Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/34352e3138352e3133362e302f32322d3332203d3e20323639333737.roa
File:                     34352e3138352e3133362e302f32322d3332203d3e20323639333737.roa (raw, json)
Hash identifier:          rqq0j0uB7n0iyv27Hbkk+lCRsVhr3EG3Uk6vERcBZhk=
Subject key identifier:   2C:2E:42:BE:17:F8:D4:49:AB:C9:E1:9A:17:02:24:12:C2:B8:D7:D1
Certificate issuer:       /CN=8A13F2C48B757DD40E0F43387960210FD56D3819
Certificate serial:       7AF2F3B94EA6649EFDECDFFDC6252768654424EF
Authority key identifier: 8A:13:F2:C4:8B:75:7D:D4:0E:0F:43:38:79:60:21:0F:D5:6D:38:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A13F2C48B757DD40E0F43387960210FD56D3819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/34352e3138352e3133362e302f32322d3332203d3e20323639333737.roa
Signing time:             Thu 15 Aug 2024 16:01:25 +0000
ROA not before:           Thu 15 Aug 2024 15:56:25 +0000
ROA not after:            Thu 14 Aug 2025 16:01:25 +0000
asID:                     269377
IP address blocks:        45.185.136.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/8A13F2C48B757DD40E0F43387960210FD56D3819.crl
                          rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/8A13F2C48B757DD40E0F43387960210FD56D3819.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A13F2C48B757DD40E0F43387960210FD56D3819.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f2:f3:b9:4e:a6:64:9e:fd:ec:df:fd:c6:25:27:68:65:44:24:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A13F2C48B757DD40E0F43387960210FD56D3819
        Validity
            Not Before: Aug 15 15:56:25 2024 GMT
            Not After : Aug 14 16:01:25 2025 GMT
        Subject: CN=2C2E42BE17F8D449ABC9E19A17022412C2B8D7D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5f:3b:a7:c6:74:1b:fe:91:b7:c8:fc:18:e1:
                    3f:78:32:72:64:72:e2:f6:df:f5:4e:bc:2d:25:d4:
                    fc:fd:a9:8e:6a:dc:de:f8:35:c1:95:fe:c5:57:fd:
                    f0:61:f0:61:2f:56:65:2c:76:fa:04:f2:66:b0:24:
                    c8:11:3f:fe:39:fa:7f:6a:15:93:28:99:0d:54:33:
                    5e:67:52:e7:41:52:32:55:51:c4:84:c5:2e:66:3e:
                    89:f0:05:f5:13:0b:0d:c3:59:e8:18:f1:98:5c:87:
                    ca:3a:97:5f:0a:37:d3:a3:be:86:a1:f1:e8:c6:f2:
                    d0:80:6b:74:93:54:e7:df:01:d5:1a:c0:4a:d5:65:
                    55:33:f4:27:25:05:0b:1b:29:1f:98:f1:55:dc:ea:
                    91:75:87:6b:7f:a9:0d:a4:b4:6d:1a:84:2c:93:cb:
                    50:df:71:39:68:c6:dc:21:7d:52:01:7d:fc:e0:58:
                    4e:38:54:f5:89:1f:5d:84:d7:38:b3:e0:7a:df:75:
                    ed:2b:90:84:44:88:d0:78:34:33:65:e1:d6:a0:79:
                    f5:ed:49:0e:f8:ec:ed:8a:94:16:e2:32:e9:c3:27:
                    f4:b8:28:10:c2:e2:e3:5c:da:c3:69:c7:62:f3:35:
                    f9:f8:f6:a4:66:83:f9:1a:4a:a9:77:06:ac:c4:7a:
                    80:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2E:42:BE:17:F8:D4:49:AB:C9:E1:9A:17:02:24:12:C2:B8:D7:D1
            X509v3 Authority Key Identifier:
                keyid:8A:13:F2:C4:8B:75:7D:D4:0E:0F:43:38:79:60:21:0F:D5:6D:38:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/8A13F2C48B757DD40E0F43387960210FD56D3819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A13F2C48B757DD40E0F43387960210FD56D3819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/34352e3138352e3133362e302f32322d3332203d3e20323639333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:ff:9b:8d:1a:b2:97:8b:7b:bd:59:cd:dc:94:0e:2f:ef:40:
         8c:38:50:bb:9e:a6:54:76:18:47:8f:fd:a6:4c:33:4c:06:57:
         19:60:22:6c:7b:3c:7f:13:d8:6f:ff:64:a9:b6:05:34:f4:60:
         b7:2a:09:02:83:fc:09:a1:c3:47:aa:ee:01:88:00:d2:f3:41:
         b6:f3:48:02:eb:8c:24:1f:af:3a:a9:e8:78:35:14:91:6b:96:
         13:06:ce:a9:7b:40:3d:92:f9:07:86:82:97:81:f8:ee:c7:37:
         33:b9:de:a2:ec:46:97:4d:9f:c6:8b:14:53:bf:02:61:55:0c:
         13:e6:75:99:61:e7:90:72:5b:7e:92:f2:25:5c:ff:42:78:1b:
         c3:e9:48:09:38:82:a3:f4:f7:38:a1:e3:b2:a9:7d:97:62:b7:
         24:7e:58:a2:59:b6:cb:ee:60:73:c1:ca:ac:9c:bb:5b:d8:2c:
         5d:bb:01:5e:b4:6b:e5:20:09:b8:f0:b0:87:74:c8:c9:fd:fb:
         87:5d:ba:82:bc:97:01:c9:24:07:ac:6e:9a:37:10:80:77:d4:
         82:d4:fb:b7:f5:c7:ff:55:10:e3:ad:4b:d6:65:c6:01:b8:f7:
         bf:d8:9a:15:2e:78:3d:77:5d:09:74:e9:dd:9b:88:d3:a8:6d:
         b4:e9:20:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:54 2024 by rpki-client on console-ams.rpki-client.org