Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235342e302f32332d3233203d3e20323639363939.roa
File:                     34352e3139312e3235342e302f32332d3233203d3e20323639363939.roa (raw, json)
Hash identifier:          sXd+W07Hem9JPI5Cu9pKKzrsmdxRJlWP9ZrBBBR6SEg=
Subject key identifier:   D6:39:84:97:AA:61:70:E3:E1:48:65:D1:52:EA:79:1B:8F:C5:28:FC
Certificate issuer:       /CN=D7277992174B249B4D551A37C49F2DD4D7AA9968
Certificate serial:       37D9C47C29A7FF8C223960D35857E535910A2BED
Authority key identifier: D7:27:79:92:17:4B:24:9B:4D:55:1A:37:C4:9F:2D:D4:D7:AA:99:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235342e302f32332d3233203d3e20323639363939.roa
Signing time:             Thu 04 Apr 2024 07:19:55 +0000
ROA not before:           Thu 04 Apr 2024 07:14:55 +0000
ROA not after:            Thu 03 Apr 2025 07:19:55 +0000
asID:                     269699
IP address blocks:        45.191.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.crl
                          rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d9:c4:7c:29:a7:ff:8c:22:39:60:d3:58:57:e5:35:91:0a:2b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7277992174B249B4D551A37C49F2DD4D7AA9968
        Validity
            Not Before: Apr  4 07:14:55 2024 GMT
            Not After : Apr  3 07:19:55 2025 GMT
        Subject: CN=D6398497AA6170E3E14865D152EA791B8FC528FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:5d:7c:f9:35:e2:88:ac:19:12:c8:50:f0:
                    7d:47:36:cf:77:f3:89:4e:1f:17:9a:ae:52:50:cb:
                    49:07:7f:d7:48:7a:fc:b2:ee:92:a6:fe:5b:ec:55:
                    04:45:fd:c8:0a:e5:a2:4a:bf:41:98:88:46:34:08:
                    fd:88:b7:23:6b:f4:ca:3d:30:fa:5c:19:ee:41:62:
                    c8:eb:8a:6d:2a:f6:47:85:ff:97:69:80:34:f0:c2:
                    f0:8f:12:cf:c6:2f:50:43:0e:08:dd:8b:1d:c4:77:
                    44:d0:e4:34:eb:c7:e7:d5:a0:47:55:cc:d3:22:83:
                    80:2e:49:78:a9:c1:53:7b:5f:db:10:07:a2:42:9a:
                    da:0e:59:7a:13:27:49:60:37:54:c2:23:61:e3:89:
                    d7:da:07:ba:cd:c4:c5:87:2c:47:be:0f:1c:5f:a1:
                    c5:a0:34:41:4b:13:f7:8f:78:b1:03:85:01:f1:24:
                    cc:ba:67:a4:b8:e1:35:ab:a1:ea:5f:d7:b6:51:8f:
                    23:6b:ca:53:9b:ad:b0:bf:8a:92:61:60:0e:a8:82:
                    d5:32:b8:4c:eb:11:6e:0d:da:46:aa:30:ef:a9:17:
                    78:d4:bc:ac:ec:a3:4f:34:f0:16:3a:0b:15:86:d6:
                    eb:49:57:c3:71:eb:e5:0b:34:46:1f:05:cd:a4:1b:
                    2f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:39:84:97:AA:61:70:E3:E1:48:65:D1:52:EA:79:1B:8F:C5:28:FC
            X509v3 Authority Key Identifier:
                keyid:D7:27:79:92:17:4B:24:9B:4D:55:1A:37:C4:9F:2D:D4:D7:AA:99:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235342e302f32332d3233203d3e20323639363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:5d:b2:36:52:bf:4c:57:0e:f6:19:c0:7d:66:0c:c5:e0:3a:
         49:13:28:a1:bb:5e:32:ae:17:53:73:5e:bf:01:c8:a3:11:8c:
         84:66:ad:60:68:41:c1:ea:c9:1e:4f:fb:50:32:cf:32:b7:7e:
         e0:cd:f6:cc:d1:f3:9c:fc:93:57:87:98:2d:5f:f8:ad:e9:7b:
         b6:c3:82:d7:a1:a7:25:54:bf:e8:f2:9b:3e:9b:1c:73:1d:da:
         fc:9a:fc:7d:77:e2:3f:af:65:d4:d7:1d:2c:03:2d:cf:66:45:
         af:bf:45:02:c7:75:c3:3e:be:d9:2f:b8:2f:43:bc:98:03:c0:
         85:22:74:26:9a:c7:64:2d:67:e2:89:af:d1:26:10:b1:ce:33:
         ce:6e:da:e8:2f:81:e5:ca:7c:68:fe:ef:e9:08:77:3c:b0:9d:
         c4:fe:e9:24:2f:b4:b5:a1:f1:b9:d8:29:f5:47:c1:bf:a1:3b:
         2b:a2:6d:e7:d1:35:bc:70:74:cb:d2:15:dc:68:62:42:8b:24:
         a3:69:0a:94:4f:61:93:2e:82:13:2f:85:a2:9e:4f:b0:bf:af:
         df:a2:bb:25:d9:36:66:2a:3b:11:50:b6:60:43:95:17:6a:d6:
         b5:1e:fe:f6:f1:d2:f2:e3:2d:c6:c4:0b:01:9e:8f:d7:00:bb:
         16:b5:3f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:24 2024 by rpki-client on console-ams.rpki-client.org