Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235322e302f32322d3232203d3e20323639363939.roa
File:                     34352e3139312e3235322e302f32322d3232203d3e20323639363939.roa (raw, json)
Hash identifier:          7lAsXimThfqIz6KBqcW9+mqm2MMvoLAxz+5duNnsoEs=
Subject key identifier:   4D:97:3C:FD:D2:F9:38:48:E0:88:BA:35:5F:08:71:EF:76:8C:D0:48
Certificate issuer:       /CN=D7277992174B249B4D551A37C49F2DD4D7AA9968
Certificate serial:       62A809C1618A8154F489A247FE9EF35CC3319A12
Authority key identifier: D7:27:79:92:17:4B:24:9B:4D:55:1A:37:C4:9F:2D:D4:D7:AA:99:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235322e302f32322d3232203d3e20323639363939.roa
Signing time:             Thu 04 Apr 2024 07:19:55 +0000
ROA not before:           Thu 04 Apr 2024 07:14:55 +0000
ROA not after:            Thu 03 Apr 2025 07:19:55 +0000
asID:                     269699
IP address blocks:        45.191.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.crl
                          rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a8:09:c1:61:8a:81:54:f4:89:a2:47:fe:9e:f3:5c:c3:31:9a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7277992174B249B4D551A37C49F2DD4D7AA9968
        Validity
            Not Before: Apr  4 07:14:55 2024 GMT
            Not After : Apr  3 07:19:55 2025 GMT
        Subject: CN=4D973CFDD2F93848E088BA355F0871EF768CD048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:2f:54:84:59:b4:eb:1b:56:1f:ee:40:09:
                    c5:bc:34:6c:97:f4:5b:2f:b0:4a:92:da:64:45:94:
                    d2:9c:55:90:bb:09:a4:5f:83:4d:ef:f1:6a:79:ba:
                    e7:e1:c4:e1:2f:e3:f2:0f:4b:12:d6:71:2e:ac:53:
                    41:b2:3b:3b:27:50:f2:89:d9:43:05:98:0b:ff:f1:
                    99:21:fa:db:97:6a:b3:1a:2a:61:43:33:39:dc:93:
                    33:ba:ff:63:66:87:10:23:f4:0c:69:a0:70:b2:53:
                    de:e5:e0:e6:57:58:fc:26:68:d9:c6:27:71:12:2c:
                    55:1a:72:90:5a:43:48:e8:0f:57:86:4f:f4:3b:5d:
                    40:bd:9d:3a:81:45:9a:24:c0:ca:6e:a8:62:ca:84:
                    74:17:87:f9:ec:f8:32:aa:1b:d5:81:d0:c3:3d:d1:
                    0c:b3:47:a3:d5:05:84:d4:d9:88:8d:56:4d:7f:2f:
                    43:b4:c7:b3:2b:e9:df:28:2e:c8:5f:30:85:83:d9:
                    e0:87:b3:53:9e:1b:8d:11:f3:d3:a5:f9:71:ee:37:
                    69:c1:ac:03:a0:c1:e9:b5:15:ff:fa:c6:7f:1a:b3:
                    e9:84:47:45:16:94:47:01:26:a9:58:f2:9b:e8:4a:
                    93:09:c5:11:07:0c:a5:2f:3e:4a:6f:ea:9a:67:cd:
                    f4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:97:3C:FD:D2:F9:38:48:E0:88:BA:35:5F:08:71:EF:76:8C:D0:48
            X509v3 Authority Key Identifier:
                keyid:D7:27:79:92:17:4B:24:9B:4D:55:1A:37:C4:9F:2D:D4:D7:AA:99:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235322e302f32322d3232203d3e20323639363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:60:fb:41:bf:b9:36:5b:11:04:8b:f5:42:31:1a:20:a4:09:
         98:d8:ad:df:56:02:d2:70:35:36:38:0f:f0:86:82:16:68:7f:
         cf:65:df:fe:57:db:f2:dc:7d:a4:2c:4f:36:f5:4b:bb:0e:4e:
         4c:3d:2b:89:15:b2:ef:ba:86:3c:7c:7c:fc:4a:c5:0e:cd:72:
         ff:b6:2a:76:64:28:49:9f:20:f5:bf:c8:09:d2:83:b7:f1:2d:
         84:9f:89:76:d4:68:45:78:ad:49:18:3e:67:d5:15:28:3a:fb:
         b2:fe:a4:72:be:43:b1:30:19:72:65:b4:c7:19:e2:27:6a:b9:
         93:ac:8b:86:93:f1:f2:f4:a4:36:83:02:a3:d7:72:1e:26:e6:
         0e:81:da:86:9c:1f:65:30:a2:b9:5e:a3:7f:7a:09:51:e3:3e:
         0e:fe:52:0a:5a:7c:54:23:e0:27:01:24:20:dc:99:a8:c3:7d:
         d6:61:37:ad:48:75:8f:b9:6b:b8:81:33:1f:01:49:aa:7c:d1:
         b3:1c:91:97:3e:85:55:13:5d:48:9e:23:96:a3:95:46:cd:0c:
         17:1b:e7:ae:eb:6a:56:b6:e0:a1:cd:24:76:55:ba:68:4a:0f:
         c8:3d:07:ad:bc:b9:c1:d0:ee:9e:57:a1:61:bd:f8:73:1f:d5:
         02:53:2f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:11 2024 by rpki-client on console-fra.rpki-client.org