B2:80:0B:D2
            X509v3 Authority Key Identifier:
                keyid:52:79:BD:28:B8:A9:B3:19:48:C4:8E:BF:85:4A:92:DF:47:66:E4:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/34352e3136322e3232302e302f32322d3234203d3e20323638353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:71:38:c7:fe:aa:95:44:29:e5:d3:ad:eb:b5:2a:ea:67:4c:
         92:e9:77:ca:3e:8b:51:0b:26:84:78:8a:76:9a:f1:98:49:31:
         d2:2f:c0:da:55:99:57:fb:aa:82:40:24:af:76:a7:40:45:a3:
         eb:7b:be:33:3e:b6:42:0e:d0:28:46:05:5d:94:54:03:47:da:
         1b:10:af:2c:18:97:33:f5:a2:24:b0:2a:34:fe:8c:a9:f9:62:
         84:e2:37:6b:ae:62:10:8c:c6:73:fa:4c:7a:b8:cc:d9:b1:7c:
         a4:7d:2f:05:bb:aa:d2:b5:a6:21:e6:11:cb:69:fd:d1:77:7a:
         16:8d:af:31:3c:11:e9:b0:76:ea:ad:49:b3:0d:8a:8d:89:94:
         c8:d5:c4:1a:56:7b:b0:73:5c:63:83:d0:91:31:b5:d4:04:28:
         b2:b8:54:d0:68:3b:67:70:9d:b2:5f:76:e5:ed:e5:49:d9:7e:
         96:4f:ae:6a:42:c5:d1:b5:12:11:ba:7f:12:e1:a0:88:f6:9a:
         02:e4:af:e8:db:77:78:6a:37:5a:b1:fa:54:ce:5f:6a:b1:d4:
         17:99:17:67:e7:3f:f2:7a:6d:6d:08:b7:36:70:98:b9:94:48:
         5f:03:2f:f6:26:fa:13:df:dd:7f:79:bb:1f:d2:10:32:06:63:
         c8:d0:35:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:03 2024 by rpki-client on console-fra.rpki-client.org