Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/34352e3138362e38322e302f32342d3234203d3e20323639343136.roa
File:                     34352e3138362e38322e302f32342d3234203d3e20323639343136.roa (raw, json)
Hash identifier:          9z/3EVxC75LMMwP3vF3fleHL0uuV5+fGvKHGpInQqno=
Subject key identifier:   85:CB:47:E6:EF:16:EF:F3:25:A5:67:2F:D0:7F:07:90:5A:7B:C9:BD
Certificate issuer:       /CN=2431B91B2498F01C25C009C9345EE622B155100B
Certificate serial:       78C4049D8408CCD9B52AAAA899419627395D7035
Authority key identifier: 24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/34352e3138362e38322e302f32342d3234203d3e20323639343136.roa
Signing time:             Wed 30 Oct 2024 15:02:54 +0000
ROA not before:           Wed 30 Oct 2024 14:57:54 +0000
ROA not after:            Wed 29 Oct 2025 15:02:54 +0000
asID:                     269416
IP address blocks:        45.186.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c4:04:9d:84:08:cc:d9:b5:2a:aa:a8:99:41:96:27:39:5d:70:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B91B2498F01C25C009C9345EE622B155100B
        Validity
            Not Before: Oct 30 14:57:54 2024 GMT
            Not After : Oct 29 15:02:54 2025 GMT
        Subject: CN=85CB47E6EF16EFF325A5672FD07F07905A7BC9BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:0b:c9:72:7d:3b:cb:32:f3:13:e1:88:8a:
                    01:ab:df:ad:21:e8:2c:e6:bf:9b:b4:91:9b:44:2c:
                    b2:8e:ee:fe:44:19:69:ae:0b:02:c3:d5:7b:7d:d5:
                    bc:5b:80:c9:26:86:b2:2d:9a:37:1c:4f:0e:c1:bc:
                    9f:ca:dc:d3:4f:8c:2e:b8:7c:6f:6f:53:91:1d:cb:
                    56:34:41:69:e2:4c:50:af:04:39:03:87:8a:b6:7a:
                    a1:46:1f:e0:ca:94:ec:00:2f:5e:07:d4:16:3c:98:
                    0d:9a:c8:54:8a:b0:20:62:77:32:a8:86:52:15:e1:
                    b2:0a:22:d2:c2:36:18:36:79:54:0e:33:13:b8:b0:
                    56:a8:3b:74:15:24:e7:af:4d:04:00:b7:3e:7c:62:
                    8c:16:41:70:94:dc:63:a3:78:13:84:5b:12:72:8a:
                    94:3d:82:66:64:c3:fc:70:46:c4:fa:de:b2:be:a9:
                    93:46:54:1d:8d:4e:55:2b:4d:07:2d:6a:ad:50:83:
                    f2:8b:43:81:6e:2c:bb:15:81:f8:11:9a:18:4d:58:
                    90:2c:b9:0b:fa:86:d3:76:08:fd:6d:76:e5:1c:c7:
                    29:fb:cf:f9:2f:34:b3:f0:df:c4:2d:73:cc:e3:b2:
                    61:69:d2:7a:dd:74:62:93:06:d4:ea:00:c9:65:0e:
                    f3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CB:47:E6:EF:16:EF:F3:25:A5:67:2F:D0:7F:07:90:5A:7B:C9:BD
            X509v3 Authority Key Identifier:
                keyid:24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/34352e3138362e38322e302f32342d3234203d3e20323639343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:2b:52:c2:cc:b6:ea:df:c2:eb:15:17:e8:39:b1:07:66:55:
         96:ff:63:1b:eb:d3:d3:ee:0c:11:b6:5e:31:f5:e6:31:28:b9:
         db:fb:bc:e2:21:83:dd:cd:b8:95:14:e9:03:e0:cd:29:cd:44:
         9a:c6:77:df:db:42:b0:a7:8d:38:a1:d9:8e:87:64:19:fc:50:
         87:0d:be:df:23:af:ba:00:89:7e:cf:d6:19:bd:4d:8e:76:fa:
         e8:48:54:10:bc:62:3a:15:76:8c:5f:0b:71:a9:76:01:62:4e:
         b9:24:72:f3:97:b8:0d:0b:92:a4:83:41:53:17:c7:b7:ee:42:
         e5:96:51:42:72:05:30:15:b0:94:b2:ac:59:bc:18:c6:76:e7:
         eb:2c:b5:a4:8b:0e:c2:55:6a:68:f5:19:38:ff:8f:cd:e3:f7:
         6e:1c:ab:2f:f2:58:d7:c5:98:5d:c8:59:6d:be:a7:5a:5e:e9:
         dd:7a:15:d1:2b:c5:70:70:c9:4e:e3:46:80:03:cd:7f:54:60:
         23:0e:d5:b4:2b:18:19:96:51:77:99:74:4c:93:e2:d6:41:bf:
         be:25:7b:59:90:63:cf:ac:31:40:19:d4:08:6c:b2:c9:16:0d:
         59:13:08:62:79:ef:f5:7e:e1:a3:98:74:e0:12:9f:67:a2:63:
         00:66:8a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:53 2024 by rpki-client on console-fra.rpki-client.org