Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/1/34352e3138352e39322e302f32322d3234203d3e20323639333830.roa
File:                     34352e3138352e39322e302f32322d3234203d3e20323639333830.roa (raw, json)
Hash identifier:          xiWIBw99IpWlpeGNsBHQz0isTwYBRN42wPTU1nmuW9g=
Subject key identifier:   7A:A0:2B:0F:61:25:7B:05:F3:EE:B4:61:EF:4A:23:6B:F7:38:D2:73
Certificate issuer:       /CN=FE39F9955E8FB9AE99003D780752796F38511F36
Certificate serial:       6B6463910D18A5B28F68DFA122EB76C47F8A9D97
Authority key identifier: FE:39:F9:95:5E:8F:B9:AE:99:00:3D:78:07:52:79:6F:38:51:1F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39F9955E8FB9AE99003D780752796F38511F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/1/34352e3138352e39322e302f32322d3234203d3e20323639333830.roa
Signing time:             Fri 05 Apr 2024 01:27:57 +0000
ROA not before:           Fri 05 Apr 2024 01:22:57 +0000
ROA not after:            Fri 04 Apr 2025 01:27:57 +0000
asID:                     269380
IP address blocks:        45.185.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/1/FE39F9955E8FB9AE99003D780752796F38511F36.crl
                          rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/1/FE39F9955E8FB9AE99003D780752796F38511F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39F9955E8FB9AE99003D780752796F38511F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:64:63:91:0d:18:a5:b2:8f:68:df:a1:22:eb:76:c4:7f:8a:9d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE39F9955E8FB9AE99003D780752796F38511F36
        Validity
            Not Before: Apr  5 01:22:57 2024 GMT
            Not After : Apr  4 01:27:57 2025 GMT
        Subject: CN=7AA02B0F61257B05F3EEB461EF4A236BF738D273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:20:2a:63:37:e4:2a:79:44:d9:73:16:f6:f4:
                    f5:09:70:bd:40:77:e2:33:06:74:0f:d9:90:16:b4:
                    0c:27:9c:2f:92:b1:8e:74:62:7f:f8:1b:31:54:06:
                    77:58:42:35:d0:8b:35:4f:8b:91:c7:4d:6e:8f:1d:
                    80:43:e1:a1:81:e1:c0:59:17:4b:e7:6c:0f:53:76:
                    55:d3:1e:0c:58:de:8c:e8:11:f1:68:64:c7:de:dc:
                    47:87:58:96:c9:7f:8f:2a:d4:82:5f:70:12:7e:89:
                    20:d6:c9:de:0d:29:52:66:ea:1e:30:40:5e:a4:1a:
                    04:21:ac:df:2c:91:53:ee:6e:79:3c:82:08:74:10:
                    4a:e4:60:06:9b:8f:78:9b:2a:3a:c7:3c:04:f7:3b:
                    53:a4:9b:1d:75:d8:a0:ae:99:17:8c:00:43:68:fa:
                    60:76:1c:26:da:92:aa:29:8b:30:75:92:e4:2c:f5:
                    52:79:4f:32:42:52:1b:b7:14:9d:ad:71:11:9b:d0:
                    8c:2f:3c:ef:9d:e8:71:e8:e8:f5:bc:19:d4:fc:85:
                    67:0a:44:e9:e5:21:c2:8e:f7:0f:78:94:a1:21:83:
                    db:6d:9f:93:f9:ba:b0:fa:ea:93:05:9c:ef:61:dc:
                    49:18:d2:4e:dc:76:97:85:45:b0:a3:51:db:d1:25:
                    10:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A0:2B:0F:61:25:7B:05:F3:EE:B4:61:EF:4A:23:6B:F7:38:D2:73
            X509v3 Authority Key Identifier:
                keyid:FE:39:F9:95:5E:8F:B9:AE:99:00:3D:78:07:52:79:6F:38:51:1F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/1/FE39F9955E8FB9AE99003D780752796F38511F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39F9955E8FB9AE99003D780752796F38511F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/1/34352e3138352e39322e302f32322d3234203d3e20323639333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:db:76:d6:e7:b6:a9:61:23:82:b5:75:28:f3:9d:68:98:70:
         71:1c:c9:f3:2c:ae:c2:86:d0:53:e5:22:4b:4e:d6:de:5b:7d:
         b6:63:94:6d:26:b4:16:11:f5:73:ad:df:e8:74:ad:b9:21:f5:
         a7:b0:40:d1:1b:5c:62:8a:6d:e8:01:78:24:a6:30:7f:6d:9a:
         84:87:bb:9d:ec:72:84:dc:c7:ca:e2:45:14:8e:ac:6c:34:2c:
         b6:26:2f:de:9c:15:d2:d0:c4:9a:79:1d:a2:98:ad:74:e5:c1:
         22:23:e8:bb:de:58:39:7b:c7:08:0d:67:12:42:13:7c:29:5a:
         ab:d8:e1:7b:32:d0:8a:aa:f3:5d:fa:1c:0c:26:2a:f5:1f:15:
         62:9b:c0:b2:69:87:af:01:60:b9:71:dd:52:91:cc:50:b1:cc:
         3d:fb:c9:37:48:63:86:04:16:f7:96:1b:15:2f:18:04:fc:cf:
         a9:0c:e5:e2:35:38:b5:40:64:64:ad:49:e8:11:e4:6f:66:7d:
         73:e1:40:a0:17:3d:e1:4a:1c:48:22:3e:5a:27:e0:6b:b5:c5:
         f5:96:fb:dd:e2:73:f1:e6:ec:69:e3:dd:d2:33:5f:12:55:25:
         b0:b4:45:b0:87:7d:99:3c:53:c4:be:54:3a:23:65:0b:51:40:
         ce:ab:35:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:09 2024 by rpki-client on console-ams.rpki-client.org