Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/34352e3138342e3138382e302f32322d3332203d3e20323639333437.roa
File:                     34352e3138342e3138382e302f32322d3332203d3e20323639333437.roa (raw, json)
Hash identifier:          nwGXjy17dqAcHtvb6xWRbgiR/f3Ii1nLiImmtwcxBwc=
Subject key identifier:   2F:5A:BD:EC:AD:A0:E0:FA:EB:83:5F:F6:2F:AA:64:BE:46:AE:AC:9B
Certificate issuer:       /CN=37EB8EE765648941F5940F0A601E6B1CA23382F4
Certificate serial:       4E2A12C72D1B067E3241E559F167F0E12180116F
Authority key identifier: 37:EB:8E:E7:65:64:89:41:F5:94:0F:0A:60:1E:6B:1C:A2:33:82:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EB8EE765648941F5940F0A601E6B1CA23382F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/34352e3138342e3138382e302f32322d3332203d3e20323639333437.roa
Signing time:             Sat 09 Nov 2024 23:40:35 +0000
ROA not before:           Sat 09 Nov 2024 23:35:35 +0000
ROA not after:            Sat 08 Nov 2025 23:40:35 +0000
asID:                     269347
IP address blocks:        45.184.188.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/37EB8EE765648941F5940F0A601E6B1CA23382F4.crl
                          rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/37EB8EE765648941F5940F0A601E6B1CA23382F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EB8EE765648941F5940F0A601E6B1CA23382F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2a:12:c7:2d:1b:06:7e:32:41:e5:59:f1:67:f0:e1:21:80:11:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EB8EE765648941F5940F0A601E6B1CA23382F4
        Validity
            Not Before: Nov  9 23:35:35 2024 GMT
            Not After : Nov  8 23:40:35 2025 GMT
        Subject: CN=2F5ABDECADA0E0FAEB835FF62FAA64BE46AEAC9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:88:52:32:c8:0e:0f:7f:c9:39:74:d2:f6:
                    6e:95:d2:74:16:42:de:bd:51:54:24:32:f6:fd:3e:
                    dd:6f:b0:74:13:39:1e:55:00:3b:06:8f:4f:03:a2:
                    b4:67:be:c6:6c:ce:9d:c4:6e:08:48:e1:ed:c0:8a:
                    a4:a2:50:25:e6:14:b1:11:16:c2:9c:db:e1:1f:ee:
                    57:e3:82:79:c3:28:19:80:e8:af:d8:f4:95:d6:56:
                    24:3b:a9:61:5c:56:8c:dc:e2:6a:15:06:db:86:46:
                    70:ee:92:dc:30:70:f5:e3:d9:b3:48:f2:e1:0b:c6:
                    c3:9e:de:f9:28:2b:2d:58:67:cc:e3:6c:0d:08:fb:
                    e6:eb:4e:14:cc:66:e3:09:d8:8d:fd:b7:bf:25:45:
                    01:d0:b3:7f:1f:27:05:37:c6:54:47:a2:ea:56:68:
                    0d:02:9d:ed:99:20:a2:4b:12:08:e4:86:c9:be:33:
                    47:ff:54:ee:ea:83:08:99:a1:bf:fe:36:9b:de:4d:
                    39:95:39:66:87:d3:db:25:96:d6:c1:a7:c5:0a:dc:
                    dd:bb:f6:17:22:be:49:19:5f:94:d1:20:29:ca:c9:
                    03:3d:97:0b:05:79:d0:95:c3:2b:fe:d5:7a:01:8e:
                    ce:ac:84:1a:ad:59:74:15:4b:0e:6e:f4:84:61:07:
                    ca:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5A:BD:EC:AD:A0:E0:FA:EB:83:5F:F6:2F:AA:64:BE:46:AE:AC:9B
            X509v3 Authority Key Identifier:
                keyid:37:EB:8E:E7:65:64:89:41:F5:94:0F:0A:60:1E:6B:1C:A2:33:82:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/37EB8EE765648941F5940F0A601E6B1CA23382F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EB8EE765648941F5940F0A601E6B1CA23382F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/34352e3138342e3138382e302f32322d3332203d3e20323639333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:dc:43:77:f2:2f:88:9c:a9:89:e7:7b:e2:e0:f5:25:d7:ca:
         cf:2d:46:89:14:3b:d7:6a:5d:48:de:c7:50:08:56:c4:1b:eb:
         d0:79:37:56:69:b3:a5:95:27:cc:2b:bb:49:4c:43:47:15:bf:
         c5:a4:c5:78:c2:ba:a6:97:fc:c8:59:ae:cf:fb:48:36:67:a9:
         84:cc:70:02:e1:77:74:85:ad:39:b8:d0:47:f6:c8:5b:03:98:
         29:4d:2f:dd:5d:f1:8a:b2:a3:4d:35:51:b1:4e:a6:15:f7:05:
         a0:b0:7e:82:d5:1f:ef:9c:98:f8:ba:a3:a7:be:90:64:96:ee:
         3a:81:f2:c9:0c:2a:61:11:fc:99:f3:c7:68:1b:9a:a3:14:37:
         47:a0:b8:60:18:b4:19:2e:5b:cf:93:cf:35:ed:5b:b7:99:10:
         4b:fc:a8:c3:63:a1:69:e0:eb:06:9a:19:61:00:9e:7b:a2:20:
         7b:95:09:1e:aa:d3:7d:8d:26:60:23:ad:91:5c:93:a3:d7:b2:
         cf:fb:de:25:3e:b6:de:50:99:0e:a9:7d:8a:c8:f2:27:b5:78:
         43:b8:2a:bc:5a:c8:ed:b2:87:0e:86:77:e1:d4:60:ce:5b:4e:
         5b:ee:82:e4:c0:a3:b4:51:73:8e:e0:37:85:fd:87:ec:d3:62:
         be:34:ab:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:25 2024 by rpki-client on console-fra.rpki-client.org