Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa
File:                     34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          uklFHEq2jLngTK++vrSnsSMrTdmqUVmW0gIyckKRtIM=
Subject key identifier:   30:52:0B:62:8A:D2:90:46:EB:4A:31:EF:AE:B9:5E:F5:FA:DF:EC:D1
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       6AC21B65799EAEC0C5C1774937A3A4E70C8AFABF
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa
Signing time:             Wed 03 Apr 2024 18:30:05 +0000
ROA not before:           Wed 03 Apr 2024 18:25:05 +0000
ROA not after:            Wed 02 Apr 2025 18:30:05 +0000
asID:                     262595
IP address blocks:        45.162.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c2:1b:65:79:9e:ae:c0:c5:c1:77:49:37:a3:a4:e7:0c:8a:fa:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Apr  3 18:25:05 2024 GMT
            Not After : Apr  2 18:30:05 2025 GMT
        Subject: CN=30520B628AD29046EB4A31EFAEB95EF5FADFECD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:29:8f:68:ad:fe:3c:3f:7f:4e:4b:06:15:
                    6a:6d:a1:1e:7d:b8:5e:83:29:54:18:20:19:ea:a5:
                    67:28:e4:f4:1a:e8:6a:7c:1c:fa:59:8e:67:67:b8:
                    3e:8d:25:b7:f6:5e:db:ae:b0:d8:89:d9:ef:95:28:
                    fa:66:32:a7:fe:0d:b7:b4:b2:18:6b:7c:5a:03:f6:
                    e7:8d:c1:79:86:93:d3:55:fd:50:c4:ac:72:52:c5:
                    d0:be:ce:ea:d9:4a:53:f4:f5:90:b5:b5:28:31:ee:
                    e7:af:8c:47:68:30:6e:41:c1:a9:71:8b:97:8c:6b:
                    e8:0b:39:4b:f3:06:17:94:15:c2:64:ea:a7:8f:05:
                    ef:96:da:50:1c:9b:02:16:41:b1:df:8b:b6:57:7c:
                    d7:7d:5b:de:5a:df:e7:02:03:71:9d:e5:bd:89:70:
                    5c:f0:60:87:d8:87:64:03:fa:3e:65:5f:0c:18:cc:
                    f0:fa:ec:fa:0b:6b:9f:9d:cf:3f:87:92:45:11:31:
                    47:9e:c3:7d:76:0e:cc:3f:2b:b1:b1:44:14:f6:bb:
                    e6:29:c0:4f:f0:92:e5:f8:9d:e8:06:67:f3:97:96:
                    14:fd:8b:fa:38:cd:92:5a:db:d5:bf:37:96:16:9d:
                    3a:36:7e:de:8c:e5:05:57:43:10:18:bf:02:63:28:
                    27:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:52:0B:62:8A:D2:90:46:EB:4A:31:EF:AE:B9:5E:F5:FA:DF:EC:D1
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:f3:3d:55:77:ac:32:cb:5b:b0:a1:4b:f7:62:44:23:93:87:
         97:86:d5:85:20:92:06:b6:1f:9e:74:d6:6d:58:79:59:5d:e3:
         61:d5:5a:99:12:7c:04:81:e7:f4:69:6f:74:13:20:0a:cd:dc:
         28:87:08:08:8a:23:94:7f:81:cb:f9:9e:a9:d1:4e:b5:4b:e5:
         55:c5:37:5d:00:67:a7:86:ef:42:35:60:9c:ff:8a:23:dd:e6:
         87:b4:a5:47:fa:5c:1e:59:d5:ad:17:a5:5f:2f:b8:df:36:ec:
         f0:51:c1:ec:f2:b9:4a:7c:11:7a:3d:32:16:c6:b7:09:eb:ce:
         26:c9:8c:bc:eb:1b:a8:ed:f9:d1:72:b9:2e:f4:20:29:9b:65:
         68:cd:43:98:62:e7:53:14:dc:c6:49:79:3e:28:fd:ad:7b:7b:
         86:ef:27:a2:8a:f8:05:c8:83:3e:4b:26:6c:a2:0c:e2:bc:57:
         ef:07:dc:24:c1:72:c4:39:27:c5:cf:83:6c:3c:37:42:1f:e8:
         29:8b:33:b7:d6:91:8a:a0:e2:73:75:8c:e7:a5:0b:3a:5c:b4:
         a9:e0:b7:ca:db:11:b0:b7:c3:f7:8e:4f:47:d1:d9:a7:d0:60:
         4f:a1:5e:dd:f6:16:64:06:f3:fe:4d:f1:23:e0:ed:b7:34:56:
         f4:5d:1f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 05:42:32 2024 by rpki-client on console-fra.rpki-client.org