Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/34352e3136302e3132302e302f32322d3234203d3e20323638343138.roa
File:                     34352e3136302e3132302e302f32322d3234203d3e20323638343138.roa (raw, json)
Hash identifier:          BWx4hwWzXKivnFOo2ttLPrxNJvFvgSGhkXPHbmtfVZw=
Subject key identifier:   B2:85:98:B5:2B:5E:22:27:D4:8D:CF:F2:08:B8:00:77:4E:EE:27:FB
Certificate issuer:       /CN=0CEEA1DDF076523B39CF76E704244FA173114D8F
Certificate serial:       67CCE59A03FC5AC74455C27CC4CA2A308AE4261A
Authority key identifier: 0C:EE:A1:DD:F0:76:52:3B:39:CF:76:E7:04:24:4F:A1:73:11:4D:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/34352e3136302e3132302e302f32322d3234203d3e20323638343138.roa
Signing time:             Thu 04 Apr 2024 16:05:37 +0000
ROA not before:           Thu 04 Apr 2024 16:00:37 +0000
ROA not after:            Thu 03 Apr 2025 16:05:37 +0000
asID:                     268418
IP address blocks:        45.160.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.crl
                          rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:cc:e5:9a:03:fc:5a:c7:44:55:c2:7c:c4:ca:2a:30:8a:e4:26:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CEEA1DDF076523B39CF76E704244FA173114D8F
        Validity
            Not Before: Apr  4 16:00:37 2024 GMT
            Not After : Apr  3 16:05:37 2025 GMT
        Subject: CN=B28598B52B5E2227D48DCFF208B800774EEE27FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4b:c2:b9:a9:3a:4d:3a:e1:c6:33:1f:ad:64:
                    1a:5d:a5:c1:43:62:cc:ec:ea:20:e1:8a:06:3c:50:
                    c7:a5:45:8d:9f:0b:b9:f7:9a:fe:83:c2:b4:59:1d:
                    b5:8d:a4:4d:75:c3:e3:22:ed:e0:c7:03:96:71:a7:
                    d1:61:4f:90:37:cb:15:13:dc:40:75:87:e3:67:2c:
                    da:c0:7a:d6:61:02:ec:01:0a:a6:3a:09:9c:00:e1:
                    29:2b:39:36:c3:54:51:98:e9:09:fa:5c:d6:e2:0f:
                    a4:c9:1d:3d:57:d7:49:ae:3b:50:70:5a:5c:f1:48:
                    80:cf:72:5a:bd:70:f1:e8:c6:7b:20:3c:63:d9:8e:
                    eb:d7:61:8c:11:97:0f:67:6d:f5:18:31:13:b1:24:
                    c5:56:f3:7a:45:3d:db:82:d7:a8:dd:af:0a:dc:50:
                    1a:10:96:cb:1f:05:bb:eb:d2:1f:3f:09:3f:3e:07:
                    c8:a0:a5:0c:5a:7a:8e:4b:2a:71:e3:61:6c:9d:f9:
                    3b:ac:84:3c:54:96:da:5d:2b:a0:7c:5e:19:01:26:
                    39:81:29:39:a2:9b:0b:11:33:2b:9b:b4:87:8f:bc:
                    32:96:a4:54:88:e5:73:2b:9a:ff:5e:c6:54:ee:0f:
                    3c:87:22:de:02:e8:32:69:79:26:39:a1:7b:59:92:
                    a9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:85:98:B5:2B:5E:22:27:D4:8D:CF:F2:08:B8:00:77:4E:EE:27:FB
            X509v3 Authority Key Identifier:
                keyid:0C:EE:A1:DD:F0:76:52:3B:39:CF:76:E7:04:24:4F:A1:73:11:4D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/34352e3136302e3132302e302f32322d3234203d3e20323638343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:3a:d2:45:80:b8:ca:20:04:e1:82:ce:0e:59:ca:97:77:f2:
         ac:11:16:7f:31:19:55:50:53:52:74:2e:52:67:d6:63:c7:ba:
         e1:7e:fa:7e:8a:a6:bd:7b:72:25:ac:9f:7d:1f:17:cf:27:06:
         de:9c:70:ea:0c:c4:1a:3c:db:7b:4d:9b:98:f8:8e:5c:c5:f4:
         dd:6c:6f:9a:48:7d:38:33:51:93:b5:30:28:db:25:2e:c4:59:
         23:b1:b4:37:6e:80:23:ca:a9:87:ff:24:9b:aa:65:4c:6b:8e:
         1b:3e:c5:3c:eb:a4:bc:e2:06:4f:32:40:f6:85:05:14:1f:3d:
         8d:5b:a7:6d:b0:1b:f5:db:08:5d:d9:1e:98:a3:ab:ca:bc:84:
         ac:d4:49:3d:7a:ab:7e:25:6c:30:a6:05:43:09:6e:8f:6c:4f:
         ca:c9:e6:cd:33:c5:56:fc:ea:84:fb:53:ab:db:4b:71:ac:97:
         31:d3:78:9b:17:0f:07:b2:24:34:fe:52:c3:18:de:33:e6:b4:
         4a:4a:db:ac:01:20:a2:08:cb:0f:ca:49:c2:6d:6c:a6:93:f8:
         80:3b:1a:07:c4:02:59:c9:ee:dc:55:d8:e7:63:a9:a4:5a:97:
         0e:9d:2d:a5:e4:c5:46:12:d2:c3:dc:ed:85:2c:aa:80:78:95:
         dd:a6:96:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:19 2024 by rpki-client on console-ams.rpki-client.org