Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/1/34352e3138372e3234302e302f32322d3234203d3e20323639343930.roa
File:                     34352e3138372e3234302e302f32322d3234203d3e20323639343930.roa (raw, json)
Hash identifier:          U3NxXO9AAQ7dFnUXmrs1ncNX22KhsScKI0qhiipv1X0=
Subject key identifier:   20:0A:A7:75:E0:5F:07:E2:BF:58:DE:E1:3D:D0:19:37:6B:43:4B:66
Certificate issuer:       /CN=E6BB3427C16E46B4B4CCFA033D4EB241714F97D1
Certificate serial:       3F7E21171B9DC2294B1B97737B8E9D128ED42A61
Authority key identifier: E6:BB:34:27:C1:6E:46:B4:B4:CC:FA:03:3D:4E:B2:41:71:4F:97:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6BB3427C16E46B4B4CCFA033D4EB241714F97D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/1/34352e3138372e3234302e302f32322d3234203d3e20323639343930.roa
Signing time:             Thu 04 Apr 2024 21:55:41 +0000
ROA not before:           Thu 04 Apr 2024 21:50:41 +0000
ROA not after:            Thu 03 Apr 2025 21:55:41 +0000
asID:                     269490
IP address blocks:        45.187.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/1/E6BB3427C16E46B4B4CCFA033D4EB241714F97D1.crl
                          rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/1/E6BB3427C16E46B4B4CCFA033D4EB241714F97D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6BB3427C16E46B4B4CCFA033D4EB241714F97D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7e:21:17:1b:9d:c2:29:4b:1b:97:73:7b:8e:9d:12:8e:d4:2a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6BB3427C16E46B4B4CCFA033D4EB241714F97D1
        Validity
            Not Before: Apr  4 21:50:41 2024 GMT
            Not After : Apr  3 21:55:41 2025 GMT
        Subject: CN=200AA775E05F07E2BF58DEE13DD019376B434B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:60:fc:12:b0:8d:70:78:33:e9:14:aa:e8:7d:
                    1b:f4:da:e1:e7:49:a9:3b:ac:81:57:5b:a2:1e:f1:
                    27:ba:93:5a:0d:04:21:5c:7c:29:a6:7e:4a:2f:3e:
                    63:5b:95:6b:31:8c:2a:a7:4f:fb:91:31:6e:ea:e9:
                    01:12:44:79:00:e7:9d:a1:08:66:9f:d2:65:2f:be:
                    aa:7c:c2:e2:63:0a:9e:9b:19:8e:7f:ac:e8:40:f1:
                    99:dc:f5:a7:72:61:65:8e:d6:b9:6b:6e:0a:c5:6e:
                    83:91:e2:b2:82:71:75:1c:b0:b8:2c:df:da:64:37:
                    d4:87:1a:79:18:45:3e:b1:04:fe:da:02:95:c7:d9:
                    4c:02:b7:ca:9f:c0:65:e4:7e:ea:20:39:60:64:03:
                    51:9b:d5:f9:24:0c:10:3a:0a:fa:08:cf:f7:81:d9:
                    ff:2d:13:4c:e1:13:d3:7e:95:c8:da:be:67:c6:d5:
                    28:61:e9:18:8e:d6:74:11:72:77:54:27:a6:a6:e1:
                    e1:20:07:d3:f3:bb:1c:1f:ea:8d:0c:21:af:d9:3e:
                    e0:06:16:74:8f:e7:04:7a:c5:69:2f:9a:fe:90:ba:
                    25:d4:3b:2c:6b:68:2b:91:a3:65:04:2e:1b:28:28:
                    cc:fd:58:71:86:ff:73:3a:4e:d1:13:89:af:d1:b8:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0A:A7:75:E0:5F:07:E2:BF:58:DE:E1:3D:D0:19:37:6B:43:4B:66
            X509v3 Authority Key Identifier:
                keyid:E6:BB:34:27:C1:6E:46:B4:B4:CC:FA:03:3D:4E:B2:41:71:4F:97:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/1/E6BB3427C16E46B4B4CCFA033D4EB241714F97D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6BB3427C16E46B4B4CCFA033D4EB241714F97D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/1/34352e3138372e3234302e302f32322d3234203d3e20323639343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:09:81:1d:31:de:fa:44:e5:36:a6:c8:de:66:a0:9f:92:59:
         41:f2:b0:1e:46:74:69:b7:94:75:98:27:83:74:91:43:bd:14:
         30:16:c0:28:5e:8b:ac:4a:98:ae:e9:1d:a2:e3:a3:2f:31:ee:
         d0:ef:a3:4b:7d:ae:61:fd:65:c0:03:42:4d:7d:09:c8:d8:e9:
         07:fc:07:d1:0e:93:c8:ee:dc:fa:63:3d:6f:61:88:d8:62:74:
         f9:93:7e:05:95:e3:f2:3e:b7:57:b6:90:6d:7e:8c:84:d4:4e:
         2c:3a:6c:9f:a3:54:d0:06:39:5c:8f:93:cf:3c:74:da:b6:9d:
         5b:d5:45:e2:51:6b:aa:b5:d0:58:be:4e:51:11:17:40:48:27:
         54:27:68:e1:ae:f3:0b:74:ac:7b:40:14:6c:0d:8c:20:b5:95:
         7d:17:d7:21:11:96:f8:27:f4:22:b5:80:e2:2d:91:00:95:e6:
         20:9a:11:a8:c1:d4:a8:f8:e1:dc:25:d0:c7:c0:a2:ee:04:39:
         82:40:7d:87:9d:5c:82:0d:73:ae:97:e9:bc:62:bc:07:9c:f9:
         7b:9f:f0:87:54:81:52:87:1d:94:aa:ee:48:4d:9e:5c:59:02:
         24:c8:ba:ba:ad:45:d1:57:8d:4b:0d:6b:60:15:a2:7e:56:a3:
         65:c7:8d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:26 2024 by rpki-client on console-ams.rpki-client.org