Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/34352e3138352e31322e302f32322d3332203d3e20323639333532.roa
File:                     34352e3138352e31322e302f32322d3332203d3e20323639333532.roa (raw, json)
Hash identifier:          hou5t3cBASttu78bokOkjVBxGuRI4d6kWI10tW4i/mA=
Subject key identifier:   1B:A2:BB:79:98:54:92:BE:51:50:55:F6:2E:43:5D:CF:E0:0D:BD:20
Certificate issuer:       /CN=C262C51AA4FA96E5486AC82A3D77C9C25E538063
Certificate serial:       1CA07038AD4271834F9EBB71DC0C8DC47EFB547F
Authority key identifier: C2:62:C5:1A:A4:FA:96:E5:48:6A:C8:2A:3D:77:C9:C2:5E:53:80:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C262C51AA4FA96E5486AC82A3D77C9C25E538063.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/34352e3138352e31322e302f32322d3332203d3e20323639333532.roa
Signing time:             Mon 15 Apr 2024 16:09:08 +0000
ROA not before:           Mon 15 Apr 2024 16:04:08 +0000
ROA not after:            Mon 14 Apr 2025 16:09:08 +0000
asID:                     269352
IP address blocks:        45.185.12.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/C262C51AA4FA96E5486AC82A3D77C9C25E538063.crl
                          rsync://rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/C262C51AA4FA96E5486AC82A3D77C9C25E538063.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C262C51AA4FA96E5486AC82A3D77C9C25E538063.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a0:70:38:ad:42:71:83:4f:9e:bb:71:dc:0c:8d:c4:7e:fb:54:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C262C51AA4FA96E5486AC82A3D77C9C25E538063
        Validity
            Not Before: Apr 15 16:04:08 2024 GMT
            Not After : Apr 14 16:09:08 2025 GMT
        Subject: CN=1BA2BB79985492BE515055F62E435DCFE00DBD20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e7:e0:9f:1e:b1:94:4c:60:26:91:96:8c:ea:
                    d4:7b:d9:da:71:2e:d9:57:13:26:c6:03:2d:6d:94:
                    a8:0d:92:97:1d:1a:3c:56:02:ad:8d:a9:4b:2d:12:
                    27:02:13:df:93:59:e7:18:96:59:42:60:56:8b:f6:
                    e8:e6:37:96:31:39:a6:5c:e1:b0:51:f0:b9:06:6d:
                    30:83:da:f2:c5:6c:6a:b2:1e:0f:67:7a:1a:59:03:
                    ca:e0:94:fd:9e:c0:93:39:e6:06:5e:4d:f7:47:0a:
                    87:17:08:20:f3:4d:97:90:c8:8b:3c:ce:c4:63:c7:
                    71:32:ed:26:89:ea:56:2f:99:b5:b5:36:fd:a7:a3:
                    fe:75:1a:fb:33:fa:4e:a0:7d:8b:a4:24:a9:91:6d:
                    e6:44:12:be:3e:5f:ac:78:c6:d5:41:7b:d0:ec:28:
                    1b:1c:c5:75:74:bd:a0:73:38:80:75:54:cb:22:90:
                    a5:01:fa:e0:df:6b:8b:45:8c:99:a4:ca:cb:af:05:
                    f9:5c:d3:3f:3d:ce:ab:d0:0e:33:cb:de:6b:94:64:
                    43:94:02:29:7e:8f:16:65:92:25:9d:a2:73:bf:81:
                    22:d4:e4:3b:65:23:ff:b2:2c:57:b2:ae:de:fd:f7:
                    e6:7e:cf:59:63:46:68:88:65:7d:27:6b:6f:9b:72:
                    bf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A2:BB:79:98:54:92:BE:51:50:55:F6:2E:43:5D:CF:E0:0D:BD:20
            X509v3 Authority Key Identifier:
                keyid:C2:62:C5:1A:A4:FA:96:E5:48:6A:C8:2A:3D:77:C9:C2:5E:53:80:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/C262C51AA4FA96E5486AC82A3D77C9C25E538063.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C262C51AA4FA96E5486AC82A3D77C9C25E538063.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5HyNGwspJf6N6bqC2AKu7RpBePbLEtNQbrRmd74tQt6/0/34352e3138352e31322e302f32322d3332203d3e20323639333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:f9:14:f5:43:1d:54:3a:08:e0:92:61:01:e7:34:22:eb:98:
         c5:fb:a6:92:e4:76:7d:82:a1:97:9a:25:e1:b5:b8:56:a8:38:
         0d:5e:e2:5f:60:ce:db:fd:93:4d:45:13:4e:a7:3f:1e:cb:db:
         ce:b4:3a:bf:ac:05:bb:ae:f2:6f:f9:fc:b0:ef:9c:5e:f5:35:
         ea:8a:48:69:ca:e7:36:91:db:e7:f6:65:cf:f9:7a:9f:8b:50:
         6d:17:75:3a:63:4c:6b:a5:9c:c4:3f:96:c9:af:df:af:79:81:
         03:c2:f2:f7:ec:4a:60:85:16:0c:fb:bb:63:32:12:39:af:23:
         06:7b:f0:c2:57:89:df:94:de:4c:a9:37:e8:e6:8c:05:66:3f:
         f7:d9:44:f9:c6:cf:80:76:86:79:dd:57:2c:d9:e3:df:7d:e5:
         ac:02:9e:88:6d:0c:a8:fe:08:2b:d2:52:fd:b4:85:9d:f1:1f:
         c4:b1:f5:0f:24:87:4d:2c:ad:9c:90:0f:68:ac:7f:3e:a2:81:
         1a:a7:5a:c6:17:34:96:21:f1:b3:ef:50:a3:da:4e:40:f5:a0:
         e3:63:b3:5d:3e:f3:ca:4f:a4:67:28:de:18:99:c6:dd:a4:68:
         1b:88:0b:fc:be:ce:d8:6e:ab:d2:08:0f:e2:d0:3f:8a:ae:51:
         3a:0d:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:05 2024 by rpki-client on console-fra.rpki-client.org